Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D634EE488611ECB3CBE536D8A014CE.roa
File: 67D634EE488611ECB3CBE536D8A014CE.roa (raw, json)
Hash identifier: Nuz5+R3fm6ESlU64cCSgIy4Kxs+lNAJ6cStY7lpGk0Y=
Subject key identifier: A4:65:B6:9E:50:06:91:BE:E1:DB:F5:66:2F:A1:6D:E4:C1:31:E2:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D634EE488611ECB3CBE536D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:44:25 +0000
ROA not before: Fri 19 Nov 2021 15:44:21 +0000
ROA not after: Sat 19 Nov 2022 15:44:21 +0000
asID: 139879
IP address blocks: 156.231.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3424 (0xd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:44:21 2021 GMT
Not After : Nov 19 15:44:21 2022 GMT
Subject: CN=619674d9-a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:9f:97:17:d5:a7:f2:46:e4:a6:cc:f6:1d:
8c:eb:7b:b8:6c:90:df:02:ad:f6:24:f0:b4:94:72:
b1:0c:f1:56:b3:5e:70:c5:1d:f1:ea:af:10:14:cb:
e4:73:78:7d:a6:3d:00:24:65:83:d4:c9:ed:ed:92:
24:57:19:d5:ff:08:a1:38:76:0a:38:df:4e:6c:92:
5f:28:bf:69:8a:46:51:ef:ac:58:df:8f:cc:d3:e3:
ce:3e:ee:1f:e6:48:5c:ef:72:52:b9:2f:6b:f7:44:
74:1e:3f:7e:00:79:b1:62:83:0c:9a:f1:30:20:94:
55:e3:38:87:ae:40:be:aa:18:b2:b9:3f:f3:ba:42:
d3:57:5a:ee:77:cf:55:ca:e7:fe:e9:5e:6b:29:3b:
60:83:0f:08:2a:f8:b0:2c:d0:a7:e7:d4:d1:07:7c:
58:d1:75:ca:94:5b:b3:97:cf:31:03:f4:5a:c5:92:
1f:87:77:8f:83:f2:7c:f8:56:41:75:f7:5e:dd:d8:
cf:05:b9:cd:3b:35:92:9e:6f:f2:bc:53:9d:dc:9c:
27:cd:07:62:70:2e:5d:e9:a5:2d:09:e0:c8:3c:e3:
81:4c:8b:82:4b:5b:f4:26:2b:f1:a3:6d:2c:b5:be:
fd:71:2e:3e:0e:4b:16:c4:35:c7:a4:00:8d:42:c8:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:B6:9E:50:06:91:BE:E1:DB:F5:66:2F:A1:6D:E4:C1:31:E2:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D634EE488611ECB3CBE536D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.161.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d7:59:d8:79:ff:0c:e0:7f:09:13:3f:a0:83:9e:38:b2:f9:
7a:ba:fb:cb:8b:a7:d0:9d:74:77:a6:b0:0f:84:18:35:05:9b:
e6:ed:ec:f8:f7:26:23:fe:a8:ab:94:75:d9:fa:25:d6:27:ac:
b4:b1:6c:2f:8d:bb:79:22:e4:d6:54:9b:e5:8d:fc:87:fe:62:
2a:2a:7d:6f:94:6c:51:1d:19:ac:6a:da:41:74:ec:95:8b:61:
ee:37:6b:be:19:8f:44:7d:15:e7:20:ac:07:81:d7:93:e0:ee:
5d:39:bb:33:84:d3:14:f8:60:65:66:5f:76:6a:1a:7d:e0:58:
1f:40:69:f6:b4:23:a5:a7:0c:75:ce:d6:b8:d1:83:23:36:01:
96:dd:63:31:7d:cd:a1:ef:5f:79:43:18:6a:04:0e:be:ae:98:
bc:e3:25:3d:d5:14:ae:38:7c:a8:e0:58:bd:24:9b:df:77:14:
f1:85:56:6d:11:cd:80:cf:a0:52:4b:f4:bc:9c:be:3f:cf:b2:
fa:7f:04:ef:9d:5e:f6:d6:96:e9:e3:cb:a2:1a:30:be:a9:79:
92:40:1d:79:b0:67:7d:46:b5:1a:fc:31:93:39:18:fb:df:a0:
18:9e:3c:f2:5e:fd:aa:cc:06:eb:3e:9c:24:57:81:07:18:f5:
43:ff:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org