Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2129C6F6391C11EC9A282D6AD8A014CE.roa
File: 2129C6F6391C11EC9A282D6AD8A014CE.roa (raw, json)
Hash identifier: xHqfSwXUHy6skelOFQgHHsWOALUfWnvW3kaJ1fooIqg=
Subject key identifier: 64:87:34:2F:92:FE:7C:D5:D1:65:8D:22:F1:85:25:8B:20:F9:54:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2129C6F6391C11EC9A282D6AD8A014CE.roa
Signing time: Sat 30 Oct 2021 00:55:52 +0000
ROA not before: Sat 30 Oct 2021 00:00:49 +0000
ROA not after: Sun 30 Oct 2022 00:00:49 +0000
asID: 139879
IP address blocks: 156.249.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 00:00:49 2021 GMT
Not After : Oct 30 00:00:49 2022 GMT
Subject: CN=617c9818-21f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:86:2b:73:16:55:4a:33:c0:da:15:7d:9b:
e1:f1:c0:5b:55:fc:de:ce:36:01:d0:fb:ec:84:fe:
8d:11:02:88:12:ef:db:0a:28:16:7b:b5:d9:e6:23:
4a:ec:68:81:83:72:85:88:91:8b:bc:9d:ba:19:9b:
cb:4a:0e:6e:83:25:3b:77:39:96:d9:b4:25:e9:c6:
2a:e7:7f:6c:c9:33:6d:e0:a5:29:45:d6:47:c3:3f:
94:08:37:03:15:90:1a:58:7e:00:56:b4:eb:16:ae:
84:f6:b4:78:fb:0e:ff:fc:5c:47:39:48:cb:da:6c:
c6:3f:11:db:36:b5:59:a2:c7:30:cc:ea:38:2e:86:
37:3a:cf:23:ea:88:69:04:0c:b0:fb:a9:ff:15:de:
64:89:e2:fa:8a:a4:aa:d1:6e:6b:48:87:4a:ff:a2:
7c:59:48:db:03:c9:70:1f:b8:ec:35:39:64:cb:40:
55:33:bf:dc:cf:72:af:25:25:b9:3d:eb:9a:36:2b:
e4:d9:02:ec:80:fe:2e:2b:11:77:1f:e8:ce:60:ae:
d9:da:72:e3:34:e9:e0:4e:4c:59:f8:19:b7:14:17:
a4:27:24:5e:b8:1e:92:d4:0f:94:74:22:5d:b6:8a:
5f:dd:75:9f:a3:0e:62:12:7c:2a:ae:0e:d2:88:8c:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:34:2F:92:FE:7C:D5:D1:65:8D:22:F1:85:25:8B:20:F9:54:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2129C6F6391C11EC9A282D6AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4c:f6:71:1a:a4:6e:59:86:33:67:29:8b:7e:de:f0:aa:52:86:
95:7f:db:63:84:54:47:06:43:a4:2c:bf:ab:d8:51:22:da:3e:
49:82:e0:ae:67:63:ac:7a:fb:f1:97:ed:3d:f4:b9:ba:ec:85:
1d:6b:26:17:7c:c9:d9:ed:6d:57:f6:b7:4d:8c:db:c5:19:b8:
0d:1c:d9:c6:ce:43:ee:6b:c4:25:bd:56:62:b2:f4:d2:24:05:
c7:dd:db:8c:3c:a3:96:6c:09:01:1f:4e:8d:df:cd:c2:1e:22:
15:6b:ed:6e:fa:b0:05:3c:69:1e:4a:14:31:92:2b:3a:b8:c8:
cf:a0:56:8a:73:52:2c:41:f8:80:98:43:24:6b:d1:57:db:f3:
c0:4c:51:f2:65:d0:71:b2:39:89:cd:1c:1f:a5:8b:e5:1c:ae:
06:92:1d:7a:f3:5d:54:b5:5f:27:04:66:20:2c:84:c1:79:49:
98:dc:90:5d:d2:da:c7:bc:a1:82:29:42:4f:83:8c:d3:9a:41:
94:25:30:59:dd:4b:a7:69:21:10:09:7e:24:63:1f:35:37:a8:
ce:ee:0b:b0:ff:69:03:f5:51:f5:36:20:d3:ac:8a:e4:84:18:
57:0a:bb:13:06:31:f1:64:6a:9b:26:42:6a:7a:52:f8:1b:7c:
79:d2:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org