Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6ABD074488511ECB5A56735D8A014CE.roa
File: C6ABD074488511ECB5A56735D8A014CE.roa (raw, json)
Hash identifier: nR778SKDxtN41NCI9uCmZOHZNK1It3NY1vGkrz0oGlU=
Subject key identifier: F0:1B:71:80:F6:48:C2:B9:F1:4B:11:AD:6D:E3:0B:00:27:56:47:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6ABD074488511ECB5A56735D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:39:54 +0000
ROA not before: Fri 19 Nov 2021 15:39:51 +0000
ROA not after: Sat 19 Nov 2022 15:39:51 +0000
asID: 139879
IP address blocks: 156.249.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3388 (0xd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:39:51 2021 GMT
Not After : Nov 19 15:39:51 2022 GMT
Subject: CN=619673ca-cb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:6e:1c:b4:5f:cb:4d:02:d4:6d:2d:02:5c:
fb:f1:13:d5:a9:32:94:2f:20:cd:fc:e8:15:78:f4:
e2:10:46:55:02:ca:b8:39:8a:dc:c5:6f:76:26:95:
5e:e1:25:8f:d2:55:3a:ae:4a:2b:85:f4:86:44:97:
ac:87:95:43:86:4b:01:ad:1b:2d:58:8d:d9:75:5d:
e0:bc:4e:15:17:1d:81:8c:49:f5:83:51:a3:cb:36:
13:ac:b6:70:7d:dd:0d:b2:c7:e7:d5:5d:10:40:ee:
76:70:ee:72:3e:29:7a:2c:2f:f5:13:e5:01:9c:fb:
c2:6b:63:29:ce:00:d0:8f:63:dd:40:1d:a2:58:2f:
44:d9:42:a1:e4:1a:00:bb:93:bd:b4:95:13:27:30:
01:8c:3a:86:8e:2d:78:12:c4:43:f2:68:02:2f:ae:
fe:a9:98:69:f5:cf:8d:96:23:5f:92:d5:50:67:5c:
7d:21:06:19:f0:04:55:83:3a:01:dc:ec:08:82:d5:
79:5c:b6:3e:67:01:3e:e2:04:b1:41:ab:36:54:3e:
08:8b:a7:56:75:b2:58:db:0a:21:d8:b6:08:bd:c4:
6c:d8:8f:ec:ff:8d:22:40:bc:37:87:2d:11:9c:5c:
31:2e:5e:a3:80:52:01:57:69:5c:2a:3e:c2:c5:c3:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:71:80:F6:48:C2:B9:F1:4B:11:AD:6D:E3:0B:00:27:56:47:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6ABD074488511ECB5A56735D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.155.0/24
Signature Algorithm: sha256WithRSAEncryption
51:79:5d:e9:71:94:8b:b9:e7:bd:b5:f8:03:9d:d7:72:7e:54:
4b:22:cf:8a:99:dc:3f:48:0a:a9:c9:05:3b:ae:00:0c:21:5b:
d3:49:a9:9a:4b:06:fa:4d:10:90:6a:0e:a2:5e:ba:de:58:62:
b3:bd:0c:d8:71:27:ea:87:ff:d5:2f:36:01:dc:5e:7f:05:1d:
f4:a4:e4:03:34:ed:5e:83:10:c4:34:b7:62:74:e1:91:33:4e:
11:44:ad:f5:56:64:99:ee:11:2c:d6:9e:83:7c:c3:c3:ef:bf:
28:0b:16:12:4c:69:0a:54:8f:00:99:b0:50:8f:7c:d1:54:05:
ae:80:77:3a:aa:28:84:de:3c:1d:8b:85:3b:57:e7:07:8c:7a:
00:b5:61:c6:ee:2b:8d:1a:46:62:79:86:5e:f4:bf:c9:37:77:
cf:35:ab:07:68:a2:5e:e3:a5:db:d6:81:85:00:71:57:b4:60:
9a:9b:3d:4e:af:d6:21:df:9e:14:de:8b:ca:ef:93:33:5a:e4:
ee:07:37:23:f3:68:a0:90:5a:b1:e1:a6:52:3e:28:46:5b:44:
48:94:f1:44:9a:67:3e:9f:e8:a2:c8:42:e9:5c:bc:d2:3d:40:
5a:f2:d6:35:a4:4a:55:51:58:af:3e:0e:bb:26:07:ab:b0:20:
90:20:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org