Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79A21A2A488711ECA5F32839D8A014CE.roa
File: 79A21A2A488711ECA5F32839D8A014CE.roa (raw, json)
Hash identifier: fgQIqKq0dydaGy6rzOYBXEazpsW6z1hbYOd6RV5LnmM=
Subject key identifier: 83:B3:8C:55:03:BD:A5:65:F1:32:FD:DF:F9:30:6F:0D:1F:40:4F:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79A21A2A488711ECA5F32839D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:52:04 +0000
ROA not before: Fri 19 Nov 2021 15:52:01 +0000
ROA not after: Sat 19 Nov 2022 15:52:01 +0000
asID: 139879
IP address blocks: 156.249.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3480 (0xd98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:52:01 2021 GMT
Not After : Nov 19 15:52:01 2022 GMT
Subject: CN=619676a4-8689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:0c:60:a6:0b:ec:51:ee:a9:7f:6c:2a:c6:
cc:a6:03:19:46:5f:a8:ce:96:69:9a:8b:59:19:f4:
5b:a8:75:a4:12:fa:33:4e:79:ee:9a:da:cd:db:72:
79:dc:fa:13:80:63:2c:35:c8:e9:5d:5b:ef:e9:0d:
ed:3f:a6:33:02:15:45:92:8b:17:d5:c1:7d:09:4d:
b3:dd:5f:61:f4:64:f0:22:e0:c1:36:1a:14:a0:42:
6e:11:01:40:7b:e6:4b:60:ff:11:68:71:ea:e2:df:
f5:65:50:88:72:47:c2:bc:a9:46:88:e7:4e:80:2e:
a3:96:df:4a:f0:c1:c1:55:35:3e:ea:5b:72:eb:fe:
c8:bd:df:cb:21:15:59:5e:3d:5e:73:79:65:db:65:
0f:89:b6:6a:18:00:60:c6:03:b6:af:d3:bf:44:31:
b9:49:72:02:5c:ad:5e:7a:cc:50:c7:6a:b6:40:02:
92:02:da:1f:1e:c6:d7:60:50:a4:e4:56:49:82:7e:
64:c9:6c:9f:43:bd:4e:f7:a1:92:47:cd:96:8f:46:
fc:10:46:ab:80:f0:af:12:5a:8e:93:a3:12:79:c6:
97:58:eb:8c:94:34:b9:79:19:aa:01:83:1b:bb:27:
25:d6:62:45:ee:7d:5f:ac:92:d1:e4:2c:19:df:38:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B3:8C:55:03:BD:A5:65:F1:32:FD:DF:F9:30:6F:0D:1F:40:4F:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79A21A2A488711ECA5F32839D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.173.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ce:c0:b4:8a:73:65:cc:89:49:db:9e:d3:73:06:95:c8:9b:
30:f6:29:79:5c:95:6a:cd:28:2a:95:cc:be:86:06:3e:17:25:
53:94:87:4a:69:85:7e:9a:a9:4b:bc:02:0a:33:47:18:d8:a2:
f9:3b:84:f7:6e:28:5b:a1:3d:27:85:81:67:9a:23:d8:91:d9:
eb:10:55:c9:df:6b:cc:46:09:41:93:68:14:3e:11:72:46:20:
c6:87:13:89:27:dc:42:e2:ea:17:f9:33:0f:08:d6:62:48:75:
8d:3d:83:ad:c2:95:c7:e7:fc:7b:b8:ae:a4:ea:61:16:5c:4d:
72:47:cd:8d:a8:33:64:ec:13:65:7d:4b:40:f6:ac:d8:f0:e0:
78:d5:00:bf:b7:44:12:44:9d:52:1e:db:ab:0a:dc:24:b8:76:
53:69:cf:fd:98:5b:88:28:07:65:f1:ad:e7:40:71:3f:69:00:
40:9f:b4:ea:94:d5:57:1d:bb:c4:a8:ae:7b:2a:00:45:09:1f:
f6:6f:8a:1d:5f:4e:a6:9b:ac:5b:b2:21:53:5c:bb:36:8a:5c:
fb:d2:26:7d:ed:c7:24:dc:af:50:d0:2d:2b:5f:46:7d:e7:bb:
70:7e:28:1f:5d:9c:f2:58:5e:f9:f0:80:fe:8a:a0:9b:0c:ba:
d5:99:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org