Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C35F1E50488811EC9EC60A3CD8A014CE.roa
File: C35F1E50488811EC9EC60A3CD8A014CE.roa (raw, json)
Hash identifier: hTge3uyTXa6iBsIk3LJGIpp1Uoak8lWpe0QyX9PUBoA=
Subject key identifier: 46:F5:A3:4C:08:EF:4C:89:FA:8F:F8:D1:7C:AF:C7:22:EC:3A:81:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C35F1E50488811EC9EC60A3CD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:01:17 +0000
ROA not before: Fri 19 Nov 2021 16:01:14 +0000
ROA not after: Sat 19 Nov 2022 16:01:14 +0000
asID: 139879
IP address blocks: 156.249.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3553 (0xde1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:01:14 2021 GMT
Not After : Nov 19 16:01:14 2022 GMT
Subject: CN=619678cd-fdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:11:b9:4a:da:f5:1c:06:ac:0f:ce:34:6c:
4e:a4:c9:41:8f:ad:25:b8:eb:29:b9:d8:cc:0a:3c:
25:4a:c3:45:e2:c1:e1:f8:c6:60:44:36:f3:af:92:
4c:e9:7c:bc:b2:aa:0c:75:61:8c:b9:b3:f7:25:77:
ab:79:0f:7f:c9:1f:09:df:ce:fd:e2:91:f0:89:35:
f0:b8:35:c4:0d:80:e6:52:cd:6e:9a:18:24:87:1c:
41:c6:ce:d3:19:eb:4f:3a:89:c2:2b:8f:ff:55:97:
ed:ed:d2:7a:8e:c7:18:89:c1:42:00:a0:22:53:ab:
75:bf:6d:5e:fd:fc:7e:dd:fc:65:db:ef:f4:a1:95:
8a:b8:20:e0:24:b3:6f:0b:92:54:8e:01:43:0d:1b:
59:b0:aa:5e:ed:2c:3a:51:6c:b6:df:05:70:f7:65:
81:65:f5:4a:aa:a4:01:a8:aa:e9:f5:4e:2b:11:92:
ec:b3:46:57:8f:2d:2e:12:a4:7f:7b:26:df:b3:d2:
70:05:b4:ce:5c:dc:fb:74:23:aa:5c:a8:91:f5:98:
b5:ac:a3:f6:94:69:72:3d:f3:69:5d:59:f6:c7:3c:
c5:99:f1:ca:a4:3a:57:5c:a1:16:34:9a:dd:2b:bd:
20:c2:62:42:0a:55:27:68:0d:c4:28:ab:b5:83:f3:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F5:A3:4C:08:EF:4C:89:FA:8F:F8:D1:7C:AF:C7:22:EC:3A:81:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C35F1E50488811EC9EC60A3CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.186.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ab:ce:c5:83:b9:4b:67:57:ef:85:f7:06:96:db:49:84:e0:
e9:ff:c5:40:78:73:8e:06:d7:5a:23:a6:8d:39:f6:93:64:f8:
b3:be:19:dd:17:a4:b5:aa:07:fb:db:3e:f2:cd:ca:e4:7a:c7:
41:44:9d:00:35:c9:5f:8f:52:0f:18:e8:d4:7c:78:1e:25:a4:
c8:71:54:0f:d5:a8:f7:44:45:fd:3a:a0:8b:58:21:27:76:a6:
7b:ee:25:f7:2f:ed:5c:25:41:33:9f:95:fc:ae:80:3e:76:d9:
f3:0e:9e:50:c2:7f:d0:e7:51:ab:62:c2:cd:6c:db:b5:fd:62:
8c:a4:5d:5b:bd:b3:05:4f:d6:67:1a:87:b2:fe:bb:a6:32:a0:
fc:6f:84:07:8d:f3:40:2d:2b:61:56:fd:90:51:48:36:2e:3b:
d1:a1:a1:30:20:38:28:a9:ca:66:f3:51:89:58:82:5f:f3:93:
82:8b:4f:a1:0e:6c:6b:e8:f3:d7:da:31:89:9a:97:71:89:ab:
1d:6d:26:ff:3c:c3:48:f5:62:44:b4:66:7b:6c:9b:2e:8b:cb:
22:39:bd:a3:f2:88:1f:83:a2:f7:48:6f:f9:d6:9c:92:b0:3a:
a2:61:04:be:82:52:96:48:46:cc:a0:22:91:46:b6:ce:8a:2e:
33:fe:a1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org