Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D37884E488611ECA381DE36D8A014CE.roa
File: 5D37884E488611ECA381DE36D8A014CE.roa (raw, json)
Hash identifier: hsAPZgsakTbpvH+SkkBLVCDJlPbyaSQPpsNoM3ATKG4=
Subject key identifier: 7F:55:8A:E8:7D:8E:67:A6:AD:46:03:DF:E9:92:71:56:A5:71:28:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D37884E488611ECA381DE36D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:44:07 +0000
ROA not before: Fri 19 Nov 2021 15:44:03 +0000
ROA not after: Sat 19 Nov 2022 15:44:03 +0000
asID: 139879
IP address blocks: 156.247.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3421 (0xd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:44:03 2021 GMT
Not After : Nov 19 15:44:03 2022 GMT
Subject: CN=619674c7-5444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:47:fa:60:f3:c6:a2:33:f5:9c:17:bd:5e:
15:9c:62:16:ed:20:bc:37:9d:65:a8:75:a2:89:1d:
54:8b:b6:7d:5a:1c:c7:c6:e8:2c:ff:cc:0c:0b:33:
24:64:a5:04:4b:a8:bc:b1:73:b4:6a:65:1e:55:0c:
65:8c:39:1d:7b:07:d3:2c:91:a1:c8:ec:8e:1c:0f:
f7:fe:f7:ce:47:67:3d:f7:8b:d8:e8:5c:a1:b8:31:
37:dd:59:bd:93:4c:18:06:35:b2:ad:a4:bf:d2:27:
fb:7c:f7:45:63:b4:a2:19:01:ca:a8:de:ad:e2:0b:
85:41:b2:36:a7:6a:38:cc:56:a6:f9:9f:3c:dc:7a:
ff:96:c4:fc:96:25:78:6f:e5:6b:16:17:3d:91:d5:
f1:38:54:ce:40:16:34:c5:ce:cc:94:29:95:b4:80:
3c:e0:45:d3:34:e5:22:11:a0:33:45:02:ba:9a:cb:
66:4a:c3:70:13:14:a1:14:02:d4:c0:1b:ad:91:f9:
8c:c1:b8:fb:7a:ac:81:36:d9:75:48:84:0a:e4:89:
42:e4:51:0b:a1:80:69:75:76:a7:eb:b9:d4:fc:d4:
09:64:93:6c:2e:45:d4:11:cc:82:5b:34:69:4a:60:
e0:75:13:60:ca:08:d4:d8:31:95:1b:2f:15:63:a0:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:8A:E8:7D:8E:67:A6:AD:46:03:DF:E9:92:71:56:A5:71:28:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D37884E488611ECA381DE36D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:20:dc:12:9e:a8:d8:1b:ee:da:93:08:39:ed:9e:90:bd:d1:
8e:fc:38:fc:0a:1c:54:4f:3e:af:31:65:65:e4:b5:ae:df:f0:
24:59:3e:03:56:cb:36:b4:7d:33:d5:00:14:7d:06:b6:84:34:
75:2d:65:a8:06:2a:24:4b:fd:68:e5:dc:f9:70:22:22:43:7e:
5e:29:a1:0a:61:f4:4b:c6:c7:e2:e7:ef:1a:14:11:51:73:fb:
37:36:83:6a:ae:4b:53:ad:48:c0:00:11:7f:00:d6:88:e1:ec:
6a:07:7b:8a:a4:5b:ab:76:bf:2a:f6:45:45:51:9a:aa:99:53:
49:04:d1:a8:b2:2a:c4:36:d2:c1:2b:85:83:4f:9c:ed:23:e9:
3d:d4:96:1c:a3:a9:b2:8f:d2:f3:eb:76:70:45:95:95:cc:48:
db:1d:48:43:54:cb:7c:76:07:87:5f:51:10:65:ba:39:d6:dd:
fb:a0:ce:cd:8b:58:aa:ed:59:45:51:a7:95:57:4b:fa:41:6d:
63:fd:18:72:21:d3:63:33:50:52:42:f5:f7:ae:34:c4:2e:1f:
99:77:55:eb:d6:c5:44:63:5e:a0:02:34:36:e2:98:fc:43:de:
28:7d:46:7b:1b:c5:d8:90:05:ba:4b:24:bc:e9:66:57:77:3f:
71:d1:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org