Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/868E028C488511EC9419E434D8A014CE.roa
File: 868E028C488511EC9419E434D8A014CE.roa (raw, json)
Hash identifier: xi44mzwi3pxFmL9cJPsUcAr/z0BqewveYBd5AYqAiwo=
Subject key identifier: 4B:4B:1A:05:04:81:C9:90:9C:55:CF:5A:B8:8C:BE:E6:7B:C3:BE:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/868E028C488511EC9419E434D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:38:07 +0000
ROA not before: Fri 19 Nov 2021 15:38:03 +0000
ROA not after: Sat 19 Nov 2022 15:38:03 +0000
asID: 139879
IP address blocks: 156.247.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:38:03 2021 GMT
Not After : Nov 19 15:38:03 2022 GMT
Subject: CN=6196735f-229c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:e2:08:18:6b:6a:04:de:4b:48:29:02:90:
6b:c1:f5:41:e2:b4:01:5c:a4:43:42:f5:0a:a9:c3:
92:a1:32:f7:7e:a4:05:27:cd:92:33:ea:fb:3a:30:
aa:50:46:92:aa:00:e9:f9:66:3d:47:77:48:0a:d1:
5b:e1:2d:f9:e1:6e:2d:0a:5c:e8:21:4a:ec:8e:10:
20:68:10:2d:d1:81:30:aa:c2:e0:1f:1a:63:1c:85:
db:5c:bd:d6:a3:c6:c6:6f:b7:bf:8b:5d:9c:2b:4b:
98:36:f5:1d:17:d9:97:48:1f:9b:76:c3:e1:1e:0d:
39:d0:48:98:ec:86:dd:99:25:0c:20:e9:43:20:1f:
89:31:b4:98:9a:35:cb:1b:e4:a5:91:fe:0e:7d:f6:
13:e2:33:49:6e:1a:76:88:a3:5f:b9:f8:d7:34:57:
fc:92:a6:90:5a:68:ae:bc:a7:e3:97:8f:4c:35:d6:
b0:8c:a0:29:c4:e5:b2:93:08:9f:fe:b3:c6:58:50:
c1:44:44:2f:9c:dd:80:15:ab:45:22:c3:6d:d4:67:
89:9f:2f:b0:3c:d9:d6:0a:1a:b6:4a:76:2d:4e:ba:
51:5f:5d:4d:22:99:a7:ad:5d:3f:68:78:f9:1d:13:
25:ae:46:04:3a:dd:0d:10:84:9f:62:bf:9f:45:df:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:1A:05:04:81:C9:90:9C:55:CF:5A:B8:8C:BE:E6:7B:C3:BE:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/868E028C488511EC9419E434D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9d:99:29:89:8d:79:3b:81:26:80:82:05:2c:3d:9b:9e:f4:
f6:6c:8b:97:39:63:51:4f:ba:86:87:4e:62:4d:37:82:ca:16:
58:2a:01:4e:f9:2a:fd:ca:ec:82:21:e6:70:69:2a:6f:2e:b3:
25:50:f2:18:a8:10:88:c0:34:6b:cc:f0:4f:7b:75:ab:a8:08:
98:66:af:da:e2:41:0a:5e:7b:7c:e9:01:4c:32:7a:8a:0b:52:
6d:94:95:67:e2:12:e5:3c:17:48:54:29:5d:7d:f8:b7:3b:0f:
de:c5:26:0d:b7:f3:af:fb:46:55:8d:c0:93:90:27:e4:ea:ae:
c2:36:8a:bd:71:7e:7e:ea:a9:05:50:a6:99:a6:6f:d2:2b:25:
84:9a:5f:36:8e:76:51:3b:3d:66:d4:5e:22:c8:c2:21:24:88:
83:62:ca:d0:97:19:10:61:47:77:26:f4:2b:8a:f4:98:12:d6:
91:72:c8:18:8d:91:94:38:6b:f6:d3:ef:e8:e0:c8:e5:5a:20:
dc:86:0e:8f:ae:d3:6e:05:6f:61:1e:49:8a:a2:ae:60:f0:f9:
05:e5:91:04:39:4c:38:d4:09:41:57:66:23:22:cf:4d:aa:c4:
0c:e8:cb:d6:fd:ee:08:9c:90:b7:c9:b7:41:16:da:75:5f:6d:
d5:d0:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org