Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A3EAB2488B11EC9F575B41D8A014CE.roa
File: 39A3EAB2488B11EC9F575B41D8A014CE.roa (raw, json)
Hash identifier: Jrp2zK1au6iPcAkWgVsQ2eCQMMebJcC9olXNaRs7xtQ=
Subject key identifier: 83:C9:21:63:84:B5:0D:A3:A5:1B:63:4A:E5:C8:FD:94:47:7F:6A:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A3EAB2488B11EC9F575B41D8A014CE.roa
Signing time: Thu 18 Nov 2021 16:18:55 +0000
ROA not before: Fri 19 Nov 2021 16:18:51 +0000
ROA not after: Sat 19 Nov 2022 16:18:51 +0000
asID: 139879
IP address blocks: 156.247.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3690 (0xe6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:18:51 2021 GMT
Not After : Nov 19 16:18:51 2022 GMT
Subject: CN=61967cef-d547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:c1:99:6d:38:09:e2:c8:b9:67:99:10:67:
5e:e4:9b:00:66:8f:59:65:71:a4:ad:37:a3:8e:fc:
df:e7:c4:76:89:66:af:3a:72:de:80:3c:a0:f5:83:
7a:59:13:53:43:10:b0:38:88:11:8c:a5:89:2b:29:
21:92:87:2e:c1:1c:1f:18:99:47:83:9b:d4:e8:66:
dd:3a:53:69:07:99:3f:34:f4:fe:8c:1d:ff:cf:27:
bd:87:15:dc:c9:c7:8f:5e:ab:0f:63:5a:51:15:ed:
c0:8c:9f:f6:fc:25:f2:1d:64:fb:0c:cf:39:ee:15:
82:f4:d1:b2:e5:20:0f:3a:e2:63:0a:c9:c9:76:c5:
07:1f:d9:4b:6f:8e:77:76:0a:33:c7:04:9d:08:49:
1a:67:66:85:e7:dd:fe:48:38:d8:f0:e6:bb:ac:fc:
ca:53:3d:03:87:53:ac:8a:6f:d9:de:c9:f8:6e:9a:
95:ec:06:82:b6:bf:f3:db:e0:ed:8e:47:ab:4f:e9:
f4:38:70:20:ae:6b:0b:8a:2f:64:e3:b8:0c:57:90:
1c:61:ff:e6:a1:ea:e0:4d:0e:9a:26:9a:50:94:18:
43:1c:10:0e:8d:5d:a1:bd:4d:1b:a7:07:ef:ff:26:
38:72:67:24:68:b3:c2:46:a8:79:f9:a2:b5:96:61:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:21:63:84:B5:0D:A3:A5:1B:63:4A:E5:C8:FD:94:47:7F:6A:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A3EAB2488B11EC9F575B41D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2a:53:b1:fc:a0:a1:ef:d0:11:b0:f0:9d:68:87:f2:b0:ec:
d9:56:0e:a4:60:17:22:74:a2:98:a4:4f:ce:74:20:73:4d:71:
aa:e4:ce:75:21:93:86:5b:3a:33:33:9d:e5:b2:f4:ce:f0:dc:
1e:8e:6a:96:0f:22:7b:91:c7:d0:d1:e2:05:99:85:00:d3:96:
9b:f8:4b:2b:f2:14:b4:f4:49:4a:6f:8c:a0:67:fc:94:ca:1c:
9b:34:6d:06:72:5f:58:da:0e:c5:57:51:d3:e9:55:8f:24:e0:
89:92:23:9c:73:78:b8:36:a8:e0:f5:ed:b6:82:18:53:92:0f:
73:bb:50:96:26:f8:7d:78:79:c8:7d:f6:c4:80:74:3b:78:b4:
0d:28:93:12:50:0f:08:ae:6d:96:4c:0e:96:16:fc:3d:31:f5:
99:4e:32:fc:ba:db:f6:11:ed:4e:68:eb:46:f2:c4:47:d4:95:
89:65:5a:56:44:af:cb:be:47:d3:3a:e5:f1:35:5b:13:3e:5d:
63:2f:8d:79:97:25:ab:2e:5e:3b:ec:b1:a2:86:6e:6d:64:7d:
7c:e0:29:cc:a1:50:87:dd:4a:58:db:d4:37:5c:e4:51:d0:da:
cf:2e:92:68:17:93:39:be:9c:b4:68:2b:e2:9b:fc:6d:5e:6e:
91:f1:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org