Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F10A12488711ECB8F5EA38D8A014CE.roa
File: 61F10A12488711ECB8F5EA38D8A014CE.roa (raw, json)
Hash identifier: f0TQJ6biM7O8yaBsY0ZIwaeuDGOvPIOs716Vi9+u24I=
Subject key identifier: B8:3A:22:46:1A:0F:E3:89:86:C6:A8:65:DD:DD:B6:3C:04:70:06:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F10A12488711ECB8F5EA38D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:51:24 +0000
ROA not before: Fri 19 Nov 2021 15:51:21 +0000
ROA not after: Sat 19 Nov 2022 15:51:21 +0000
asID: 139879
IP address blocks: 156.249.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:51:21 2021 GMT
Not After : Nov 19 15:51:21 2022 GMT
Subject: CN=6196767c-be43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:9a:c2:d7:fb:31:04:f3:61:26:c2:53:02:
12:72:51:74:fb:04:b2:d5:e0:fd:1d:2a:20:81:a8:
c0:87:68:b1:4f:50:05:8f:c8:de:17:27:c7:c7:13:
70:44:86:5a:d0:b0:39:5a:73:52:11:e4:be:e1:2c:
63:73:91:39:8e:49:b2:c4:43:a9:ae:df:5d:80:e0:
b8:0e:e2:f3:81:75:3f:e5:40:b0:ff:c1:f3:5b:66:
4c:cd:82:23:64:5d:90:fa:7e:ba:a2:b1:f9:84:6f:
ac:c9:4f:bd:c2:c9:b9:bf:92:15:68:7a:12:f0:13:
8b:07:8c:67:bb:d0:7c:63:f9:d3:65:12:bd:47:b1:
52:b5:50:e2:35:7e:77:08:1d:6f:ec:9e:ee:cc:45:
c3:e4:d2:8e:07:d3:e9:f9:77:f0:3b:84:fd:5d:63:
97:09:fc:07:ba:e1:32:aa:87:b7:99:1b:03:f5:4e:
0c:bd:15:7d:4a:bc:6a:4f:4c:e5:04:98:db:5f:f2:
58:bc:0c:47:5f:af:2e:f4:3a:28:7d:89:b3:f3:4e:
03:c8:e5:6c:db:55:89:c1:4e:74:e1:3c:bf:19:53:
7d:68:fc:8e:f1:e0:f8:25:1c:f1:74:82:ba:df:af:
19:8f:12:54:e3:c1:6b:62:90:4a:8a:b0:c6:01:cb:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:22:46:1A:0F:E3:89:86:C6:A8:65:DD:DD:B6:3C:04:70:06:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F10A12488711ECB8F5EA38D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.172.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ba:1c:98:d3:8d:07:9e:87:01:44:eb:c4:3f:76:15:09:2b:
f4:4a:04:b1:03:37:21:2e:ef:c9:07:f0:d8:f4:24:f6:8c:5a:
9a:3f:df:5f:bc:3b:1f:de:f4:a4:65:d3:5b:7a:92:c9:27:c2:
e9:e5:7f:e3:6e:a2:30:73:a3:00:8a:d8:db:14:2d:9c:4d:9e:
b6:97:60:8c:84:fa:76:c9:d6:b2:0a:ef:be:72:7f:59:1c:cd:
6a:05:62:23:37:b0:1d:e9:3d:19:6a:08:6c:b5:67:be:ab:b2:
24:08:7f:8b:3f:9d:30:79:55:06:08:c0:32:88:92:f8:3c:24:
18:d2:45:e6:90:20:be:87:40:43:4b:b3:a0:37:a6:55:89:8f:
0b:61:3c:42:95:87:17:8a:46:a7:6d:32:21:4a:7c:14:e9:e0:
84:1e:3c:e7:1b:61:7d:11:16:8e:2d:c1:1a:b2:4c:19:d9:c5:
ff:14:1e:64:cb:d9:39:dc:fb:89:fd:63:56:c1:52:62:24:c1:
e7:0b:9b:44:13:34:47:4e:fa:ca:b1:85:68:19:ed:04:ad:ff:
24:9f:96:f9:aa:de:cd:08:12:80:f1:0d:b3:f2:ad:75:39:4e:
5d:37:4e:f5:4e:88:b6:e2:eb:5c:b5:6b:4c:3f:19:d9:91:d2:
90:fd:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org