Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5FDF50488511ECBC255F35D8A014CE.roa
File: BE5FDF50488511ECBC255F35D8A014CE.roa (raw, json)
Hash identifier: LXPWskJ999Xy83SgEcXOpFKv27vli2UiQOhg1TcU5dg=
Subject key identifier: F5:DA:13:14:B2:71:65:95:CF:2A:FF:9B:94:89:FD:54:F3:4A:6A:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5FDF50488511ECBC255F35D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:39:40 +0000
ROA not before: Fri 19 Nov 2021 15:39:37 +0000
ROA not after: Sat 19 Nov 2022 15:39:37 +0000
asID: 139879
IP address blocks: 156.247.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:39:37 2021 GMT
Not After : Nov 19 15:39:37 2022 GMT
Subject: CN=619673bc-d054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:01:4d:06:8c:4f:4e:91:a7:65:be:fd:6f:
57:2f:68:79:dc:1f:2c:38:b2:13:ca:f7:e7:af:7e:
df:28:eb:2f:5b:c7:e6:94:ab:6e:fb:e8:3d:70:53:
0a:a4:81:6c:10:fc:e3:79:8e:c2:ce:d8:63:ca:d5:
af:50:9f:7a:e9:da:64:80:d6:71:79:92:df:b7:ea:
83:74:f5:0a:2b:96:07:83:fa:35:11:e3:20:5d:43:
ae:b8:48:0c:5b:92:89:25:72:7a:eb:6b:f5:a1:de:
1a:7d:d8:14:16:72:b7:05:64:89:ea:96:cc:8d:54:
28:ca:16:3d:9a:53:5e:d1:53:cf:e7:f2:d9:66:88:
85:de:9b:c3:a0:01:88:03:fb:a6:be:a8:7c:16:c7:
f4:59:44:b1:f3:44:b2:9d:ad:5e:6a:ec:20:5f:11:
2f:4d:48:5a:35:1e:10:b4:8d:37:16:07:08:49:93:
de:8b:f6:42:c1:99:bf:54:31:50:47:f3:e0:5f:a0:
1f:12:c4:bf:7a:30:1f:fd:51:cd:d1:1d:37:ee:ca:
13:17:62:57:7e:b5:0f:f6:a0:ea:cd:d1:94:8c:85:
07:32:a7:ae:6e:ee:6f:db:ed:84:2f:bc:1b:5d:60:
dc:d1:64:08:ce:93:2c:3d:c3:b4:26:b1:0f:15:90:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:13:14:B2:71:65:95:CF:2A:FF:9B:94:89:FD:54:F3:4A:6A:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5FDF50488511ECBC255F35D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.154.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c5:00:6f:52:09:73:4b:01:86:41:0d:64:9e:ed:81:f3:a0:
a7:85:14:14:7a:ab:12:a3:11:b1:58:08:90:37:61:16:e1:44:
2b:aa:0b:0b:7a:f6:c0:30:eb:11:f9:81:d1:4d:0b:15:69:01:
a9:16:1e:17:bc:fd:2b:55:29:da:e8:67:bc:0a:81:3f:69:aa:
de:0b:27:78:3b:8c:c4:70:55:b7:6a:17:60:32:13:a3:e4:6b:
65:5d:81:85:c8:61:1e:f2:24:c3:3e:e3:c8:bc:15:7b:76:9b:
16:9f:1b:5e:3d:63:12:87:41:9c:79:c4:00:cd:11:7f:6f:fd:
fc:dd:45:73:a8:55:45:28:63:80:26:f8:10:9f:4d:d1:02:9a:
b6:0a:a0:0d:9a:27:d2:ae:ec:37:a2:4f:ba:69:80:d6:f0:4c:
73:d2:44:50:70:c7:8b:f9:f4:0c:c5:98:09:f1:1b:40:af:2a:
7f:92:97:49:ed:b0:79:72:3c:f2:e7:4b:28:63:bb:0e:86:62:
31:8e:e3:0c:69:57:63:47:ce:a1:44:32:57:69:11:28:02:e8:
74:6c:9a:1a:21:62:8a:cd:04:b7:f4:80:4d:b1:63:99:cb:5f:
81:79:35:fa:aa:66:63:64:e4:fb:0b:5a:b8:04:a5:6c:6a:fa:
7c:c8:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org