Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B43E5DE488911ECAB174A3DD8A014CE.roa
File: 5B43E5DE488911ECAB174A3DD8A014CE.roa (raw, json)
Hash identifier: 5VNwp+U86ome3ISBe9J0AXsnIetvv0Yw0gFke/fb2kY=
Subject key identifier: F5:04:9C:50:9E:FD:45:77:E8:5A:1A:B8:05:A6:07:F2:61:BE:FC:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B43E5DE488911ECAB174A3DD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:05:32 +0000
ROA not before: Fri 19 Nov 2021 16:05:29 +0000
ROA not after: Sat 19 Nov 2022 16:05:29 +0000
asID: 139879
IP address blocks: 156.247.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:05:29 2021 GMT
Not After : Nov 19 16:05:29 2022 GMT
Subject: CN=619679cc-ffc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:5e:98:7f:73:ee:2e:2f:53:10:3c:d2:5d:
c5:de:9d:e5:a1:91:13:d0:19:37:fd:11:a5:b2:4b:
8b:a5:67:6a:7d:c3:24:ed:ad:d5:d7:08:5f:a2:eb:
a8:76:12:ed:87:b2:f8:c1:ff:ad:9c:e6:1f:67:26:
5c:f4:e4:d5:68:a2:78:5c:ab:a3:75:d3:71:9c:1c:
79:4b:c4:0c:3c:95:36:e0:c1:f3:0f:73:65:c0:06:
cb:e7:da:6f:09:ef:6e:5c:ad:b4:21:94:b0:8a:84:
41:61:60:a9:0f:ff:a4:da:a4:64:9f:d1:ca:6c:42:
28:3e:40:69:e8:90:ac:4d:ce:03:82:72:95:b2:27:
d0:c7:0b:12:01:b7:8b:95:30:5f:15:da:97:54:90:
4b:85:8e:45:bf:73:00:54:7b:b3:43:c9:b2:f0:16:
1e:ef:d7:a8:0b:87:bd:88:70:f4:77:9c:f8:89:ae:
5c:fe:bf:57:19:41:3c:65:65:eb:84:27:c4:da:40:
3a:d1:b2:24:78:2e:8d:58:e9:40:be:bb:63:a5:b4:
8d:ed:5e:95:8a:14:4d:d1:08:48:b5:1f:54:24:93:
55:7c:9a:3f:df:eb:19:78:f8:2e:e3:a9:57:7c:a4:
b6:9c:63:51:f2:4d:3d:05:51:4d:f2:c9:8a:5a:0a:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:04:9C:50:9E:FD:45:77:E8:5A:1A:B8:05:A6:07:F2:61:BE:FC:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B43E5DE488911ECAB174A3DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d4:fc:4c:0a:7e:9e:47:d1:bd:10:a8:9b:25:64:a3:ba:9d:
d4:56:7c:b8:3c:ff:a3:f5:39:f4:37:57:6f:3a:59:1b:b2:57:
d1:ce:ab:dd:f7:ea:e3:aa:07:9f:fc:3c:04:a2:d7:2b:73:74:
cc:b1:e7:55:4b:ce:1b:45:8a:f3:bc:71:0c:c5:29:b7:19:df:
fb:f3:a3:97:74:47:00:f4:1e:0d:d3:1b:4e:8e:89:80:26:78:
fb:20:df:07:97:3a:3a:b5:fa:65:c3:b5:71:f7:17:a8:c1:d2:
d5:d5:1b:05:7f:30:2b:91:65:5a:fb:2a:c4:33:9e:14:ac:7b:
a5:2f:04:32:68:65:9f:bb:12:49:1a:48:c2:bb:72:6c:ae:f5:
59:a5:3b:b6:de:99:91:40:f4:ff:7e:05:4c:46:98:7e:be:5a:
95:04:2d:1f:be:20:15:3f:c8:81:42:22:e5:55:cb:35:33:62:
29:98:32:59:3e:26:23:e6:68:a2:fd:30:30:8a:0f:12:da:41:
17:67:d0:ef:fa:f5:bc:2d:5d:c9:df:2a:64:b2:1a:4e:60:8c:
e8:35:52:01:eb:b0:8e:04:43:52:a9:bf:33:f2:bd:83:30:23:
e5:4c:49:18:5e:ae:93:4d:f5:db:b3:4e:03:de:83:a5:5c:dc:
4e:6a:7b:b3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDgIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNjA1MjlaFw0yMjExMTkxNjA1MjlaMBgxFjAU
BgNVBAMMDTYxOTY3OWNjLWZmYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmR16Yf3PuLi9TEDzSXcXeneWhkRPQGTf9EaWyS4ulZ2p9wyTtrdXXCF+i
66h2Eu2HsvjB/62c5h9nJlz05NVoonhcq6N103GcHHlLxAw8lTbgwfMPc2XABsvn
2m8J725crbQhlLCKhEFhYKkP/6TapGSf0cpsQig+QGnokKxNzgOCcpWyJ9DHCxIB
t4uVMF8V2pdUkEuFjkW/cwBUe7NDybLwFh7v16gLh72IcPR3nPiJrlz+v1cZQTxl
ZeuEJ8TaQDrRsiR4Lo1Y6UC+u2OltI3tXpWKFE3RCEi1H1Qkk1V8mj/f6xl4+C7j
qVd8pLacY1HyTT0FUU3yyYpaCjAPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9QSc
UJ79RXfoWhq4BaYH8mG+/DEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzVCNDNFNURFNDg4OTExRUNBQjE3NEEzREQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc978wDQYJKoZIhvcNAQELBQAD
ggEBAFzU/EwKfp5H0b0QqJslZKO6ndRWfLg8/6P1OfQ3V286WRuyV9HOq9336uOq
B5/8PASi1ytzdMyx51VLzhtFivO8cQzFKbcZ3/vzo5d0RwD0Hg3TG06OiYAmePsg
3weXOjq1+mXDtXH3F6jB0tXVGwV/MCuRZVr7KsQznhSse6UvBDJoZZ+7EkkaSMK7
cmyu9VmlO7bemZFA9P9+BUxGmH6+WpUELR++IBU/yIFCIuVVyzUzYimYMlk+JiPm
aKL9MDCKDxLaQRdn0O/69bwtXcnfKmSyGk5gjOg1UgHrsI4EQ1KpvzPyvYMwI+VM
SRherpNN9duzTgPeg6Vc3E5qe7M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org