Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DFAD194488711EC86E4FA38D8A014CE.roa
File: 6DFAD194488711EC86E4FA38D8A014CE.roa (raw, json)
Hash identifier: OUY61TEB8zNL6Y9ApFVzpwZYTqxR5mX8E7AMMiZwu10=
Subject key identifier: B2:BE:00:CD:27:BA:8E:5C:BE:7C:19:FC:35:5E:A6:D3:55:83:E7:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DFAD194488711EC86E4FA38D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:51:45 +0000
ROA not before: Fri 19 Nov 2021 15:51:41 +0000
ROA not after: Sat 19 Nov 2022 15:51:41 +0000
asID: 139879
IP address blocks: 156.247.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3478 (0xd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:51:41 2021 GMT
Not After : Nov 19 15:51:41 2022 GMT
Subject: CN=61967690-1af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5f:3f:51:22:6a:e8:f3:bd:a6:97:24:9b:
c8:90:bf:22:bd:ca:ac:1c:6a:fe:50:bb:a3:2c:7e:
11:2c:5b:4b:80:04:57:a9:2d:49:9f:12:d1:31:1a:
2d:d1:b4:81:9c:13:5f:2f:86:aa:e5:af:52:71:40:
be:90:60:fe:78:0a:62:73:3b:b3:af:dc:c3:93:6e:
8e:57:3c:79:d8:bb:5e:c2:e2:64:49:bc:10:ea:92:
e3:f3:e0:52:02:27:bc:97:75:5f:49:29:d3:27:52:
1d:49:7d:ea:8a:47:08:76:e4:db:eb:02:60:15:5f:
31:b7:cb:2e:3a:31:04:f4:8c:ff:a7:98:84:22:d2:
e5:ab:48:64:8f:41:52:5f:33:b6:90:48:c4:ee:00:
22:f2:2b:a4:82:4f:89:37:50:41:ab:c0:5f:50:bd:
38:f7:71:f1:f7:cc:ca:d6:18:5e:a1:95:4d:5f:09:
84:6c:1f:bf:17:59:30:df:ea:70:ab:0b:ae:70:bd:
d1:df:d7:bf:56:8f:71:20:c7:e4:6e:75:09:68:47:
f8:84:32:82:2f:c6:56:0f:5d:b1:f5:d5:32:0a:71:
b5:b3:23:11:3c:b5:85:f6:74:f6:1f:51:ff:2d:26:
84:3d:3f:99:82:82:43:5a:76:96:7c:4a:10:fb:8f:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BE:00:CD:27:BA:8E:5C:BE:7C:19:FC:35:5E:A6:D3:55:83:E7:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DFAD194488711EC86E4FA38D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.172.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0c:e6:44:7b:91:9b:50:07:b9:43:92:8e:26:27:43:30:be:
fc:23:69:cb:f9:6c:ab:fa:73:df:b4:3c:53:da:42:00:7b:d1:
50:35:8a:43:fa:ae:28:72:c7:5f:f0:bc:87:3a:e6:b6:6a:00:
5d:f2:fe:93:fe:78:37:ae:64:c2:07:fb:53:17:18:99:6a:67:
7b:74:23:74:46:5b:ae:7c:6d:9d:67:5c:16:37:c7:bf:29:09:
cd:d6:e5:27:ae:51:45:1b:8a:af:2c:24:e0:f4:cf:fe:7c:6a:
26:19:51:dd:16:d6:15:7f:2e:80:dd:17:64:a9:a8:b4:3f:f7:
cf:59:9d:5b:77:24:6b:14:f2:32:c8:31:3e:bc:91:96:0e:f7:
e7:30:34:56:7b:77:14:8c:96:d8:f2:c0:ea:b3:48:9d:15:ba:
6f:71:a7:55:e2:16:ab:2e:22:19:4a:de:29:97:68:ab:6c:84:
6c:f2:0f:64:b3:4d:75:12:36:1b:e3:6d:d8:b6:63:e0:4b:48:
51:90:fd:39:71:fe:c5:01:bc:3d:bf:8d:4e:1e:c8:62:e3:a6:
ea:2d:6d:3c:99:62:b7:47:ea:a6:16:c6:db:fd:7c:29:ba:65:
00:ae:9c:66:8c:e6:17:13:fb:44:74:ba:1f:f0:a9:cd:66:80:
94:f6:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org