Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE64334488A11ECB1AD2440D8A014CE.roa
File: AEE64334488A11ECB1AD2440D8A014CE.roa (raw, json)
Hash identifier: KOv0EkOjYVtkeaTQeEYK6R6oSa99RlGXvBrARRCvuxg=
Subject key identifier: 0A:12:02:6F:5A:82:6D:96:E7:23:32:73:B9:E7:68:DC:62:EC:CA:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE64334488A11ECB1AD2440D8A014CE.roa
Signing time: Thu 18 Nov 2021 16:15:02 +0000
ROA not before: Fri 19 Nov 2021 16:14:59 +0000
ROA not after: Sat 19 Nov 2022 16:14:59 +0000
asID: 139879
IP address blocks: 156.249.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3659 (0xe4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:14:59 2021 GMT
Not After : Nov 19 16:14:59 2022 GMT
Subject: CN=61967c06-95e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:98:35:16:7f:25:4c:b4:dc:9a:9e:11:14:
c5:c5:5a:fc:ad:f8:af:74:ba:63:65:10:72:d3:08:
29:38:a9:50:8b:78:d0:bd:5d:18:62:0e:78:8c:d0:
b3:77:28:a1:71:79:d2:2b:3d:48:64:fc:46:dd:00:
e8:c1:05:c9:40:28:0b:e3:c6:bd:2c:88:6a:6d:9a:
7b:41:9c:37:9b:92:c6:f6:30:0c:f2:4d:55:f8:55:
c7:6b:18:ae:9c:d3:1b:68:1b:21:98:05:37:3b:0b:
c4:51:a8:7e:2b:56:bd:f7:43:19:78:52:fd:e9:47:
b8:4a:0a:7b:73:c1:f8:e6:d2:4e:d7:6a:24:70:b9:
95:cf:cd:2d:71:71:44:04:87:78:ac:c3:cd:14:ec:
b8:a0:bc:2d:f5:c4:c0:04:d5:9a:9f:4e:3f:08:86:
00:86:e0:2e:cc:49:5d:fa:92:cd:a6:85:80:14:9f:
7d:e6:08:f5:ea:16:0a:65:10:ca:38:d0:37:cc:0c:
92:4e:d4:b2:ba:29:af:8b:66:52:9d:4e:17:ab:8f:
65:ee:05:10:aa:16:6c:32:a4:c4:b1:20:e0:99:6a:
23:27:0e:82:b6:c1:aa:0b:16:ea:7e:02:8a:ab:97:
80:50:02:a2:fb:52:73:dc:dd:98:0f:5d:9a:99:a7:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:02:6F:5A:82:6D:96:E7:23:32:73:B9:E7:68:DC:62:EC:CA:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE64334488A11ECB1AD2440D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
71:df:b3:03:05:04:c5:e2:3e:72:e0:8e:7e:aa:11:ff:eb:10:
49:30:9b:85:47:6b:7f:d4:fe:ba:58:b8:ff:2b:21:dd:36:40:
89:1f:ef:4b:11:75:0f:45:97:82:ae:30:1c:61:94:dd:5e:46:
df:ee:cc:95:e5:d1:3c:c6:e5:9f:e2:f5:8b:0a:87:1d:de:25:
08:70:27:0f:b7:73:b4:e0:0c:0d:0f:9d:04:08:f2:95:a0:60:
65:6c:32:d6:aa:f9:d3:e5:14:65:69:a2:3a:87:be:0a:5b:5c:
44:b7:1d:26:6e:7b:96:15:7e:3e:ae:ac:17:03:39:54:d4:de:
4e:88:49:cc:84:79:0f:97:57:5a:36:bb:8b:d8:d2:70:d2:da:
73:e7:df:06:1c:53:4d:09:85:0c:77:12:69:fb:b5:87:89:53:
92:cf:08:51:1f:a4:5b:c0:6b:81:67:a9:de:6a:5a:b7:a7:00:
c5:22:fb:ce:e9:94:3a:26:6e:0a:80:45:61:5a:6a:e9:3f:54:
ee:42:b4:43:f8:41:15:3d:4e:c4:68:a7:4a:03:73:24:52:e3:
1d:93:2c:58:02:f6:f2:9c:39:3f:ae:08:e9:92:78:cb:3b:17:
56:e9:96:c5:7d:ae:61:a0:a7:fd:dc:f5:a6:4f:b8:f3:a6:07:
6a:e8:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org