Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F20B2488511ECB065A334D8A014CE.roa
File: 634F20B2488511ECB065A334D8A014CE.roa (raw, json)
Hash identifier: TCSRxy6Ydg+w3l0lziNR4vWFekR+MVTCx9S1/oNon74=
Subject key identifier: 6C:59:92:C5:F1:BE:51:66:EA:29:FA:B6:48:63:92:55:6D:57:9E:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F20B2488511ECB065A334D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:37:08 +0000
ROA not before: Fri 19 Nov 2021 15:37:04 +0000
ROA not after: Sat 19 Nov 2022 15:37:04 +0000
asID: 139879
IP address blocks: 156.231.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:37:04 2021 GMT
Not After : Nov 19 15:37:04 2022 GMT
Subject: CN=61967324-968a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:79:60:14:eb:57:f1:5f:10:9a:4f:8f:dc:22:
f9:64:31:e3:55:94:01:e0:99:8a:01:6e:09:6c:90:
51:18:76:a6:a8:b0:08:d9:d8:29:3b:4c:c9:0a:bd:
f2:97:4e:ec:09:3c:9b:fe:16:f2:44:e8:cd:7a:a6:
4e:df:2b:e2:e9:ad:3b:a1:61:b3:21:ab:ed:99:52:
cf:4c:75:a0:2d:06:26:0b:13:21:cc:df:a8:0d:bd:
8a:7e:87:cb:af:69:72:1e:c9:3f:40:d8:20:ec:3e:
7a:fd:3b:03:f5:d7:c6:8a:18:d0:37:db:3f:10:46:
03:d9:2e:22:dc:b6:a5:cd:22:42:41:e7:8c:40:ea:
80:d8:8e:95:8e:a0:0b:ed:4b:fb:95:80:8e:29:f5:
88:3c:47:bc:cf:0f:de:91:d5:6b:d8:fa:be:12:fd:
9b:53:76:38:dc:01:55:2d:8d:90:c8:8b:79:60:e0:
03:9e:4b:b5:67:db:9d:ab:12:4c:99:d3:74:45:72:
82:ca:d8:b1:5b:8a:e2:4b:56:65:e5:30:52:c0:76:
1a:f3:48:44:0e:1f:5a:f9:01:9d:5e:22:85:24:35:
3f:3f:27:21:ce:bb:ad:87:5c:17:de:06:23:3c:17:
25:25:79:d4:52:cb:82:11:aa:43:77:3a:74:8b:97:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:92:C5:F1:BE:51:66:EA:29:FA:B6:48:63:92:55:6D:57:9E:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F20B2488511ECB065A334D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:47:e8:15:ab:89:19:8e:2f:b7:e0:41:14:42:a2:68:10:64:
50:07:54:63:29:20:ef:2c:cf:57:ed:17:2c:79:e4:c7:bf:0f:
9f:9e:6c:77:78:4f:e4:17:0b:86:aa:3d:1e:6f:4a:9c:03:fe:
dd:6a:c2:24:6d:27:f8:6d:b0:1b:c1:fd:ec:74:cf:63:a9:40:
22:f8:ec:9d:73:d7:4f:f4:f5:d7:35:ab:63:62:63:6a:6c:21:
a9:40:bb:73:b3:24:6f:44:57:56:87:89:8c:1a:69:6b:e4:ba:
11:75:94:a7:7e:18:c4:e6:66:11:2e:02:81:4f:c1:e2:7d:2b:
c9:11:52:66:0b:51:cf:99:da:c7:35:6a:27:9c:da:a4:e2:65:
e8:d3:8b:83:1f:df:ff:51:14:40:8c:1c:4f:86:7a:46:c8:7d:
2f:a7:5d:04:e5:7f:5d:19:00:b1:e0:6e:10:ac:64:48:f4:e2:
56:9b:7b:e9:79:6c:56:3a:81:e3:52:bc:d7:59:d5:22:bf:80:
8f:41:e4:6f:2e:1e:fe:6b:23:1f:ba:a0:6e:c3:df:41:6f:fa:
d6:e2:1b:dd:03:95:62:06:35:ef:a7:81:07:db:68:99:ab:45:
f3:24:96:74:cc:5a:ac:d4:cf:bd:ef:2c:64:4a:2f:36:35:8f:
9f:b0:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org