Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E677720488411ECB029A931D8A014CE.roa
File: 1E677720488411ECB029A931D8A014CE.roa (raw, json)
Hash identifier: le2gH0H9UY9DQF4dIapURy1gzM0OkAovjkhIUc1DYrc=
Subject key identifier: 35:91:29:89:3B:48:F3:C7:FB:59:4A:2F:84:90:45:E7:84:5F:D8:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E677720488411ECB029A931D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:28:02 +0000
ROA not before: Fri 19 Nov 2021 15:27:59 +0000
ROA not after: Sat 19 Nov 2022 15:27:59 +0000
asID: 139879
IP address blocks: 156.249.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:27:59 2021 GMT
Not After : Nov 19 15:27:59 2022 GMT
Subject: CN=61967102-caf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:d1:dd:25:4b:da:16:35:38:0f:d0:3f:00:
97:60:f7:4f:fd:4a:9d:70:0f:04:91:aa:2c:44:2d:
a6:6d:56:e2:96:42:39:ea:c8:6c:9a:59:d5:d3:35:
33:2e:4b:a6:f9:ea:68:30:82:49:9a:b5:9b:ed:33:
75:eb:09:14:eb:20:e3:3b:86:70:00:35:d9:85:7a:
47:17:aa:e7:40:c8:e4:f4:c5:48:3e:44:65:7a:25:
6a:60:cd:ea:21:54:ec:be:07:c6:65:1b:86:c8:0e:
cc:a5:fc:ac:d8:9d:46:7d:42:fe:44:f6:59:26:3d:
8e:68:4f:93:6b:c8:8e:fe:af:5c:05:bf:76:6a:c7:
5a:00:fc:5b:15:d6:87:f9:06:dc:51:85:99:ca:8d:
4c:ba:41:c3:e5:b7:e0:06:db:00:85:d0:d3:49:ac:
e2:55:ec:31:41:62:fd:b7:e1:d6:d2:c4:ce:1e:0e:
af:ba:71:e2:6b:96:a1:54:90:72:b3:33:f2:be:33:
50:3f:36:40:03:95:b6:1b:7f:32:22:e5:87:ea:ed:
34:fb:42:89:a8:cd:ea:f9:c3:b7:19:76:4d:ee:db:
aa:54:ac:c5:87:54:f2:c3:84:86:1e:b9:f1:b1:b2:
d5:c0:dd:cc:d0:6c:93:4a:6b:ca:eb:5d:cd:f0:55:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:91:29:89:3B:48:F3:C7:FB:59:4A:2F:84:90:45:E7:84:5F:D8:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E677720488411ECB029A931D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.136.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e1:d1:c1:93:f9:3a:42:21:5c:f4:08:b7:b3:16:3f:43:3b:
93:30:42:37:c1:77:f6:b6:29:49:21:b0:bb:a5:d3:7d:3a:6b:
0c:79:89:7c:07:30:6f:79:94:4c:3d:cd:44:cd:f0:8f:e7:42:
10:40:29:1a:e0:40:89:e0:4f:21:f5:0b:7a:cc:5a:dd:27:38:
29:42:a6:93:cc:53:9d:d8:95:1f:12:b1:e8:43:69:d2:96:1a:
14:7c:0d:6f:38:68:3e:81:a5:10:76:01:4c:2d:76:62:04:26:
8f:94:7b:e5:e1:41:97:e6:61:82:ac:20:79:1f:5f:5b:71:6a:
6f:be:fe:f2:aa:38:49:46:7a:45:e6:0e:6c:7e:43:23:89:02:
f7:74:53:da:11:fd:a2:3f:e1:4c:4f:2d:df:14:0d:73:da:82:
01:97:5a:d9:f0:44:3a:42:29:1e:47:22:af:1e:35:8b:74:dd:
ba:64:28:7f:e0:a5:0c:ec:7c:17:8d:44:47:21:e0:66:a0:39:
d2:c0:90:12:8c:e2:99:89:45:ee:7b:6e:c4:8f:8d:f9:15:96:
9c:7c:a2:81:89:fb:c7:76:c4:bd:d2:1d:ea:c9:3d:14:af:22:
00:dd:a9:93:ce:48:55:67:e7:53:26:66:73:14:84:44:4d:23:
3d:d7:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org