Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DE91B44488811ECAC7CA63BD8A014CE.roa
File: 9DE91B44488811ECAC7CA63BD8A014CE.roa (raw, json)
Hash identifier: szul6iw0ucve0yWvmWKP3W97F8MZkEqWBKoFZlj0Y9A=
Subject key identifier: 51:98:79:E4:1D:5F:73:CF:36:C9:F7:9C:E1:88:50:DA:B5:D6:C4:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DE91B44488811ECAC7CA63BD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:00:14 +0000
ROA not before: Fri 19 Nov 2021 16:00:11 +0000
ROA not after: Sat 19 Nov 2022 16:00:11 +0000
asID: 139879
IP address blocks: 156.247.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3545 (0xdd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:00:11 2021 GMT
Not After : Nov 19 16:00:11 2022 GMT
Subject: CN=6196788e-744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:a3:a2:f3:d5:ad:8c:48:e4:15:e9:7e:f4:
d3:f1:21:77:d9:c3:30:61:ee:5d:56:93:3a:34:cb:
e1:4e:3d:14:0e:d2:e2:90:14:93:bd:fb:48:7f:19:
b4:28:b9:61:31:1f:4e:3b:af:38:3a:2e:81:f7:5f:
3b:cd:40:c4:aa:2a:08:62:25:6e:2b:47:33:bd:3f:
7b:d2:a8:ca:6a:e4:20:93:0c:f1:e8:a0:bf:d5:8e:
f0:c4:98:8f:c3:ce:09:e4:1d:1d:39:5b:96:1d:5d:
5d:d0:66:45:18:fa:f6:45:d5:81:a1:c6:9d:06:7d:
7a:fb:e9:88:f6:4a:be:18:f0:8b:9c:2b:ba:03:d8:
82:66:4c:61:07:77:c9:01:d0:53:bf:93:50:8e:0b:
db:13:f8:31:e6:a3:3a:72:b4:6f:0b:50:e2:45:b7:
75:e8:f0:84:59:61:8f:f2:a0:45:c6:d5:9f:83:31:
c6:ab:82:3f:0a:a4:a3:03:dd:97:61:30:11:35:49:
5c:2c:5b:70:61:00:1b:85:be:da:06:20:48:7d:1f:
bc:66:41:a4:b8:85:7e:a2:7a:bb:7e:6e:e8:58:4f:
cf:94:59:62:b8:44:0b:54:cf:e0:23:8f:ee:dc:92:
99:df:50:2a:6a:ae:4d:c6:83:eb:e1:36:c1:6d:1e:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:79:E4:1D:5F:73:CF:36:C9:F7:9C:E1:88:50:DA:B5:D6:C4:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DE91B44488811ECAC7CA63BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:95:16:83:f4:c0:57:41:36:b1:21:aa:89:2b:7a:d4:30:10:
98:2a:05:bc:4a:28:65:b0:25:55:5a:7a:69:ce:68:84:f9:33:
95:5d:e8:fd:0c:34:1d:36:0d:46:df:a2:e5:08:9c:b8:ae:9d:
92:1b:88:7f:9f:a2:60:e9:08:d9:5d:59:63:dd:13:cb:19:b5:
b5:42:02:57:4f:0b:95:a5:94:ae:5c:5d:c4:14:b0:38:cd:79:
10:72:fc:8c:32:c4:da:b1:9b:41:c4:43:36:1a:52:ef:af:6a:
2a:45:30:6f:90:6f:f9:d7:11:7e:be:dd:35:7b:5d:4c:34:78:
27:19:d6:59:ec:78:cc:01:85:8a:9a:43:90:b4:3e:ec:3c:0a:
26:36:f5:03:de:46:68:3c:32:91:b6:96:25:94:78:f6:04:af:
fa:ca:56:07:57:7b:2f:bb:39:8b:04:d4:45:bd:30:50:31:1d:
13:da:29:2d:7a:e4:47:3c:53:75:1d:ca:8f:e9:98:58:cf:2a:
ca:b9:4d:9e:f4:90:a4:28:48:b3:c7:7b:81:0e:7b:51:70:db:
ec:b7:4d:9f:36:a0:5e:2d:82:92:0d:f9:f8:9e:e2:3d:04:ec:
39:f1:7c:a4:28:45:96:c9:ab:7a:b7:0b:55:bc:7f:00:aa:e3:
b3:26:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org