Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6D49192488911ECADF4DF3DD8A014CE.roa
File: A6D49192488911ECADF4DF3DD8A014CE.roa (raw, json)
Hash identifier: fTesifzEJx3bQkvxD59XSwAwk09/jarTozJG2wShmDM=
Subject key identifier: 50:5F:37:D4:01:99:9F:83:5E:70:2A:58:0E:0C:7C:E9:D4:A2:E4:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6D49192488911ECADF4DF3DD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:07:39 +0000
ROA not before: Fri 19 Nov 2021 16:07:35 +0000
ROA not after: Sat 19 Nov 2022 16:07:35 +0000
asID: 139879
IP address blocks: 156.249.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3602 (0xe12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:07:35 2021 GMT
Not After : Nov 19 16:07:35 2022 GMT
Subject: CN=61967a4b-4827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:03:a9:4c:ba:bf:f1:cf:cf:db:42:a0:32:
36:03:3f:fd:99:46:91:1c:81:53:88:5c:aa:ed:69:
c5:a3:ea:ee:97:cd:2e:14:6f:bc:7d:9a:24:47:c0:
2d:6b:8e:11:71:6c:5b:1b:4c:87:3b:b1:ab:ed:2e:
92:d4:09:96:6c:cb:1c:ac:4a:56:37:42:03:9f:6b:
df:77:87:e3:e0:18:9c:7d:95:04:28:c1:35:12:ca:
71:39:6e:05:48:59:b2:f1:5a:a8:3d:55:32:e4:f1:
15:8a:d9:a5:d5:f2:dd:6f:cf:fa:ef:cb:f6:22:ba:
bd:ea:a3:d9:a4:0c:86:7b:08:a4:66:ae:d4:8d:85:
e4:c4:89:63:ff:e0:9b:e7:86:90:39:e4:04:37:09:
5b:a3:84:8d:1f:4e:1b:3c:0f:bd:d7:61:e2:78:cf:
87:09:0b:b6:84:c5:1f:bf:9d:49:c8:da:5e:00:3a:
27:ad:6f:a7:73:c9:cb:b4:e7:85:c8:ee:aa:b5:86:
ec:6f:de:99:43:bb:e6:81:42:81:fa:20:95:dd:b1:
b7:f3:35:31:19:96:be:f1:0b:7d:6b:b4:52:9e:44:
10:e4:8e:7a:93:76:13:bc:2e:ea:54:b8:76:ec:e3:
0a:75:16:ed:e4:19:8a:7a:b9:51:20:85:50:d1:89:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:37:D4:01:99:9F:83:5E:70:2A:58:0E:0C:7C:E9:D4:A2:E4:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6D49192488911ECADF4DF3DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:39:c6:51:0f:e7:6a:a7:49:96:fd:63:cf:b6:b8:9d:e6:64:
aa:7e:1a:b6:a6:c5:de:60:a0:2d:94:17:24:11:20:ee:d2:ad:
8f:e4:b4:e1:79:6f:c7:bd:3d:87:c3:2f:5c:59:22:09:e0:a5:
13:52:11:fc:ba:a0:fd:4e:8f:62:e5:7c:51:61:e4:1e:07:78:
99:19:73:1a:bd:60:1d:15:39:ef:b9:6f:16:cf:d2:5e:f0:a3:
aa:67:40:2a:2b:82:6a:f4:6a:2a:37:cb:2e:5a:21:3b:c8:42:
cb:55:bb:0e:14:54:77:0f:23:f9:8d:fa:a4:e6:d0:08:fe:c6:
72:f7:54:5e:50:cf:f3:54:71:bb:f3:f4:fc:9c:a7:70:6d:a7:
62:b6:d5:32:d3:5d:b1:d4:fa:1f:f4:af:77:0d:8c:31:b1:2b:
30:70:bd:0c:1a:88:e7:e3:c4:67:40:e0:30:82:8d:42:93:39:
10:7d:39:b3:cc:2a:60:76:1e:d7:cf:76:20:4e:a1:00:bd:86:
26:16:31:fe:dd:3f:dc:f7:68:42:88:04:8e:45:03:92:a7:7b:
a1:eb:f7:8b:95:90:8d:0d:76:af:8d:25:86:eb:de:a5:89:d2:
f4:01:8c:1f:8c:dd:42:07:bc:a5:5b:88:12:6c:f8:8e:30:d2:
f8:6e:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org