Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C6DCCC488611EC92C38237D8A014CE.roa
File: B9C6DCCC488611EC92C38237D8A014CE.roa (raw, json)
Hash identifier: KwgByCoqC4VwEaZeh+Q4RFmS59DFdPum6rlIL20fKNE=
Subject key identifier: 76:B8:C5:AD:54:62:A1:E8:08:4C:91:1A:4A:40:61:C5:2A:38:C5:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C6DCCC488611EC92C38237D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:46:42 +0000
ROA not before: Fri 19 Nov 2021 15:46:39 +0000
ROA not after: Sat 19 Nov 2022 15:46:39 +0000
asID: 139879
IP address blocks: 156.231.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3442 (0xd72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:46:39 2021 GMT
Not After : Nov 19 15:46:39 2022 GMT
Subject: CN=61967562-a57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:b7:5d:68:5b:e5:85:7a:f0:5d:bd:86:17:
e6:51:08:da:e7:29:41:fb:cb:94:96:b0:71:f6:9c:
cb:f8:75:a8:04:af:1e:81:ad:9c:de:d9:ba:79:8a:
81:55:7d:16:6e:88:5e:56:fe:33:cd:77:10:08:12:
6a:62:df:ce:74:4a:9f:b2:c7:e1:b3:dd:75:31:96:
ac:3a:42:8b:cb:00:a2:23:64:d4:63:d8:f2:21:88:
d4:8f:48:99:41:f0:db:57:f0:ee:7d:eb:37:60:b5:
be:64:8b:04:33:50:54:10:b8:49:19:a6:da:16:fe:
68:d9:7b:26:60:42:14:85:cd:1a:1d:e6:2f:ca:a5:
e3:98:d1:5a:63:0e:f3:78:9f:ad:93:c8:3f:7a:2f:
49:5b:05:de:cd:b6:1b:0a:b0:34:6a:fc:81:52:e7:
6a:f0:7d:a5:30:26:4a:18:77:83:48:f4:5d:79:eb:
a6:a5:ef:33:2b:f3:7d:04:e5:69:94:00:33:e0:a0:
f1:4b:b6:dc:a8:72:0c:eb:a3:a3:06:bc:84:70:01:
8b:86:27:01:7e:bf:07:c9:cf:c5:5f:d7:c5:8f:59:
9a:d5:f4:f5:4e:0a:35:ed:17:af:73:3a:71:02:1c:
97:8d:13:52:97:61:24:c2:2a:80:7f:5e:df:8e:a2:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:C5:AD:54:62:A1:E8:08:4C:91:1A:4A:40:61:C5:2A:38:C5:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C6DCCC488611EC92C38237D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.164.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a3:2d:a4:65:ee:bf:0c:ad:df:69:bf:05:31:87:8a:3a:c0:
bf:da:e0:b2:f0:10:d0:83:4b:7e:52:70:fb:9a:52:86:ff:2c:
d7:45:45:46:d1:63:72:85:e1:2a:16:b3:28:a4:f2:bc:66:58:
9d:90:96:2c:e9:c5:37:7f:fc:96:df:2c:8f:23:e0:4d:b8:83:
0a:0d:f4:31:c8:ec:8f:9d:6c:1f:26:07:6d:d6:eb:45:ed:8a:
f2:12:2e:95:38:95:8d:04:08:a4:18:53:82:ba:77:9d:e1:df:
09:70:b3:d2:85:ac:55:4c:a8:ce:09:f3:6d:bc:ef:5f:df:73:
26:f7:71:c0:40:06:53:74:39:db:07:9f:c1:43:bc:89:0c:f8:
4d:34:b7:3d:29:06:ec:3e:93:e3:72:71:6a:26:4a:ed:3a:4c:
ec:57:4a:44:07:22:2d:c7:d3:3e:1a:5b:b5:f4:97:5e:1e:ac:
8f:8b:c0:a0:7e:33:67:c5:55:4b:09:7b:6a:25:66:61:80:e7:
89:51:a4:69:28:f7:12:8b:41:70:5c:07:10:2e:42:60:de:e0:
47:5a:6c:4a:5e:28:e0:3f:1f:c5:c2:0d:fc:e1:ae:2d:21:40:
19:03:44:7d:0e:7f:3b:ce:67:93:4d:47:b2:b1:e9:fc:29:f1:
f9:c3:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org