Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A22C50A0488711ECA9A56F39D8A014CE.roa
File: A22C50A0488711ECA9A56F39D8A014CE.roa (raw, json)
Hash identifier: nPZ6ZFRI+yFkh+UxuIoKADJVvBwKZpQIckniLhLepQQ=
Subject key identifier: 17:D1:26:CE:B3:7C:A1:CB:95:1D:FD:A1:62:10:C3:ED:08:33:C9:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A22C50A0488711ECA9A56F39D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:53:12 +0000
ROA not before: Fri 19 Nov 2021 15:53:09 +0000
ROA not after: Sat 19 Nov 2022 15:53:09 +0000
asID: 139879
IP address blocks: 156.247.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3490 (0xda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:53:09 2021 GMT
Not After : Nov 19 15:53:09 2022 GMT
Subject: CN=619676e8-71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:56:72:d1:61:5f:38:65:5e:55:cc:70:d4:
01:35:12:da:8a:4c:21:6f:ee:a5:e1:18:b7:64:76:
a6:48:f2:2d:f3:f5:3e:e8:f0:7c:13:be:20:5e:a2:
2d:15:21:fc:31:e2:44:c0:14:8c:f5:b7:81:77:0f:
a6:18:90:11:54:e2:df:c0:91:ff:6b:37:2a:a1:6c:
b8:c3:42:2b:a9:9d:1f:82:4b:49:f6:eb:f3:91:2a:
48:55:4c:f7:c9:24:0a:02:3a:88:33:0e:2e:06:00:
ea:10:e7:43:8a:88:a3:d6:23:2c:c4:aa:b9:3c:c7:
6f:1c:7c:b1:db:01:02:96:0c:27:9f:43:16:86:cf:
1b:23:75:07:ce:9d:54:f0:24:c2:c6:43:f2:13:26:
a9:f7:c5:ae:9c:6a:c4:80:84:a4:61:b3:9c:4f:38:
dd:8e:3b:5b:91:28:74:ea:c7:c2:37:07:ad:14:55:
ab:45:55:7a:b1:7b:f8:bc:0c:f0:cd:ad:b5:4e:2f:
6e:5a:b1:67:5e:56:b8:e4:2d:14:a3:01:05:06:5c:
b8:1a:7a:ee:84:00:14:56:4c:2e:de:a7:53:5a:da:
5b:f9:03:31:a5:75:25:8b:b6:7b:d1:5e:dd:4d:09:
4f:f6:f6:25:1d:92:c4:f5:ed:5c:d2:78:43:a1:35:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:26:CE:B3:7C:A1:CB:95:1D:FD:A1:62:10:C3:ED:08:33:C9:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A22C50A0488711ECA9A56F39D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ae:16:ac:69:38:b3:9b:ef:66:74:20:9e:d7:c5:08:32:ba:
db:c9:2d:90:13:bd:20:44:a3:30:b1:56:e6:79:dc:41:de:92:
ce:22:6d:e5:f2:d0:58:3b:52:10:6b:fd:10:d3:6b:cd:75:90:
bf:26:28:61:d5:c0:46:c3:e1:00:1a:69:30:ca:d4:de:30:b2:
3c:84:66:4e:f2:70:58:28:20:91:5b:74:a1:d1:50:db:45:c0:
19:07:41:bc:15:5b:ac:5a:f4:dc:f4:06:5e:4f:7a:b7:b7:8a:
31:c2:22:6b:22:00:2d:21:6f:00:da:45:62:27:ef:b1:2b:20:
8a:d2:06:85:6e:5c:f5:a1:cd:8c:d5:aa:e2:3d:89:42:57:65:
a8:5b:9a:d7:37:32:ae:13:a6:ab:f2:ce:04:10:9d:86:43:77:
4d:1c:c2:8c:52:29:af:91:8c:8e:06:01:0f:e8:06:59:93:a8:
64:31:c0:b9:ff:e5:83:e7:59:f0:54:81:29:af:28:47:d7:5e:
88:98:57:ec:aa:18:2c:f5:92:80:cc:1a:da:21:3f:af:51:44:
7f:3c:85:8b:2a:34:87:54:1d:24:2c:81:4a:18:d2:b4:ca:3d:
60:b7:44:b8:98:12:65:38:0c:db:1d:9c:3f:c6:b4:df:04:6a:
13:fd:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org