Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A3037AC488A11ECB5B2D93FD8A014CE.roa
File: 8A3037AC488A11ECB5B2D93FD8A014CE.roa (raw, json)
Hash identifier: JpWrShDUfn6q6eeS/hc48pATXWMU6bwn9Bx+aRxckSQ=
Subject key identifier: 9B:46:3E:F3:86:8F:B8:00:4C:F5:1C:AF:C3:2E:0F:89:9A:15:4F:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A3037AC488A11ECB5B2D93FD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:14:01 +0000
ROA not before: Fri 19 Nov 2021 16:13:57 +0000
ROA not after: Sat 19 Nov 2022 16:13:57 +0000
asID: 139879
IP address blocks: 156.247.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3651 (0xe43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:13:57 2021 GMT
Not After : Nov 19 16:13:57 2022 GMT
Subject: CN=61967bc8-2a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:0f:cf:22:f3:5f:4e:73:0c:ae:6a:0f:0c:
d6:2b:e8:0d:18:7d:82:df:78:94:3f:6a:af:a7:05:
45:16:9a:03:f0:0a:73:99:cb:4f:af:05:5c:0e:81:
0c:ce:eb:97:22:e2:78:1d:59:26:26:8f:42:cf:74:
74:1b:32:52:c7:b1:07:b8:b5:5f:40:12:20:02:8f:
c4:11:d9:6d:37:57:5e:ca:7f:23:7c:be:25:f5:2d:
21:b9:95:ac:61:d6:ee:57:11:9e:51:15:09:ce:b2:
ba:a6:82:93:fe:60:67:2d:3c:e0:31:a7:6d:9d:da:
e3:86:bf:62:96:88:16:6c:c6:32:4e:69:f3:42:f0:
9c:05:28:4b:33:09:a3:c3:cb:eb:f5:36:34:76:bc:
4a:f4:bb:06:5e:f9:70:fa:66:a4:e5:3f:1d:47:d7:
8a:e0:f4:b1:f0:fc:74:b2:f5:5d:83:52:6d:63:c8:
06:59:e9:d2:bf:d2:e5:e0:db:a7:7e:73:e2:1e:ef:
ef:4a:bd:7f:f7:c7:dd:cb:63:c0:00:71:8a:4e:0c:
f7:d7:21:97:91:63:da:75:58:de:d7:91:6d:28:d8:
de:a7:c4:93:21:74:83:78:a6:46:ec:a6:ec:19:fd:
e1:0a:14:d7:fd:d0:4d:96:9c:0c:05:26:b5:b6:39:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:46:3E:F3:86:8F:B8:00:4C:F5:1C:AF:C3:2E:0F:89:9A:15:4F:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A3037AC488A11ECB5B2D93FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:aa:e8:dc:6a:57:d2:30:c7:dd:17:f4:8c:7b:7e:44:56:f9:
5c:31:d8:3f:18:54:40:61:3d:a7:cf:d2:40:ba:55:38:4a:17:
b3:43:9b:38:e9:51:02:29:e0:31:86:fc:18:6c:1a:66:9b:a1:
21:bb:ae:cc:03:8f:19:5e:be:26:88:57:39:32:87:04:af:ee:
e7:a1:a9:61:00:3e:bc:4a:2d:a6:05:ac:da:fb:eb:8b:c2:3a:
c4:8b:54:63:55:40:f0:87:78:b8:35:66:7a:09:05:f2:48:e2:
a1:f7:03:c5:0e:55:b6:4c:79:22:89:03:e7:e6:4d:9a:f3:fe:
a5:9f:a3:fe:59:00:cc:63:5d:c6:f4:28:cc:3e:dc:d0:aa:73:
b2:c7:90:95:ad:ee:19:b2:31:de:34:53:65:eb:f4:a1:a9:ab:
99:d0:15:1b:4e:3d:c2:ad:1a:c7:45:e7:58:21:6d:9b:87:55:
c8:87:d6:87:7f:66:86:87:1a:8a:0f:ca:3e:f8:35:cd:d4:1d:
8d:13:71:d9:c6:04:d1:d8:35:fa:45:3b:e3:f5:18:65:a4:25:
d1:e4:c9:ee:f4:70:22:11:0c:70:83:fa:53:ca:34:25:6d:93:
ee:2a:c8:51:e7:c9:ba:c1:f7:7d:24:5d:87:35:ab:04:7e:44:
9d:56:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org