Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322EFF4E488411EC99ADDF31D8A014CE.roa
File: 322EFF4E488411EC99ADDF31D8A014CE.roa (raw, json)
Hash identifier: E7hBoBUpOi+UwYc9MphN1bn3RpXgPSLB3QrlnHVgMvQ=
Subject key identifier: EE:DC:A4:13:70:7F:EC:32:55:49:57:77:43:6F:BB:A4:A3:0C:47:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322EFF4E488411EC99ADDF31D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:28:36 +0000
ROA not before: Fri 19 Nov 2021 15:28:32 +0000
ROA not after: Sat 19 Nov 2022 15:28:32 +0000
asID: 139879
IP address blocks: 156.231.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:28:32 2021 GMT
Not After : Nov 19 15:28:32 2022 GMT
Subject: CN=61967124-7a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:62:3f:8a:42:13:e0:dc:60:0d:1e:1c:f2:
18:26:33:00:94:2c:82:9e:cc:13:75:4b:17:33:ce:
1c:14:52:9d:fd:fe:88:8c:a9:bd:56:2e:d5:62:a6:
a4:bc:ab:2c:3a:25:c0:21:bf:0e:0e:25:85:a2:12:
6e:b5:98:34:1b:f8:f2:c3:6d:37:59:c2:26:26:a7:
f5:14:9c:3b:60:fc:12:21:9a:5c:9c:62:26:70:c7:
a4:37:30:3c:d1:24:99:50:54:b4:5e:13:42:91:b5:
97:e8:70:ca:b2:01:65:59:ae:4a:a9:ba:e5:b3:1a:
57:cf:15:03:f2:0d:b2:ec:f7:c5:da:a2:70:1d:dc:
79:da:f9:b6:61:16:08:ed:c5:12:e7:be:e6:e6:a4:
18:f8:56:b5:b5:3b:92:ad:ae:ae:d8:99:87:2f:95:
cb:4a:7e:a0:a6:55:b5:9b:73:a0:bc:32:0e:5a:ef:
24:8d:2e:2a:81:cf:5b:7d:8c:b5:d3:c3:75:88:60:
ca:a8:f5:df:e4:44:07:d1:84:10:dd:7d:fd:53:0c:
b8:db:c5:c9:2f:00:52:1b:6e:da:0f:8d:8d:51:ef:
46:c5:b0:62:c2:5c:a5:d6:38:77:7f:ec:3e:c3:04:
b4:be:af:49:fc:14:52:a9:ef:09:14:a3:d2:7a:2b:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:A4:13:70:7F:EC:32:55:49:57:77:43:6F:BB:A4:A3:0C:47:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322EFF4E488411EC99ADDF31D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
Signature Algorithm: sha256WithRSAEncryption
99:48:82:88:81:fa:9e:9d:ca:14:d9:ff:db:1b:d6:d5:f2:bb:
a1:87:af:81:63:e7:ff:54:6a:9e:7b:54:35:5f:7e:ff:2f:8c:
6a:ee:55:1c:91:4e:b4:d3:0b:b6:7a:cb:6c:db:c3:94:08:95:
a8:e8:c1:06:2b:f6:53:d5:82:ce:cc:10:a6:9d:52:29:26:bb:
01:96:d9:88:76:25:d8:03:c9:99:1a:56:30:b0:e6:22:8d:2f:
1a:32:b7:b4:a0:88:09:cf:30:bd:8f:30:43:2f:11:5b:04:ed:
6a:21:c7:a1:63:1d:fa:fa:76:fa:2b:56:13:a3:ec:dc:46:1b:
41:28:ea:b6:5a:7c:de:1f:a4:5c:3f:5d:c9:d0:fe:17:66:93:
a2:f6:59:2d:0a:b1:13:ed:d0:86:c3:b5:fc:83:8a:96:b1:06:
90:00:b5:ad:c7:f3:0e:b0:f0:86:c1:0b:76:5f:60:d1:1c:02:
81:22:fe:c8:a5:07:fc:51:95:0c:66:e6:76:a0:d2:84:30:cb:
29:dd:32:fb:bc:c9:4a:8b:a0:42:5e:a2:c3:bc:54:ec:f7:cf:
dc:a4:5a:58:e1:7c:ab:c1:57:5d:79:66:72:5f:bc:a4:95:70:
af:f9:98:ad:d0:e0:6b:97:5c:7d:21:60:9e:b7:a4:ad:62:8c:
ae:98:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org