Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/644332B02E6811ECB7EB0113D8A014CE.roa
File: 644332B02E6811ECB7EB0113D8A014CE.roa (raw, json)
Hash identifier: uAQRzk+11jid37B74pEQV98L4gzniVDJ9p6Wy1b+19k=
Subject key identifier: E0:CA:E5:16:2D:3C:6F:3D:CA:08:F6:87:B8:07:9C:4C:D4:2E:0B:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/644332B02E6811ECB7EB0113D8A014CE.roa
Signing time: Sat 16 Oct 2021 10:04:04 +0000
ROA not before: Sat 16 Oct 2021 10:04:00 +0000
ROA not after: Fri 16 Dec 2022 10:04:00 +0000
asID: 399674
IP address blocks: 156.248.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2583 (0xa17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 10:04:00 2021 GMT
Not After : Dec 16 10:04:00 2022 GMT
Subject: CN=616aa393-59bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:e2:8a:05:57:35:4e:34:5f:b8:e1:20:a8:
24:ad:79:12:9d:87:62:c6:2e:31:be:76:8c:3b:70:
32:a1:f6:44:db:0a:37:73:44:ca:60:89:33:8b:b9:
a7:7c:63:b2:62:dc:c8:be:aa:96:8b:b1:b9:44:7c:
ef:91:ac:49:8b:89:2a:82:22:e1:4f:47:43:15:4a:
a0:08:9c:58:1b:30:bb:4d:d7:be:dc:5f:65:a4:7e:
87:8c:12:6f:99:55:24:84:79:04:20:e5:46:42:78:
30:f0:22:c2:87:18:31:0e:a6:5e:47:74:a5:81:02:
5d:55:c4:d9:ce:5c:b0:e0:c0:45:d4:91:e6:03:93:
5e:8d:e6:37:44:27:cb:d1:27:0c:79:ee:7c:fc:31:
6c:ed:ca:c2:45:27:6d:c1:87:9f:70:25:8e:6f:f7:
f1:6a:63:09:cf:c0:46:c4:01:ee:81:03:91:a5:48:
94:7d:03:ff:38:1d:31:78:da:d1:5f:50:9d:1c:cf:
72:1f:35:83:4c:5d:f6:29:eb:98:a5:4d:ce:a0:9d:
7d:2e:02:1d:75:26:65:ae:d1:57:f3:0b:0f:84:0a:
9e:1e:7d:df:22:d0:3c:9a:1d:67:fc:6c:d8:eb:b0:
f2:9b:80:a8:e1:db:cb:b6:52:2a:a8:87:47:e0:07:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:E5:16:2D:3C:6F:3D:CA:08:F6:87:B8:07:9C:4C:D4:2E:0B:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/644332B02E6811ECB7EB0113D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:64:40:02:cd:e2:2f:63:8e:4e:1f:bc:f2:58:5e:a4:a2:a8:
0f:c4:ca:d3:0e:56:6f:79:8d:ac:b0:36:7a:7b:84:aa:9d:00:
90:ad:00:f7:91:29:8f:d9:07:7e:97:54:ca:8a:25:d2:b0:15:
a8:ee:8a:e1:7a:4b:f3:b6:56:b3:3d:9d:da:57:08:4d:e5:de:
69:50:a1:4d:62:c7:c6:a8:b3:1b:8e:8e:b5:04:fa:5c:28:50:
35:95:fb:f9:05:5d:a9:23:39:5f:4e:f0:7c:8d:ca:3e:a3:00:
a3:54:a8:31:cf:38:63:fd:71:3d:66:19:8f:16:bb:51:4a:f3:
4d:b2:6f:71:36:20:79:fd:d2:6d:54:b8:da:af:b6:21:58:52:
c2:1c:3a:a0:4f:2f:01:76:1e:ef:3f:d5:7c:c0:9b:bb:2a:94:
5a:1c:56:07:02:73:1a:45:a5:8a:54:76:5f:39:15:d3:3d:13:
64:13:e7:44:94:60:f9:63:ac:69:98:bc:53:34:47:13:5f:e1:
3e:f8:8d:2f:47:e8:e1:ca:01:f2:a2:16:8e:6f:06:75:3c:32:
9b:b8:48:d1:a0:54:ee:f3:8f:15:6e:7d:a0:43:5d:3b:63:a9:
8b:a2:f1:98:e6:9a:23:41:4c:f0:d3:2a:1c:5e:01:c4:f9:a0:
4a:d8:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org