Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DF89562488A11ECB8FE6F3FD8A014CE.roa
File: 5DF89562488A11ECB8FE6F3FD8A014CE.roa (raw, json)
Hash identifier: aGYb7Ijl/ZfIg9rrawsqUHN3GfsIh2JSyN1uE/ZVu7I=
Subject key identifier: 5D:C8:E9:EB:B8:FE:03:E2:BF:CD:51:88:C1:66:94:87:90:8F:0D:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DF89562488A11ECB8FE6F3FD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:12:46 +0000
ROA not before: Fri 19 Nov 2021 16:12:43 +0000
ROA not after: Sat 19 Nov 2022 16:12:43 +0000
asID: 139879
IP address blocks: 156.249.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3641 (0xe39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:12:43 2021 GMT
Not After : Nov 19 16:12:43 2022 GMT
Subject: CN=61967b7e-63f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:6d:0d:d8:ec:d0:35:ff:db:62:e4:7a:79:
0f:b8:c4:54:98:2c:a0:2f:99:a6:da:49:6a:83:54:
83:43:33:d9:3b:19:3f:f8:90:77:ae:ae:3a:f9:17:
b1:c5:b5:9f:1f:48:57:d6:27:20:af:fc:52:6b:f8:
e2:4f:f0:4f:40:6e:3f:12:6a:9b:68:3f:71:e0:24:
9f:f2:0f:2d:1a:f2:aa:c2:fd:77:f5:df:fe:95:52:
86:01:59:ae:81:be:56:4e:a3:70:74:6b:5e:3c:3b:
3e:0f:19:47:64:c8:4c:6b:f1:d7:66:47:3e:00:da:
87:5d:8f:39:4a:4b:af:28:67:1c:ad:b6:72:1e:53:
01:53:1e:cb:5c:d4:57:69:ee:c6:fc:ae:18:95:ab:
9e:af:a3:be:b8:5d:06:66:34:5e:51:06:17:11:81:
af:4a:19:bc:b9:2f:b8:79:62:01:0a:8e:21:4b:c6:
e9:fa:6b:4a:22:41:76:16:ca:63:3d:d7:db:3d:68:
86:e6:87:47:3e:30:b3:48:da:ae:6f:28:20:8d:fd:
0a:3e:c6:35:ec:05:57:69:fe:f1:11:47:e6:0f:67:
f0:b0:e7:a3:c1:cb:8a:ce:ee:2c:ba:10:88:f2:36:
3c:32:d1:a6:a6:4d:bd:ed:0a:08:ec:66:ee:d0:e8:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:E9:EB:B8:FE:03:E2:BF:CD:51:88:C1:66:94:87:90:8F:0D:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DF89562488A11ECB8FE6F3FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0a:37:2e:e3:8e:6d:34:57:dd:90:02:33:a2:46:c4:37:af:
c5:20:2f:4f:9f:ca:e7:36:fd:59:1f:ef:c3:8c:34:30:e2:ca:
3a:24:b1:22:93:c2:f3:d6:9f:f8:58:f9:a1:5f:bd:bb:9e:75:
4a:63:b7:b3:3b:3c:3a:00:01:74:93:7e:c2:ff:9a:64:5b:b6:
40:a2:ac:98:bf:56:c1:90:f2:4f:1a:b7:80:b4:c0:ab:08:9b:
5b:01:15:f9:c0:8f:5a:c7:49:96:41:19:8c:dc:8f:af:b5:04:
20:b4:d6:95:15:83:e2:0f:22:33:cf:fe:de:2b:58:ac:8e:2a:
cf:66:74:1c:e8:75:f1:55:e9:8a:4f:3e:fd:47:03:3d:5b:98:
7a:b4:38:9d:a4:c3:fd:c8:34:05:04:85:24:4a:e3:fa:b8:8d:
b7:d5:2e:2b:34:6b:89:4c:16:70:ff:6e:3c:ae:fc:f1:e0:6b:
81:43:78:2d:91:04:35:98:7d:62:fa:59:51:48:2a:90:bc:91:
c8:69:49:6d:1d:e3:08:05:72:af:ce:14:2e:de:db:b6:5c:c3:
c7:af:88:e2:a2:9d:fa:05:28:cb:f7:4d:90:91:90:b0:c3:56:
ae:4c:5e:7d:ce:ea:b0:d8:b9:35:04:43:af:8b:a6:a6:68:01:
76:bc:c1:bc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNjEyNDNaFw0yMjExMTkxNjEyNDNaMBgxFjAU
BgNVBAMMDTYxOTY3YjdlLTYzZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHBW0N2OzQNf/bYuR6eQ+4xFSYLKAvmabaSWqDVINDM9k7GT/4kHeurjr5
F7HFtZ8fSFfWJyCv/FJr+OJP8E9Abj8SaptoP3HgJJ/yDy0a8qrC/Xf13/6VUoYB
Wa6BvlZOo3B0a148Oz4PGUdkyExr8ddmRz4A2oddjzlKS68oZxyttnIeUwFTHstc
1Fdp7sb8rhiVq56vo764XQZmNF5RBhcRga9KGby5L7h5YgEKjiFLxun6a0oiQXYW
ymM919s9aIbmh0c+MLNI2q5vKCCN/Qo+xjXsBVdp/vERR+YPZ/Cw56PBy4rO7iy6
EIjyNjwy0aamTb3tCgjsZu7Q6FXLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXcjp
67j+A+K/zVGIwWaUh5CPDb0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzVERjg5NTYyNDg4QTExRUNCOEZFNkYzRkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+ckwDQYJKoZIhvcNAQELBQAD
ggEBABcKNy7jjm00V92QAjOiRsQ3r8UgL0+fyuc2/Vkf78OMNDDiyjoksSKTwvPW
n/hY+aFfvbuedUpjt7M7PDoAAXSTfsL/mmRbtkCirJi/VsGQ8k8at4C0wKsIm1sB
FfnAj1rHSZZBGYzcj6+1BCC01pUVg+IPIjPP/t4rWKyOKs9mdBzodfFV6YpPPv1H
Az1bmHq0OJ2kw/3INAUEhSRK4/q4jbfVLis0a4lMFnD/bjyu/PHga4FDeC2RBDWY
fWL6WVFIKpC8kchpSW0d4wgFcq/OFC7e27Zcw8eviOKinfoFKMv3TZCRkLDDVq5M
Xn3O6rDYuTUEQ6+LpqZoAXa8wbw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org