Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82909346488711ECAD2B2C39D8A014CE.roa
File: 82909346488711ECAD2B2C39D8A014CE.roa (raw, json)
Hash identifier: tea37ypkUm64Xw7oN+rPfCqFjUKJH7XcqF4BwfPC7BU=
Subject key identifier: E4:C1:9C:02:56:CA:CA:05:29:6D:CB:40:60:9B:9A:91:3F:5D:3D:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82909346488711ECAD2B2C39D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:52:19 +0000
ROA not before: Fri 19 Nov 2021 15:52:16 +0000
ROA not after: Sat 19 Nov 2022 15:52:16 +0000
asID: 139879
IP address blocks: 156.231.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3482 (0xd9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:52:16 2021 GMT
Not After : Nov 19 15:52:16 2022 GMT
Subject: CN=619676b3-2940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:24:87:fd:d4:15:fd:b2:84:f9:0c:74:58:
f9:8a:1d:fb:55:3a:0b:db:27:cb:b0:6c:84:6f:ca:
e3:44:60:75:17:9f:34:59:95:aa:77:8e:11:6c:25:
e3:aa:10:e1:83:6d:61:aa:07:bb:66:3a:de:6c:4a:
0d:fe:d1:33:1c:ee:69:f6:b3:aa:6a:02:31:eb:17:
ea:25:14:4e:2d:67:b4:3d:be:bf:ac:1c:d4:96:00:
bd:2a:3e:ca:ee:fd:90:fe:ff:78:e5:06:4a:cc:75:
29:12:4f:98:6d:e6:52:f4:ba:8e:8b:ef:7f:4c:e5:
0d:19:87:ba:18:11:6c:94:7b:06:a8:22:7f:1a:b4:
59:0d:67:aa:19:9b:57:48:e1:18:1c:64:ed:58:7d:
ff:f4:47:b1:07:87:66:30:f2:3a:2b:97:8b:3d:9e:
72:ae:87:b3:ca:c1:cc:89:fd:46:57:1e:f9:e4:9d:
90:57:15:46:09:49:42:8b:05:c4:a3:9d:a2:37:06:
9b:b9:9c:de:60:c2:ae:e0:3c:c7:1d:1f:ee:d7:d5:
45:02:31:16:09:0a:02:c6:0e:a0:ec:c5:71:fb:85:
c2:92:7c:53:e5:eb:09:5e:e8:ae:50:2c:4c:ed:f5:
26:3f:97:af:41:53:6e:54:ee:20:98:7e:bc:df:2b:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:9C:02:56:CA:CA:05:29:6D:CB:40:60:9B:9A:91:3F:5D:3D:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82909346488711ECAD2B2C39D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.173.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b8:22:b4:67:cf:3a:1b:b3:f8:74:3b:b6:7b:10:70:a4:0a:
f1:66:6d:b5:36:58:3a:5a:d1:38:e6:d2:74:38:62:7e:bf:e2:
74:de:a1:5c:13:29:27:44:04:b8:35:e8:96:b6:11:f1:f1:b7:
d5:33:70:42:34:15:67:94:2f:9a:64:95:6f:ab:a6:05:bb:84:
c0:b2:02:60:d7:13:bc:c1:c6:67:c7:96:76:0b:4a:55:68:f4:
c5:7a:e8:53:ce:93:35:cc:3e:13:ff:18:ec:08:63:1c:67:e3:
99:2d:09:64:a0:ae:01:08:93:e8:ca:06:af:ba:e8:14:ca:e1:
a8:fc:aa:b0:26:fd:a9:f6:0b:c9:0c:9c:9e:40:64:97:ab:d6:
0a:33:3f:e8:b8:e5:81:18:57:71:e7:de:a0:ae:93:91:78:70:
a5:fa:b3:46:a1:47:b1:65:4f:a3:e7:f3:0c:65:36:0e:eb:6d:
71:41:50:9f:c5:d0:47:c3:15:96:83:66:c0:d8:83:92:f0:46:
6e:8e:0d:df:23:5e:b9:66:c7:5e:9c:15:2b:f0:aa:97:8c:86:
96:1e:13:94:e9:43:96:c5:49:35:7b:31:c6:88:e7:f7:36:7c:
12:ab:53:8f:57:a2:e8:b8:24:d7:9c:e1:b9:4a:eb:dd:0e:c7:
9e:dd:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org