Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EDA4B56488811ECA58EB73AD8A014CE.roa
File: 2EDA4B56488811ECA58EB73AD8A014CE.roa (raw, json)
Hash identifier: IJ5hEM169h+n0vkBTBoEjTpkSaPT9FlNQgZCUmRKQ30=
Subject key identifier: 53:9D:6D:D8:72:A1:85:CF:E5:B9:A3:99:76:94:A8:51:23:8A:33:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EDA4B56488811ECA58EB73AD8A014CE.roa
Signing time: Thu 18 Nov 2021 15:57:08 +0000
ROA not before: Fri 19 Nov 2021 15:57:04 +0000
ROA not after: Sat 19 Nov 2022 15:57:04 +0000
asID: 139879
IP address blocks: 156.249.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:57:04 2021 GMT
Not After : Nov 19 15:57:04 2022 GMT
Subject: CN=619677d4-4c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:20:eb:5c:a0:7c:e8:fa:10:72:7a:0b:d0:
7b:c9:de:cc:b8:ea:c5:2a:84:dd:3e:dd:0b:68:ed:
af:c0:81:32:76:ef:c7:ad:47:4b:9f:ff:27:4d:2b:
05:3e:f5:06:d2:e9:09:66:c5:21:56:3a:54:64:60:
c7:77:98:22:29:cd:ed:63:3e:17:cd:3a:43:5b:5f:
46:5e:8f:6c:4e:42:a8:7e:d1:d9:a9:40:1e:b2:b5:
5d:74:08:c2:a7:5c:f0:c4:cb:81:86:bf:7d:45:3c:
59:f8:1b:c6:2c:7f:00:1e:61:ea:12:26:f8:90:55:
a1:7d:f3:52:48:8e:6f:92:85:e2:77:20:43:2d:47:
d6:6a:99:2e:cf:e6:41:d9:de:d1:b5:e4:91:01:9f:
a2:7c:2b:6f:4b:84:ee:f9:73:f4:54:9f:66:56:e9:
d0:ae:a4:fe:1c:20:80:9f:70:36:8d:e3:ed:be:67:
8b:19:be:5a:d7:d7:e8:6d:a9:1a:f8:c4:16:b4:05:
08:90:ab:98:3d:d7:75:50:65:a2:14:d9:d0:a1:f4:
1d:27:8a:96:ed:87:58:2b:d0:f9:c0:74:9b:9e:26:
5d:4f:85:30:4b:6d:1b:e0:18:9d:04:2d:29:67:b6:
4b:91:6e:5f:ea:45:de:58:ef:cf:74:67:dc:d3:34:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:6D:D8:72:A1:85:CF:E5:B9:A3:99:76:94:A8:51:23:8A:33:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EDA4B56488811ECA58EB73AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:35:6b:e0:1a:77:26:61:dd:ad:ed:5a:fd:0c:65:23:ba:3f:
e2:24:da:e0:e8:28:e4:35:7b:34:d6:b4:0b:24:03:91:a4:ca:
23:4f:23:5f:8d:f7:7a:0a:da:f2:96:d4:02:07:9d:af:76:21:
e3:31:67:9b:ba:3a:e5:5e:9d:d3:09:a3:29:2c:35:d7:5d:60:
16:04:25:2b:26:e0:e6:57:b6:ff:3d:9a:c3:a9:c0:9c:7b:fa:
5f:d5:c7:da:c2:a2:e5:28:26:9d:5c:9d:91:13:78:10:be:30:
2b:33:8e:e9:5c:2a:20:8f:78:ff:8a:cc:b2:a4:68:64:22:a3:
f5:d3:52:d6:28:3a:1c:14:9e:42:75:6a:ec:4a:6b:48:50:c0:
30:4a:1d:fc:ea:5c:0e:2d:12:a1:58:3d:5d:0c:34:0d:0d:06:
77:25:92:3e:58:01:02:a7:b6:d4:c7:4a:56:a4:ae:a4:c7:ec:
7a:0e:45:9c:aa:15:9b:97:86:74:74:84:69:0e:67:bf:b3:56:
d5:0b:b6:3a:86:21:50:b6:65:96:c3:5e:a8:1e:af:e9:2a:df:
74:fa:70:42:91:e9:f8:fe:76:ed:e1:c6:85:4c:bb:32:26:76:
d5:80:23:6d:46:38:e0:8a:e1:ce:9f:34:1f:9f:95:79:56:49:
d6:9c:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org