Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3B44C6488A11EC94859B3FD8A014CE.roa
File: 6C3B44C6488A11EC94859B3FD8A014CE.roa (raw, json)
Hash identifier: sHVHsSbNYg5QhHQ+5zpXGb3OW4LSzg2gCZlc0UaNAyQ=
Subject key identifier: 7E:E6:2A:4D:51:89:80:8C:3B:18:41:66:E6:8A:8B:BD:92:70:F9:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3B44C6488A11EC94859B3FD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:13:10 +0000
ROA not before: Fri 19 Nov 2021 16:13:06 +0000
ROA not after: Sat 19 Nov 2022 16:13:06 +0000
asID: 139879
IP address blocks: 156.247.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:13:06 2021 GMT
Not After : Nov 19 16:13:06 2022 GMT
Subject: CN=61967b96-2c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:43:11:fa:d6:1e:fb:8d:78:5a:11:eb:b6:
aa:de:ea:64:62:c9:c4:83:24:06:71:14:e9:c2:48:
56:e0:b4:01:b0:27:55:b2:2e:f6:a3:4b:5c:81:f1:
2f:9a:03:d0:69:3d:7f:94:e4:79:55:ea:cf:9b:96:
16:02:c6:b5:2e:a1:07:5c:52:5d:a9:e8:51:f3:af:
c7:7d:25:3d:6d:51:d7:b7:c0:0f:8b:d9:78:12:1c:
29:a8:55:cd:57:d8:ae:fd:6c:ae:34:5b:cb:b8:be:
44:19:2d:b9:7d:8b:a7:11:a8:83:ae:a5:e2:ef:9a:
9e:b2:70:04:5e:17:94:f6:c4:b5:2a:0b:48:01:68:
f1:f2:af:24:93:34:3a:09:c9:fb:49:50:6b:c7:43:
39:0a:ab:c6:5e:65:d2:3c:b6:16:80:ee:27:a5:38:
77:1d:fa:cd:a2:5d:75:78:23:91:05:bb:d7:79:ab:
dd:18:11:94:bc:72:94:75:a4:8d:b5:a5:16:8b:22:
6d:7d:30:2b:4f:fc:95:3c:2b:5f:1a:d1:f2:b5:e2:
d7:b4:eb:59:77:fb:b7:e7:c8:d1:10:dc:83:74:b0:
b6:2a:5a:01:c9:1e:78:e5:79:9c:d9:70:51:16:dc:
74:68:2f:16:cc:9b:77:9a:71:82:b4:53:5e:08:28:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:2A:4D:51:89:80:8C:3B:18:41:66:E6:8A:8B:BD:92:70:F9:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3B44C6488A11EC94859B3FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:58:59:f3:35:0a:2d:66:ac:b8:5b:82:90:2b:68:be:9d:8d:
71:cf:3d:1e:b6:79:7e:f9:c3:0f:31:c8:67:dc:bd:03:79:9d:
94:88:f8:c3:02:1f:fd:64:da:5d:8c:da:07:30:10:32:5a:d9:
be:c5:11:65:24:2b:57:35:05:3e:39:c8:71:93:99:bf:21:cd:
60:7a:95:7a:20:6c:06:b9:2f:4f:88:a0:f3:47:af:e0:77:4b:
a2:dd:1d:ad:df:aa:28:82:fe:66:59:7a:3d:6e:6c:9f:55:98:
68:ae:17:88:df:78:e7:71:54:d9:1c:72:f5:d2:1d:12:b0:96:
6d:38:f6:ef:ec:a7:22:de:0b:d7:20:53:85:6d:50:7c:5b:b3:
22:08:c9:ac:7b:30:c1:6a:7e:5c:91:ce:3a:01:96:7a:53:70:
16:c9:44:38:6f:9a:52:72:58:f0:55:21:7e:2b:9d:ce:ee:c0:
d7:e1:ff:72:86:4f:bd:37:45:e4:ed:fd:1b:1f:74:9f:8d:08:
40:d5:6b:53:6f:56:40:d8:39:0a:63:2a:f5:63:ea:e2:b2:7e:
c0:0b:96:2c:53:e8:61:15:65:5e:6c:53:3d:5f:60:e4:86:97:
26:30:b8:b7:d2:90:8a:23:8c:af:de:50:ed:69:79:6f:db:35:
c9:a9:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org