Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71ACCBE0488611EC94D6F536D8A014CE.roa
File: 71ACCBE0488611EC94D6F536D8A014CE.roa (raw, json)
Hash identifier: lTabNArSA8lk6J2UWEZmsmxc3XLPSiwAgGC18/SJ004=
Subject key identifier: D8:4A:00:E5:12:50:9D:3F:08:09:86:B8:12:E5:DF:E2:D9:27:A1:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71ACCBE0488611EC94D6F536D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:44:41 +0000
ROA not before: Fri 19 Nov 2021 15:44:38 +0000
ROA not after: Sat 19 Nov 2022 15:44:38 +0000
asID: 139879
IP address blocks: 156.249.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:44:38 2021 GMT
Not After : Nov 19 15:44:38 2022 GMT
Subject: CN=619674e9-abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:b4:4b:dc:49:d9:40:17:be:62:16:9a:94:
14:ca:ab:3c:28:5d:21:9f:76:36:9e:c3:69:7c:89:
aa:66:78:e2:c5:e7:ea:3a:01:5c:40:62:d7:a8:c6:
75:0b:dc:71:23:e2:09:e8:66:d0:4d:69:08:f0:06:
61:62:0d:8d:d5:93:03:d6:8e:53:29:fd:cb:ab:5b:
75:f9:7a:23:2d:4c:89:66:33:f6:b0:c5:b7:86:67:
c8:0c:1d:31:cb:a2:87:a9:b8:5a:c1:a5:2c:92:c1:
ae:30:cd:ca:47:6c:40:ff:83:d6:07:f3:48:70:81:
c9:20:e8:a9:67:8e:2f:0b:eb:fd:9b:7b:0d:39:49:
46:32:bd:fb:33:1d:ad:a8:18:c5:ef:53:2f:bb:b6:
05:24:d9:0f:f8:23:b1:1d:4e:b4:ee:93:67:6d:0a:
c8:2d:ff:d1:a7:ac:d0:fa:2d:41:8a:a2:d6:e5:7f:
c7:58:c2:4a:98:fd:58:c1:f7:07:79:44:a2:f6:fa:
42:29:34:b4:51:97:91:3a:1c:6b:fc:dd:50:8a:71:
ba:76:0d:00:fe:8a:6f:75:c8:1e:d1:94:35:bc:99:
69:02:7c:5c:d2:72:e3:bd:2d:51:fa:f3:dd:17:6b:
9b:38:ca:29:5a:13:3f:72:df:1d:39:73:f1:2e:23:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4A:00:E5:12:50:9D:3F:08:09:86:B8:12:E5:DF:E2:D9:27:A1:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71ACCBE0488611EC94D6F536D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8b:13:5b:6d:42:71:53:fd:7b:d7:62:a2:7c:04:de:86:11:
61:c9:37:1d:36:b0:c5:9b:a4:bd:a9:7c:f9:79:1f:c7:c9:af:
1c:e8:7b:19:8d:d5:de:7c:41:9b:12:31:8c:37:49:57:e4:23:
0d:a9:60:be:d2:71:19:1e:3b:4e:27:8f:e3:d5:aa:ec:3c:2f:
39:e1:1c:19:1d:8d:63:8a:35:29:80:49:d5:42:99:03:e8:94:
f4:67:94:52:13:8a:d9:5d:c3:c7:74:cc:19:f2:e6:9f:2e:c8:
2b:be:bc:e9:8d:62:05:97:90:6a:8c:bb:d0:fa:bc:2d:f6:c2:
e9:0e:b3:88:bf:89:d0:ed:49:c5:dd:68:90:ba:24:75:49:56:
7a:58:99:c9:5e:bc:f4:b3:ad:bc:e3:57:ae:ec:19:23:00:3b:
6e:62:bd:a4:cb:4d:35:0c:43:0d:27:94:95:2e:c5:f7:7c:a0:
db:94:a8:58:1e:48:73:80:ca:13:8f:37:b7:9a:4b:ff:e1:5e:
42:dc:76:62:72:f5:b7:d0:7d:ee:b0:08:05:9f:d2:1a:f3:24:
3b:cb:24:17:c8:41:af:9c:7c:25:b5:e6:78:6b:c8:07:ea:81:
66:10:92:cf:46:6b:5e:f8:a4:4a:eb:8c:e9:c8:da:0d:f4:3d:
c5:67:fe:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org