Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E075E40488511EC9F4A6734D8A014CE.roa
File: 4E075E40488511EC9F4A6734D8A014CE.roa (raw, json)
Hash identifier: l4K8TNJY2uTT5ypD0xMpv9ZFNCMzEVXHpISLpy3uMII=
Subject key identifier: 8C:1B:A1:19:3F:FD:69:E5:D3:DD:1A:A6:85:C9:27:27:38:D2:F0:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E075E40488511EC9F4A6734D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:36:32 +0000
ROA not before: Fri 19 Nov 2021 15:36:29 +0000
ROA not after: Sat 19 Nov 2022 15:36:29 +0000
asID: 139879
IP address blocks: 156.249.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:36:29 2021 GMT
Not After : Nov 19 15:36:29 2022 GMT
Subject: CN=61967300-3581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:58:a5:49:37:71:57:83:e3:c3:25:09:62:
7e:12:05:89:5c:93:f9:05:8c:64:4a:04:07:03:e8:
3f:92:94:e0:83:e3:be:51:d5:c3:b2:99:6a:5d:f5:
3e:25:8b:ac:e5:e2:1a:5c:3d:57:48:73:c8:91:43:
6e:cd:41:44:2a:c7:27:71:d0:94:fa:9b:e2:6f:68:
cb:da:e7:47:8c:25:0d:80:4e:8c:b1:27:1a:5d:4f:
42:a7:34:be:d6:67:f9:a9:9e:9d:af:5f:ce:55:7a:
52:54:e4:12:19:ad:e8:e0:26:c0:f3:9d:96:33:2a:
68:b7:f1:59:67:7c:8e:d7:c9:d5:2e:db:69:63:a4:
32:92:84:ae:ac:c8:69:71:1a:95:23:30:48:d2:cf:
51:ad:e3:cc:05:17:90:59:c3:eb:1c:92:a6:dd:81:
24:40:f3:7f:72:83:cd:7c:6d:8a:7e:0f:31:4c:8a:
47:fc:ea:14:c2:08:ef:84:d0:07:e4:b2:a7:47:fc:
0d:57:5e:a7:0a:e5:d1:b8:cb:60:d7:14:02:d9:79:
45:85:1c:8c:48:5f:91:52:a9:9e:73:d8:17:c6:c1:
18:9e:43:8b:a8:48:d0:7e:66:e3:b8:d6:64:7f:50:
b5:cf:ba:00:e1:57:1d:d3:c4:12:d7:40:f1:6a:fa:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1B:A1:19:3F:FD:69:E5:D3:DD:1A:A6:85:C9:27:27:38:D2:F0:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E075E40488511EC9F4A6734D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.150.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bf:73:d5:d9:72:18:5c:72:79:89:a4:af:62:9b:44:42:14:
7c:a2:6e:29:4d:7f:1e:0e:b5:9c:b2:24:19:54:e0:4f:a1:a6:
7a:f0:bb:a1:9b:1c:e4:f4:40:97:53:b3:e8:3f:82:ad:27:40:
d9:b7:98:79:99:02:93:70:d5:7d:54:12:cd:ee:de:88:bb:e7:
70:dd:18:cb:24:bd:d3:d5:1d:7d:c6:5d:e2:e2:0f:5d:41:2e:
a2:dd:f0:24:44:49:ab:f8:e3:b7:23:9c:1b:8b:eb:69:7c:12:
de:e4:56:27:97:58:4b:f1:c4:dc:d5:fa:3e:c3:50:18:a9:bf:
ca:f4:1b:8d:4c:c0:3f:4b:b3:b1:ed:25:6b:bd:75:bf:fe:c2:
22:f8:b6:d7:99:24:c9:41:c7:82:fe:5b:87:a4:a7:e0:7b:3a:
57:e2:0b:65:9a:f3:c8:fe:17:54:a6:5c:d7:4f:4a:be:4a:d0:
d3:67:12:42:9f:0d:8a:eb:af:33:74:9c:f6:17:a9:db:0e:38:
f4:ee:5a:3b:c0:4b:00:bd:01:75:f7:e4:33:07:99:4c:b1:c0:
cb:53:3b:da:c2:bc:4d:a0:e3:dc:cd:33:e3:b8:12:9d:7e:0a:
4b:a7:3c:d5:fb:30:c1:98:3c:7d:de:aa:e9:09:e1:13:f0:bf:
52:e1:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org