Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92152342488A11EC88B5FD3FD8A014CE.roa
File: 92152342488A11EC88B5FD3FD8A014CE.roa (raw, json)
Hash identifier: 7weuQKVA49kjBb2Y5lt0cNoeZOHOvmVjXtWUSJXdtCA=
Subject key identifier: 08:A1:39:05:10:07:F0:64:AC:CC:BF:F4:5E:B5:05:15:EA:86:94:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92152342488A11EC88B5FD3FD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:14:14 +0000
ROA not before: Fri 19 Nov 2021 16:14:10 +0000
ROA not after: Sat 19 Nov 2022 16:14:10 +0000
asID: 139879
IP address blocks: 156.249.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3653 (0xe45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:14:10 2021 GMT
Not After : Nov 19 16:14:10 2022 GMT
Subject: CN=61967bd5-bc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:35:43:e0:5e:65:64:04:f5:41:60:f5:4d:
29:d0:2d:57:e8:48:ce:fd:82:fa:94:11:81:53:34:
cf:f0:a0:ff:47:c3:bf:91:56:56:b5:28:20:54:78:
01:06:fd:f2:0d:96:00:2a:e0:0c:f2:c1:6b:91:8b:
aa:19:08:47:85:14:f6:96:e8:14:3b:d1:8d:cc:94:
b4:ad:4e:f6:d8:5f:9a:8f:2b:53:7e:4f:07:21:70:
fb:6e:cc:0e:77:2a:45:54:b1:fa:4f:af:9d:e2:79:
3a:22:c0:56:41:d3:85:5d:ef:e2:10:9d:63:7a:52:
cf:06:fe:70:f1:f3:e8:18:c2:6e:45:1d:5d:87:d5:
75:99:20:31:1a:c7:3c:88:34:3a:cb:c0:92:be:11:
31:1a:4f:a5:6a:79:f4:d1:b9:b6:b0:10:b3:e0:3d:
d0:d1:5c:0c:27:91:f6:a7:f0:07:46:cf:dc:f3:f2:
e1:5b:d3:c7:77:08:94:93:bb:2b:cd:e6:f7:90:49:
3b:40:37:0c:0b:b7:71:b8:b6:43:a4:8b:21:02:25:
10:1e:38:d2:a0:2d:de:85:c6:a9:22:5c:dc:bd:34:
5f:1f:4b:27:1e:8d:77:4b:75:15:61:1f:22:ef:5a:
62:e2:fd:dc:4c:92:a0:a7:cc:25:d2:1d:22:5c:59:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:39:05:10:07:F0:64:AC:CC:BF:F4:5E:B5:05:15:EA:86:94:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92152342488A11EC88B5FD3FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:48:15:55:ef:c5:51:1f:13:22:47:57:74:57:f3:80:83:32:
5d:03:2d:1b:86:1b:b1:e0:6e:c7:f8:1b:96:4b:c0:77:90:86:
0c:ac:50:d6:3c:3d:79:a2:d3:4e:32:3e:28:52:cd:f4:4b:d5:
93:a8:ae:7a:d0:b9:9f:c1:e1:c6:c0:d3:2b:3f:73:dc:7a:c4:
24:b7:50:33:1b:0c:42:8a:9b:00:64:17:de:bb:ce:64:74:f7:
51:b8:05:71:7d:7b:d9:ff:e9:3b:26:92:09:35:3f:32:bf:59:
1e:d0:51:ad:c1:5f:3c:08:56:e8:53:38:f5:7c:70:ca:21:08:
a1:f9:25:b9:e2:c0:f5:12:5e:51:78:14:4c:df:07:e8:04:8f:
8d:db:fd:43:74:9f:c2:e3:df:bf:35:3b:b1:af:62:7b:3d:52:
29:8b:65:6c:5e:d9:f5:8e:1c:c7:d8:77:d0:20:37:71:86:04:
fc:eb:57:a5:07:6f:1a:39:90:a8:51:42:83:b0:3f:e8:84:f1:
c7:67:82:e7:41:b7:5e:16:19:e9:a8:f4:8f:5b:f6:b1:f8:ba:
45:1c:d8:69:31:b0:8f:e7:d5:cb:51:2f:e4:e2:92:83:9d:5a:
23:8e:c7:90:e5:34:9f:49:89:42:ca:4a:14:7f:4a:da:86:06:
2e:60:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org