Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30BDCFB8488511ECA4842834D8A014CE.roa
File: 30BDCFB8488511ECA4842834D8A014CE.roa (raw, json)
Hash identifier: KjwgI2mBI5s/b4BfPv+rPq0v8JJW4TRRNEB0CSJIf9E=
Subject key identifier: 60:D3:EA:11:F4:BD:47:06:5C:32:A6:E5:C7:29:DF:B5:11:E0:1F:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30BDCFB8488511ECA4842834D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:35:43 +0000
ROA not before: Fri 19 Nov 2021 15:35:39 +0000
ROA not after: Sat 19 Nov 2022 15:35:39 +0000
asID: 139879
IP address blocks: 156.231.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:35:39 2021 GMT
Not After : Nov 19 15:35:39 2022 GMT
Subject: CN=619672cf-88e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:9a:bc:2a:48:1d:12:0c:a6:f1:1d:c3:9b:
cd:69:c7:bc:d4:bc:f4:fd:6c:1e:87:31:d0:b5:a0:
9a:d4:94:41:c5:30:4b:4e:d4:d0:1c:8c:c5:29:be:
5b:1f:cd:41:09:8b:82:9f:c0:1f:11:bf:9b:cd:30:
b9:9c:a8:ce:5f:31:ca:c6:b8:3a:38:0e:ae:b8:94:
06:8f:07:16:b1:82:97:4e:0e:9c:f5:71:77:0a:9a:
34:15:ad:55:98:a8:d8:fc:c6:6c:5d:10:0e:62:b0:
0e:67:2d:d6:db:51:ce:ae:40:1d:f9:ef:30:34:c2:
1c:2e:b0:5b:ce:8c:ec:26:63:c9:56:14:f0:7b:7e:
cc:3d:34:aa:b3:66:7a:01:a9:f1:cf:64:26:5d:57:
00:f7:77:4a:9b:26:28:d7:98:4a:dc:c3:f3:7b:93:
7a:be:ad:df:45:18:20:09:a1:07:e4:9f:46:55:5f:
b3:75:fa:1f:a7:0b:39:44:20:af:04:85:21:b6:48:
03:80:f8:a6:e8:12:78:6a:17:e2:58:74:47:2d:3b:
ce:3e:e0:aa:07:9d:bb:6e:8e:6f:7d:a9:4c:48:8d:
85:b4:2f:52:da:10:e8:e2:15:16:15:2e:33:c9:40:
c1:c0:6b:71:20:6c:31:9c:47:f3:76:0f:2d:6a:1c:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D3:EA:11:F4:BD:47:06:5C:32:A6:E5:C7:29:DF:B5:11:E0:1F:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30BDCFB8488511ECA4842834D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.149.0/24
Signature Algorithm: sha256WithRSAEncryption
55:73:97:90:c8:f1:34:77:07:9c:1a:f0:0f:74:8d:2a:a8:0c:
2d:17:88:d8:63:ac:02:d9:fa:25:53:f0:13:00:6b:35:4b:b7:
8d:0c:f0:bd:bc:56:4a:1d:fc:64:28:81:18:fc:7d:c9:72:51:
40:35:8f:cd:8f:92:42:b2:aa:21:99:b6:22:53:f5:91:09:5d:
26:f6:c0:19:6b:04:ed:d1:56:09:49:98:a6:b9:c2:b5:0d:fc:
d5:25:31:6e:8d:05:de:6d:12:25:00:88:a4:84:69:13:01:96:
7d:70:59:32:7b:fc:de:30:ce:1a:73:c7:09:6f:35:61:0e:d7:
bf:02:c0:ae:6d:97:7d:f6:e0:b1:dd:72:a2:0d:dc:43:48:b2:
28:a4:4e:cf:b5:83:e2:d8:62:3c:a4:f9:c9:f8:49:a7:bf:49:
0e:37:93:96:e3:14:fe:be:90:ca:d2:3b:ec:6e:cc:2b:77:59:
5f:f7:19:46:b5:35:c8:1e:e9:6c:3d:73:6e:49:32:bd:09:53:
2a:c9:2b:12:0a:86:ef:ce:27:3b:18:03:d1:f6:e3:d8:66:3c:
2d:99:34:c7:81:0f:16:b4:13:1c:7a:a6:e0:5d:59:56:ed:5a:
5b:ae:f8:d7:1a:b7:61:21:b7:8d:cb:53:1a:62:28:db:81:98:
9c:ec:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org