Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2399EA4488A11ECAB785B40D8A014CE.roa
File: C2399EA4488A11ECAB785B40D8A014CE.roa (raw, json)
Hash identifier: zih7/34ox44Xu9ADZeuTCTTsaWEaZ2Ly9xwyZ3J62h0=
Subject key identifier: 02:C6:1E:82:B6:05:BB:0B:11:33:DB:21:11:B6:76:C1:95:05:B5:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2399EA4488A11ECAB785B40D8A014CE.roa
Signing time: Thu 18 Nov 2021 16:15:34 +0000
ROA not before: Fri 19 Nov 2021 16:15:31 +0000
ROA not after: Sat 19 Nov 2022 16:15:31 +0000
asID: 139879
IP address blocks: 156.231.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3662 (0xe4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:15:31 2021 GMT
Not After : Nov 19 16:15:31 2022 GMT
Subject: CN=61967c26-fd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:84:ac:aa:d4:f1:60:f9:95:71:17:cf:76:ce:
be:3e:be:e2:99:1a:94:8e:7a:96:56:38:a2:36:df:
2e:0c:15:3c:bf:d6:47:ed:cf:5f:f7:13:64:54:46:
f8:a9:b4:89:a6:e0:82:2b:e8:46:a4:76:bc:e9:65:
fa:0b:1b:af:4b:c1:e8:06:ef:27:bb:02:c5:dc:b7:
62:7f:ca:13:ce:8f:62:17:ff:ab:87:71:60:84:13:
8d:dd:e2:e7:59:79:5f:26:6c:21:94:64:e8:9d:5e:
e9:13:02:84:57:b2:0e:55:ec:5e:10:58:ee:2b:14:
88:98:a8:9b:8c:f5:30:a7:f7:3a:6c:ce:7b:a8:60:
ba:1b:af:77:81:a9:2c:da:31:06:52:d8:dc:80:02:
bd:34:4e:0e:36:8d:e3:8b:88:22:16:2e:bc:93:b0:
cb:df:fc:7c:6c:c7:d2:8b:e1:c7:0f:3e:78:68:fb:
e4:20:21:3c:07:b7:ee:21:e3:89:f6:2e:f1:74:c7:
34:9f:3a:59:e5:a1:8a:c9:ab:b2:c9:f2:64:17:69:
23:d9:89:24:96:89:9f:f0:64:ee:33:cc:73:52:e1:
8b:5e:38:95:b8:57:33:61:72:52:f7:25:32:f3:4a:
fd:e0:71:91:0a:a3:d2:5a:3c:1c:b3:e5:dd:e2:29:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:1E:82:B6:05:BB:0B:11:33:DB:21:11:B6:76:C1:95:05:B5:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2399EA4488A11ECAB785B40D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:bb:63:a2:71:fc:83:d1:1d:27:df:36:f3:6d:6d:94:9c:7a:
43:96:07:d9:96:bb:4e:be:47:47:76:bc:f8:05:a2:64:0d:a7:
3f:fa:c8:7b:22:8c:fe:14:74:83:3b:ef:b3:a7:e4:8d:23:b5:
97:22:0c:6c:a8:75:c9:6f:62:6b:09:0d:b9:6d:8b:92:16:85:
88:82:c8:08:8a:87:ca:24:f8:c3:04:c9:81:b2:58:7a:a6:7a:
a3:42:32:3f:9c:d7:09:ca:6c:33:2b:dd:ca:04:99:cf:2f:17:
fe:23:85:63:a0:1b:b9:0d:02:a0:de:9c:55:e3:8a:68:62:a6:
e5:ed:74:38:7c:10:ad:0b:87:cd:92:82:4f:e7:61:36:e8:cf:
9c:22:94:28:af:46:85:11:be:e6:10:9a:ea:bd:c7:44:3b:8a:
36:bb:11:a1:b9:69:88:3e:49:22:c5:a4:de:cf:3f:d6:e4:b7:
67:76:14:65:a5:7d:5c:29:06:55:6e:8c:ff:06:06:10:5f:c0:
78:b3:74:4f:b2:1c:4a:99:f0:0c:d5:8e:2f:30:69:2e:a0:31:
b5:70:db:98:d5:26:36:2b:b4:f9:06:ce:13:65:68:59:66:5d:
20:68:0e:a2:51:c6:fa:37:e8:70:21:11:1e:fc:e7:82:49:08:
5a:9e:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org