Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95AB7F80488311ECBA43A030D8A014CE.roa
File: 95AB7F80488311ECBA43A030D8A014CE.roa (raw, json)
Hash identifier: P101Kruaf0UsEL0NaZsaZU5EajOhcyJwjC1FziwEzr0=
Subject key identifier: D6:C3:28:8B:2B:F7:CD:D3:E5:BB:7D:DE:D0:DC:AF:B0:D5:C7:B3:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95AB7F80488311ECBA43A030D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:24:13 +0000
ROA not before: Fri 19 Nov 2021 15:24:10 +0000
ROA not after: Sat 19 Nov 2022 15:24:10 +0000
asID: 139879
IP address blocks: 156.247.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:24:10 2021 GMT
Not After : Nov 19 15:24:10 2022 GMT
Subject: CN=6196701d-61e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:89:c9:ef:9c:7b:b7:44:9c:e2:ba:56:d7:
31:6c:f0:fe:50:f6:1b:e2:e3:3e:6b:a9:97:ad:cb:
14:d2:62:6b:10:5b:82:3b:03:9a:21:84:e7:52:07:
10:a7:8d:b6:af:7d:f0:9d:b5:ba:cc:41:43:c0:e0:
93:c7:40:45:b7:e8:e5:cd:c5:48:f8:05:a3:f1:2e:
d6:5d:12:8d:37:1a:27:c6:49:1b:ca:90:51:a0:c6:
c7:1a:92:35:a7:51:6f:6f:aa:39:99:30:c1:34:bb:
ed:ef:2a:90:ba:4f:2a:9f:8a:1c:d1:c5:30:39:4d:
2d:ac:19:92:f8:df:74:3e:71:01:63:20:93:df:59:
64:43:55:19:87:4f:00:d2:7f:5d:89:fd:20:cf:e7:
9a:3d:95:81:a0:e7:d6:2e:96:77:1e:a6:a8:f2:1b:
b9:53:05:4e:47:f9:74:e3:6e:e6:d5:80:8a:1a:26:
f3:8d:fb:cc:e5:c2:9e:9a:ee:73:41:86:68:c1:7a:
09:8f:b2:d3:86:9d:c9:29:fd:7b:b1:56:88:81:62:
5a:a2:30:ef:f5:28:39:36:51:17:be:fd:56:83:6e:
fb:7d:1d:ae:5d:c8:20:32:77:5a:6a:18:41:0b:a2:
dc:6a:91:90:e5:3d:99:63:0f:fb:a3:3d:2f:41:6e:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:28:8B:2B:F7:CD:D3:E5:BB:7D:DE:D0:DC:AF:B0:D5:C7:B3:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95AB7F80488311ECBA43A030D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ec:a8:87:14:13:03:39:e1:b5:cc:53:e8:72:3c:a0:3c:d1:
4d:9e:f5:29:bc:fe:7d:ce:d7:5a:bf:fc:a3:ea:77:43:08:cc:
3d:d7:16:7a:f9:78:bf:3a:1f:f9:c3:f4:a0:93:a5:66:0f:2d:
27:76:bf:7b:3a:d1:bc:cf:4a:ba:4f:4a:9d:ad:aa:d8:9f:bf:
f4:c6:a8:4d:0b:08:06:50:96:0c:28:bb:4a:80:aa:6f:12:8e:
e0:0a:27:28:4d:2c:fe:67:65:14:04:05:a5:a6:b8:40:56:fe:
ab:1b:54:ae:c6:3b:92:5e:a6:64:7e:60:47:5e:24:21:56:80:
be:41:46:75:e1:0f:13:a9:b7:1d:57:6e:66:01:5b:f5:b3:15:
cd:96:3a:51:17:fa:d5:d8:bb:0a:99:cf:59:4a:c1:e7:e1:aa:
b2:3b:e9:e7:d4:28:fc:0b:97:ec:fb:3c:ce:87:55:39:43:49:
34:34:ae:fe:dd:97:94:f5:7e:a5:da:85:9a:58:8e:4b:b3:8d:
81:9d:3c:ce:e3:4b:fb:67:bd:01:b4:59:15:07:46:be:44:38:
0d:12:64:93:fc:b1:aa:6b:28:5b:46:cc:fe:95:cc:d1:ac:99:
48:2b:73:66:37:fc:a8:1b:e1:11:d5:13:b9:45:f2:17:92:62:
66:19:22:ea
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNTI0MTBaFw0yMjExMTkxNTI0MTBaMBgxFjAU
BgNVBAMMDTYxOTY3MDFkLTYxZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDePYnJ75x7t0Sc4rpW1zFs8P5Q9hvi4z5rqZetyxTSYmsQW4I7A5ohhOdS
BxCnjbavffCdtbrMQUPA4JPHQEW36OXNxUj4BaPxLtZdEo03GifGSRvKkFGgxsca
kjWnUW9vqjmZMME0u+3vKpC6TyqfihzRxTA5TS2sGZL433Q+cQFjIJPfWWRDVRmH
TwDSf12J/SDP55o9lYGg59YulncepqjyG7lTBU5H+XTjbubVgIoaJvON+8zlwp6a
7nNBhmjBegmPstOGnckp/XuxVoiBYlqiMO/1KDk2URe+/VaDbvt9Ha5dyCAyd1pq
GEELotxqkZDlPZljD/ujPS9BbgGXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU1sMo
iyv3zdPlu33e0NyvsNXHs7kwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzk1QUI3RjgwNDg4MzExRUNCQTQzQTAzMEQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc94IwDQYJKoZIhvcNAQELBQAD
ggEBAFvsqIcUEwM54bXMU+hyPKA80U2e9Sm8/n3O11q//KPqd0MIzD3XFnr5eL86
H/nD9KCTpWYPLSd2v3s60bzPSrpPSp2tqtifv/TGqE0LCAZQlgwou0qAqm8SjuAK
JyhNLP5nZRQEBaWmuEBW/qsbVK7GO5JepmR+YEdeJCFWgL5BRnXhDxOptx1XbmYB
W/WzFc2WOlEX+tXYuwqZz1lKwefhqrI76efUKPwLl+z7PM6HVTlDSTQ0rv7dl5T1
fqXahZpYjkuzjYGdPM7jS/tnvQG0WRUHRr5EOA0SZJP8saprKFtGzP6VzNGsmUgr
c2Y3/Kgb4RHVE7lF8heSYmYZIuo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org