Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAA95A56488811EC993EB93BD8A014CE.roa
File: AAA95A56488811EC993EB93BD8A014CE.roa (raw, json)
Hash identifier: S/S9WSHIeHOJAsY02QFklTvRa2GIJRKsJZuZtv9PVfM=
Subject key identifier: 3C:C5:2E:E6:65:55:DB:A1:E7:E9:51:17:AB:6D:8A:6D:86:7A:CB:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DDB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAA95A56488811EC993EB93BD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:00:36 +0000
ROA not before: Fri 19 Nov 2021 16:00:32 +0000
ROA not after: Sat 19 Nov 2022 16:00:32 +0000
asID: 139879
IP address blocks: 156.249.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3547 (0xddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:00:32 2021 GMT
Not After : Nov 19 16:00:32 2022 GMT
Subject: CN=619678a4-c47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:c6:86:a5:c7:3f:9c:f8:23:29:41:5a:66:
74:c1:97:0e:30:81:43:d4:79:6b:2b:c8:e1:e3:d6:
14:e6:f9:05:11:de:17:b5:08:b6:b7:78:81:24:da:
40:2a:f1:5d:7b:86:b8:cd:14:f6:ad:fc:3e:a3:92:
f8:69:6a:0e:d7:c2:b5:54:7c:2d:12:a9:40:2e:b5:
c7:80:d5:9f:20:46:0b:a8:bc:ed:8c:69:b8:c4:76:
ec:3f:a1:e6:da:ef:e9:5b:8d:90:97:06:f0:d1:a2:
3a:9e:c0:64:91:df:4a:20:ea:2f:d7:4a:20:6d:6b:
43:6b:8f:36:2d:98:5c:5b:95:67:26:ea:df:0a:9f:
be:85:d1:1c:57:b3:eb:58:94:9b:4d:7f:b1:36:79:
a8:f0:f2:c2:e7:b8:4f:21:78:e2:f6:5b:ba:38:55:
02:84:5c:73:0e:db:dd:0d:ee:10:64:bb:cf:0e:79:
fa:76:64:df:1e:f9:f0:dc:c7:ea:cb:f9:5a:07:c8:
aa:33:58:7d:f0:94:fc:d6:a7:18:6c:7b:db:e8:f7:
c9:c7:46:93:ec:2d:8b:e7:32:83:e9:7f:e4:e9:f6:
79:6b:80:ac:1a:43:86:ac:79:c2:9d:6b:44:0d:ae:
82:3c:18:9c:e8:b0:88:07:3a:e3:27:cc:4d:87:5a:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:2E:E6:65:55:DB:A1:E7:E9:51:17:AB:6D:8A:6D:86:7A:CB:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAA95A56488811EC993EB93BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5f:d1:10:6b:c2:2e:2c:e3:3b:46:b4:62:3f:e4:9d:93:f6:
ba:c8:db:06:54:e2:90:1d:48:5f:48:70:c0:e1:99:13:69:93:
b4:74:db:d1:60:4d:a6:96:4d:f7:12:41:4f:80:3e:41:f9:b0:
44:26:70:a6:2b:bf:57:74:cf:7b:b2:f4:d0:aa:38:f4:63:c6:
f3:27:5b:fe:e4:79:7f:e8:ba:d5:c9:77:18:67:f1:09:96:c7:
4e:51:68:4f:f6:55:06:bc:e1:4d:e0:6f:b1:0d:33:41:9e:9c:
e2:ce:10:77:03:a5:9a:a5:29:a3:8f:07:22:a6:ce:bf:fd:2a:
a5:a0:8f:62:1b:7e:90:28:d2:2e:92:37:42:1a:9f:5d:95:10:
55:64:ca:bb:19:f3:fa:ea:2c:e8:af:76:df:b0:e6:48:89:7c:
1d:90:67:0f:a1:ac:e3:7e:a7:3d:a2:6a:56:6a:4c:de:3b:d0:
f2:5e:87:fe:4b:e1:6f:42:c8:60:b9:c2:18:33:6b:38:15:06:
4c:02:ce:5b:31:76:3d:05:53:b7:dc:f6:fc:de:85:73:66:2c:
83:9a:bd:e2:62:14:84:fd:41:76:06:11:f9:8b:47:48:6a:23:
67:4b:0f:61:23:f5:d5:88:e2:fb:51:ab:b5:8d:b1:ed:f3:ed:
ad:bc:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org