Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/887A379C488911EC8595AC3DD8A014CE.roa
File: 887A379C488911EC8595AC3DD8A014CE.roa (raw, json)
Hash identifier: yMOEfi5IP3iH/66DgG3XrcN52spCUlWYnJ+AePi8Kgo=
Subject key identifier: 51:41:61:E1:E8:E7:44:20:18:A8:32:6B:86:9E:5D:3D:C4:19:B2:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/887A379C488911EC8595AC3DD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:06:48 +0000
ROA not before: Fri 19 Nov 2021 16:06:44 +0000
ROA not after: Sat 19 Nov 2022 16:06:44 +0000
asID: 139879
IP address blocks: 156.249.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3596 (0xe0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:06:44 2021 GMT
Not After : Nov 19 16:06:44 2022 GMT
Subject: CN=61967a18-4c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:7c:f6:8d:5e:d2:d0:f2:71:e4:f8:87:a5:
c2:71:0e:9d:54:20:cd:97:44:71:fe:dd:aa:64:3d:
c8:0f:d8:be:6a:38:27:0e:b6:7b:4f:ee:7a:df:86:
d1:78:04:a4:36:c1:20:bd:a4:e7:02:9e:8a:f0:78:
e5:b4:00:e0:13:aa:d7:f9:ae:46:fb:fd:2e:15:5b:
fd:96:25:e0:bc:13:66:04:b5:74:f9:3c:69:ce:53:
85:d0:99:aa:dc:0a:10:32:67:7e:2e:dc:f7:a3:db:
b9:d8:d5:81:e5:65:73:c7:57:25:dc:4e:4d:30:57:
d1:0c:8a:6f:db:ff:55:90:c5:bd:b3:4d:6c:f1:d3:
b0:21:a0:c0:e5:5b:dc:df:b6:88:4c:29:ed:54:41:
a6:b8:b7:8a:9a:ca:ae:b1:98:ea:d7:21:6c:36:1f:
3e:41:93:12:8f:99:3d:75:49:a4:79:89:26:70:95:
65:de:8e:ba:d0:ad:b5:46:eb:c6:65:fb:e7:c4:da:
81:ca:82:75:3a:91:25:b1:e0:cf:ff:6f:58:04:3c:
b4:1f:79:7b:16:cb:d7:55:49:c6:aa:f3:79:1e:f0:
9f:5a:25:d5:56:ff:89:18:bb:3c:a4:10:a4:1c:d5:
9e:e5:4f:67:0a:27:6f:61:50:01:a0:57:4a:2d:02:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:41:61:E1:E8:E7:44:20:18:A8:32:6B:86:9E:5D:3D:C4:19:B2:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/887A379C488911EC8595AC3DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.193.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9f:cf:fe:26:fe:2e:dc:30:a4:19:02:72:61:85:0f:93:4c:
ff:67:c1:26:77:89:f5:3d:6a:0c:de:ae:98:2b:6d:7a:4f:aa:
33:03:ee:a3:4d:d6:ac:5b:12:43:c3:11:0d:d6:72:8d:c2:e9:
f7:9f:a0:0f:31:4c:bf:95:aa:d1:78:f7:2d:48:cf:8a:92:2f:
86:2f:f6:75:f6:5b:57:2f:49:8c:ef:88:78:8f:36:ce:80:c8:
59:15:88:5b:08:a6:fe:9f:04:1f:bc:8f:53:f6:a8:98:9b:2c:
cf:a0:ef:09:fa:78:3c:66:8c:30:e9:0a:33:7d:09:c2:49:37:
fd:05:cd:43:75:92:46:07:bb:f0:07:27:6c:8e:53:97:69:ba:
a8:43:51:64:0e:29:24:4c:b2:88:0b:9f:96:44:aa:a3:8c:9c:
cd:7b:7a:7e:ea:ab:e6:7e:6a:19:bf:a3:64:30:e1:14:c3:bf:
10:83:53:f9:b2:ad:4e:1e:a7:43:ba:f9:69:75:f2:22:63:b2:
5d:57:fb:2c:46:f1:e1:07:7b:39:1c:73:0c:76:be:db:60:0c:
01:69:c8:e1:e9:9b:47:4e:db:a8:e1:e2:ed:6e:d8:3c:a5:28:
ef:06:a7:65:60:c5:e4:b3:56:28:bc:ed:25:eb:dc:fd:45:05:
92:a4:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org