Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44F85C1A488411ECBE752A32D8A014CE.roa
File: 44F85C1A488411ECBE752A32D8A014CE.roa (raw, json)
Hash identifier: mz0k2+C5QrmKPys7qnEXEBewsai1WvmiXTrBHzi7vL8=
Subject key identifier: 8E:92:F7:E3:E2:1B:E1:11:42:4F:BC:60:8A:FF:E0:8E:EC:5F:06:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44F85C1A488411ECBE752A32D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:29:07 +0000
ROA not before: Fri 19 Nov 2021 15:29:04 +0000
ROA not after: Sat 19 Nov 2022 15:29:04 +0000
asID: 139879
IP address blocks: 156.247.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:29:04 2021 GMT
Not After : Nov 19 15:29:04 2022 GMT
Subject: CN=61967143-18ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:f3:76:fb:bd:ff:12:53:c6:eb:43:87:6d:
ad:5e:d4:29:4c:dc:2c:9d:5b:31:7e:7e:c0:12:4e:
68:5b:73:32:f6:7d:48:93:9c:f0:fd:8a:16:df:85:
6c:69:51:a5:66:6f:4c:a6:7b:87:37:a4:42:03:ef:
4b:21:c1:76:f2:59:9e:c6:21:c0:0d:c2:44:3b:7e:
48:ca:16:60:a2:46:08:fd:cf:8a:48:77:be:01:cc:
ac:0c:a2:9f:95:71:1c:17:57:cd:40:66:02:22:54:
83:72:be:65:5c:08:9a:18:c8:a6:ce:44:74:37:70:
bd:51:62:0f:3e:3f:df:a8:86:4a:6f:e5:c7:3d:6f:
eb:4a:29:da:4d:0f:76:fc:42:bb:d2:e0:2b:3b:ab:
77:6d:7b:ac:52:8a:0e:ae:d2:f5:e7:60:7a:8c:3d:
04:04:f2:29:49:93:69:b3:c5:37:a6:05:c9:c6:bc:
66:17:cf:80:b1:1d:bd:0c:c8:42:0e:8b:10:7c:37:
5e:1e:57:2d:ea:05:23:56:05:6a:ee:5d:16:e5:cb:
82:7a:31:2b:f2:96:f5:e9:fa:bc:b0:63:dc:9e:07:
fb:7c:27:6c:e2:d8:c6:84:7d:63:a6:9e:41:49:7e:
5d:22:9d:0c:c0:12:45:99:66:cf:c8:bd:03:9d:b1:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:F7:E3:E2:1B:E1:11:42:4F:BC:60:8A:FF:E0:8E:EC:5F:06:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44F85C1A488411ECBE752A32D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.138.0/24
Signature Algorithm: sha256WithRSAEncryption
74:af:bc:4e:b7:68:c9:39:c5:74:e6:9c:d8:06:a6:91:ee:bf:
07:d6:76:a2:38:00:3c:b7:c9:ed:96:70:45:a8:52:31:99:3f:
ec:c2:32:8e:07:8f:e0:22:91:ab:5d:72:da:36:44:77:fe:c0:
e4:28:f6:cd:89:b7:4a:52:b1:83:9c:b6:68:cd:d4:ba:30:b6:
66:13:81:8a:88:a0:25:c2:5e:c9:f8:4a:6a:9d:1d:54:2e:36:
8a:db:3e:30:fa:66:34:e0:d5:36:dd:cc:8b:0e:32:44:ee:08:
12:4a:5e:f9:e5:78:da:c2:a6:1b:5b:0d:bb:29:48:d2:6c:e9:
51:ec:a8:9b:cf:a4:12:12:35:2f:d1:93:1d:f1:41:35:3f:9c:
77:83:e3:9e:48:ed:44:ff:07:c3:25:de:c9:d2:9e:53:20:b2:
21:06:84:a1:d4:11:67:49:18:58:b5:24:a7:b0:c7:d4:e0:19:
89:16:c1:be:3b:89:01:f0:4e:a5:06:73:a4:2d:24:5e:58:1d:
0c:c2:28:d1:67:5f:58:0c:62:56:59:7c:05:1a:66:72:51:05:
e9:c2:d8:de:4c:6a:3a:7a:93:aa:39:87:5b:88:cc:b3:36:b3:
84:2d:53:fc:e6:4c:11:8e:cb:d8:67:23:e7:22:f5:ec:f3:b9:
14:ac:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org