Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75743B6A488511EC9A88AF34D8A014CE.roa
File: 75743B6A488511EC9A88AF34D8A014CE.roa (raw, json)
Hash identifier: D1ZWpe84e8bV+Y4e0HrkCy+qjfNzQ2ws4aN1Q4rBFKA=
Subject key identifier: 54:B9:C1:91:FA:6C:AA:CD:20:72:68:94:60:86:08:FF:FF:E6:7A:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75743B6A488511EC9A88AF34D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:37:38 +0000
ROA not before: Fri 19 Nov 2021 15:37:35 +0000
ROA not after: Sat 19 Nov 2022 15:37:35 +0000
asID: 139879
IP address blocks: 156.249.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3370 (0xd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:37:35 2021 GMT
Not After : Nov 19 15:37:35 2022 GMT
Subject: CN=61967342-82b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:d6:74:98:66:33:21:5a:2d:73:9b:85:6f:
e5:3c:32:5c:81:d9:b8:76:ef:40:ab:2f:72:ac:fb:
21:b4:19:78:5e:6a:4f:f2:a0:d8:59:cd:5d:52:ba:
97:d2:ce:9e:fc:5b:1b:e3:ec:d5:77:bc:c2:87:7d:
f7:03:65:fd:bc:b0:40:e9:93:d7:d5:9c:22:ae:de:
a9:0a:e6:27:ee:b7:36:f3:71:94:f5:d7:27:cd:2e:
5c:d2:0b:bb:3f:b1:bb:86:2d:53:45:12:04:0a:e9:
8b:c1:1f:58:d4:a3:45:3e:2d:8b:88:12:5d:ec:a0:
a2:30:ac:fb:bd:b8:0b:ca:e3:d0:31:dd:36:12:b3:
47:4e:ed:69:e9:48:97:17:de:29:08:2b:02:64:da:
88:43:91:79:8e:47:78:f1:66:86:a2:68:7a:34:d7:
c7:5e:5e:c5:b4:ae:86:52:ba:f3:3d:ed:a6:c1:0d:
14:87:da:19:01:1e:ca:15:37:b0:9e:7b:04:61:da:
d6:2a:cf:d2:68:4a:16:8c:7f:c3:f4:ed:48:3f:90:
fa:50:a5:07:15:cb:5c:7f:10:85:97:bd:e5:65:77:
78:54:57:be:77:ce:f0:c0:24:be:39:99:bf:47:0d:
63:4f:30:bf:f9:7e:57:dd:f0:49:ec:5f:ba:d7:fa:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B9:C1:91:FA:6C:AA:CD:20:72:68:94:60:86:08:FF:FF:E6:7A:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75743B6A488511EC9A88AF34D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.152.0/24
Signature Algorithm: sha256WithRSAEncryption
90:08:fc:3a:20:86:5a:81:b1:e9:7b:0f:00:f2:c7:46:a9:d7:
a7:7a:a7:fd:8e:3d:98:9a:da:df:a8:54:1b:b6:86:a7:a4:a8:
fb:3d:89:24:63:29:5c:9b:03:0e:30:81:36:e4:53:d7:3c:da:
d1:8b:24:71:68:92:58:ff:f7:34:03:ea:1d:b7:cd:fb:71:7a:
49:46:53:69:99:cd:15:81:4c:ff:cd:77:4c:25:d3:56:c7:4c:
e3:a8:4c:68:2a:a1:16:ef:8c:a2:4c:56:c7:3a:03:54:75:bf:
4f:d0:0f:46:fe:a0:34:a1:92:79:92:6d:1f:4c:1e:a3:8b:fb:
4e:9d:21:93:52:da:11:ba:11:a9:27:e4:87:9e:3d:58:1d:3c:
b9:7e:38:a5:66:da:32:d1:10:03:bd:a2:dc:11:88:77:ff:d3:
e0:47:14:f2:ca:80:ad:b9:ce:f3:4e:e6:6f:72:65:42:63:f0:
b7:bf:37:c2:0e:e6:9e:e8:07:95:33:12:d7:03:71:3a:fe:15:
79:3d:47:57:83:57:d5:0f:67:36:df:d6:8c:8e:d4:9c:50:f7:
83:19:91:03:ef:d7:1c:2d:40:66:b8:b7:18:c6:17:64:14:49:
69:d0:b3:e6:6b:28:a2:cd:92:5a:2a:1f:ef:80:a6:71:55:e7:
1e:39:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org