Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C41C53B6488911ECA978263ED8A014CE.roa
File: C41C53B6488911ECA978263ED8A014CE.roa (raw, json)
Hash identifier: K8rsj+enwty7zvKz/kD/a1PHg5gmj0sDvMtZlcvPoUM=
Subject key identifier: 4C:D4:5F:DD:D0:82:E6:00:29:B8:8C:66:3D:F8:6D:5A:75:F3:38:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C41C53B6488911ECA978263ED8A014CE.roa
Signing time: Thu 18 Nov 2021 16:08:28 +0000
ROA not before: Fri 19 Nov 2021 16:08:24 +0000
ROA not after: Sat 19 Nov 2022 16:08:24 +0000
asID: 139879
IP address blocks: 156.249.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3608 (0xe18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:08:24 2021 GMT
Not After : Nov 19 16:08:24 2022 GMT
Subject: CN=61967a7c-8f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:b8:69:33:ba:a7:57:10:05:d4:3b:28:f0:
8d:84:f4:31:68:55:b7:0c:bd:dd:26:61:73:04:47:
33:d0:0c:54:58:93:9b:10:06:88:98:bd:05:ee:54:
f5:58:c2:6a:dc:f1:b4:ee:41:4f:a3:43:85:1a:db:
b5:16:7d:09:fb:75:21:eb:32:55:93:e7:3d:2f:e1:
2b:d7:1d:03:27:f3:a6:4b:a4:c8:51:a7:60:fc:de:
72:0e:f6:9d:9c:84:55:2d:59:f1:b6:db:3a:45:8a:
4d:38:de:9a:a0:b0:e2:cd:26:c0:5c:f3:a8:88:76:
be:84:32:c7:f5:97:4c:35:95:f7:51:8f:18:d1:06:
0f:84:97:da:db:da:3c:fd:bf:a0:e4:b1:9d:24:84:
c8:17:30:69:a1:b5:22:7d:09:25:87:e4:3e:40:54:
57:bb:cf:12:fa:70:17:b3:da:e7:2e:68:e1:20:9e:
ef:f9:ae:27:57:a2:b3:2b:e2:b2:97:af:a7:49:dd:
dd:27:89:18:15:a2:e6:fb:62:a2:77:55:97:36:e2:
cf:97:1a:80:63:2e:13:9a:d5:ba:d4:53:c3:17:71:
e7:b1:eb:87:7c:67:ac:23:bd:9e:40:0e:03:0b:2f:
2f:5b:2c:96:8a:e2:b2:56:b2:0e:52:ba:c6:c3:4b:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D4:5F:DD:D0:82:E6:00:29:B8:8C:66:3D:F8:6D:5A:75:F3:38:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C41C53B6488911ECA978263ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.195.0/24
Signature Algorithm: sha256WithRSAEncryption
72:dc:9f:ae:ae:22:b7:f1:fd:84:38:4b:85:7b:4f:ff:70:d5:
ad:31:e2:98:94:b3:cd:30:02:e6:48:5f:dc:24:52:f2:a4:6f:
19:40:12:7d:23:2c:cf:cf:5a:68:cf:7b:05:f3:d4:93:fc:20:
c4:47:83:df:b9:59:e2:bb:e4:d8:58:7d:6b:c1:af:b8:04:62:
d8:e1:3b:4a:b8:37:80:92:6a:4b:4e:0d:72:9c:b9:94:15:cc:
7b:1e:21:02:97:41:fe:88:c1:e5:71:99:ce:8c:bc:99:d9:32:
07:78:0d:70:10:e5:17:49:6e:e9:4d:38:9f:15:b6:42:aa:99:
9a:04:dc:01:4e:47:d4:cf:de:70:85:bd:fe:b9:46:e6:3f:86:
38:f4:9d:24:24:33:0f:af:8d:8e:db:5c:b4:7c:76:8d:13:40:
2d:87:9e:c2:9c:a7:a5:22:d0:e6:92:f2:59:23:95:a6:5d:ae:
b1:d9:7d:98:f2:18:80:78:d2:20:b8:f4:c1:8c:33:00:4a:32:
13:1f:7e:27:da:57:76:39:51:ee:d1:b8:01:11:17:ca:e3:0f:
5b:f8:e4:57:8e:e7:4d:8b:ec:42:ea:61:5f:8c:e2:66:4d:31:
0c:b6:cb:ca:a3:6e:ec:7c:d0:c3:92:d6:6a:65:2e:a3:ba:6a:
fa:70:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org