Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6F0200488B11ECA8373441D8A014CE.roa
File: 2C6F0200488B11ECA8373441D8A014CE.roa (raw, json)
Hash identifier: MMfLULZcytZ/vOXmwOyZAs5GcLPmRLVGojUbln8cQac=
Subject key identifier: 50:41:EB:DD:D7:E4:36:D8:D8:08:67:96:82:99:7C:7E:5A:46:4C:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6F0200488B11ECA8373441D8A014CE.roa
Signing time: Thu 18 Nov 2021 16:18:32 +0000
ROA not before: Fri 19 Nov 2021 16:18:29 +0000
ROA not after: Sat 19 Nov 2022 16:18:29 +0000
asID: 139879
IP address blocks: 156.231.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:18:29 2021 GMT
Not After : Nov 19 16:18:29 2022 GMT
Subject: CN=61967cd8-c94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:8a:23:15:d5:fa:8e:05:8b:84:38:b7:54:
de:cf:62:38:82:b7:08:f8:95:0c:45:05:0d:6c:88:
60:3c:b5:68:88:2f:0d:7f:06:fd:cf:db:cf:a3:fd:
0a:d0:e4:5d:7d:10:bd:1b:25:3b:36:dc:39:15:7c:
3c:10:73:bc:4d:0b:63:27:ed:50:31:dc:ba:9f:84:
c5:73:0a:d5:15:1d:3f:51:d7:c1:d1:b8:1e:a4:f4:
2f:d0:62:90:51:49:5c:69:75:fc:9b:86:ca:9a:d3:
ce:6c:1a:5b:76:d8:83:31:d8:3d:4f:65:6e:e1:21:
ad:02:da:76:c9:05:81:27:72:57:61:eb:64:76:68:
a6:b0:ed:80:5c:88:6f:75:98:07:f9:75:49:60:f0:
15:c6:96:8d:7b:7c:80:03:60:e1:17:ba:41:1b:87:
14:28:1f:1b:0b:11:b3:4e:62:89:d9:5b:2f:fc:92:
7a:11:b1:ce:04:72:95:27:6e:65:8b:74:54:7d:8b:
eb:aa:ef:5f:01:7e:95:46:22:15:ac:c0:f3:4e:c8:
21:74:88:36:de:96:d3:31:3e:8d:8d:be:1d:ba:21:
a9:b8:47:b8:95:82:b6:79:ae:7d:85:7c:23:a1:cd:
99:90:ba:dc:f8:9c:6c:cf:b3:9c:4f:df:ad:10:84:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:EB:DD:D7:E4:36:D8:D8:08:67:96:82:99:7C:7E:5A:46:4C:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6F0200488B11ECA8373441D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d0:d3:98:0e:cb:95:75:95:86:99:34:cf:01:55:11:8f:c6:
de:cf:21:8b:4f:18:65:93:f9:47:3f:3b:83:c9:9d:45:04:95:
f8:59:a5:19:04:dc:28:27:a8:d1:b9:f3:b3:c9:96:9d:94:db:
bb:90:e7:9a:40:17:f5:01:63:35:99:9e:48:80:9a:ad:92:1d:
54:2f:f6:38:ce:ea:a1:88:a7:85:a8:34:1e:bc:1c:b8:b3:2e:
5e:b9:c2:c3:26:13:20:25:37:79:48:46:45:92:f0:47:95:6e:
7e:a9:85:dc:b2:de:d3:c6:2a:1a:17:77:b8:65:f9:3c:f5:32:
af:de:fd:3e:9b:c9:00:62:51:e9:ba:52:3a:4e:b3:c6:7a:47:
ec:02:c1:fd:ce:7d:80:de:f0:fe:48:a1:9d:b8:10:a8:88:b7:
62:9a:52:81:f3:b5:10:b2:c7:6f:3f:1d:60:56:63:f5:fd:23:
3d:09:ed:fa:6f:6a:2f:85:90:74:ee:5c:42:af:12:96:bc:bd:
48:bf:c0:4e:0f:84:fa:aa:12:a8:a7:53:d0:10:bd:2b:1f:68:
25:12:00:d4:cc:de:6a:0f:fd:1d:d4:64:d6:14:e8:4f:cd:b4:
e6:0c:58:55:14:ec:58:0f:10:f7:ba:ef:ec:5b:19:05:4b:72:
d9:b7:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org