Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7E3B73C488411EC8F8C2933D8A014CE.roa
File: C7E3B73C488411EC8F8C2933D8A014CE.roa (raw, json)
Hash identifier: 28NxFIlx3F1dP0hAng9TcgyhiCcPblQn8RmlQSUKaFo=
Subject key identifier: 6A:20:73:C6:C6:91:A1:29:11:ED:67:3E:7B:6D:CD:09:28:43:ED:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7E3B73C488411EC8F8C2933D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:32:47 +0000
ROA not before: Fri 19 Nov 2021 15:32:43 +0000
ROA not after: Sat 19 Nov 2022 15:32:43 +0000
asID: 139879
IP address blocks: 156.247.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3331 (0xd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:32:43 2021 GMT
Not After : Nov 19 15:32:43 2022 GMT
Subject: CN=6196721f-1ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:e0:98:d2:b5:b5:a9:1a:25:7c:37:86:3c:
c4:dc:dd:ab:70:89:e7:eb:84:4f:c4:e5:f9:75:fe:
61:6a:b3:0a:1e:79:e4:eb:18:98:84:23:a5:c4:f5:
49:4b:df:56:93:7f:ae:3e:d3:c4:2d:50:1b:c0:88:
e8:bc:ef:2b:b9:19:dd:d9:47:fa:95:7e:3d:96:bc:
d9:9a:ee:0b:b6:c5:56:56:1f:3b:57:12:30:61:2c:
20:2a:4a:63:ce:20:f8:14:40:45:31:e2:f3:02:30:
62:73:10:ce:bf:8b:f0:30:83:30:2c:7f:4c:e1:67:
88:29:0d:07:5d:4d:c2:2c:0f:c6:d7:01:33:6f:50:
d2:9e:2e:02:58:d8:0c:2c:a1:64:82:88:ea:5e:36:
30:0b:3f:72:54:57:fa:de:01:1a:1a:e3:9f:fc:d2:
4a:32:a5:18:06:44:54:9e:41:c3:56:f3:01:12:91:
ef:ad:79:7a:05:f0:58:b3:1e:3c:d6:a9:ea:b3:81:
d6:95:e6:39:d4:2d:df:9e:d3:21:db:41:94:27:1d:
e2:46:78:eb:cd:72:ad:84:33:30:d8:f8:59:8d:ed:
bd:01:3a:bf:3f:9e:52:d5:cc:2d:04:2e:0d:c8:8e:
3a:af:31:f4:6d:0e:76:17:f3:7b:d5:9f:0b:8b:07:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:73:C6:C6:91:A1:29:11:ED:67:3E:7B:6D:CD:09:28:43:ED:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7E3B73C488411EC8F8C2933D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.143.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f3:67:38:f7:00:dd:89:02:98:97:f0:ec:6b:4e:77:a8:a9:
a2:f4:00:ff:3f:fb:e1:ec:73:2a:05:a0:1e:8c:d9:bf:15:55:
d4:f6:c3:a1:ee:35:c1:34:a5:71:e6:67:47:57:a7:07:a4:f5:
a8:8f:ac:7c:fe:a1:2c:0c:88:6a:0b:0c:d2:35:fd:8c:ad:a3:
e4:84:32:62:07:62:d3:51:62:45:dc:45:93:aa:a7:12:63:0f:
71:48:ee:d0:03:69:4c:aa:84:c1:3a:15:12:8f:12:64:cb:20:
cf:11:01:74:ae:6d:45:c8:fd:00:c2:06:23:c6:30:da:d1:95:
b2:37:67:ec:35:79:32:1b:bc:64:fe:a3:16:3d:4e:a8:1f:59:
44:15:cc:bc:fc:2f:3f:b6:c0:0a:4d:23:4e:06:4b:b5:06:4d:
57:92:fa:35:e6:cc:5e:33:c5:65:23:06:65:33:49:51:4e:7f:
b2:d1:78:e6:a3:bc:39:b8:d8:21:9e:5c:d0:31:63:00:75:9a:
7a:29:07:3f:c7:4b:5a:70:80:38:3e:ac:7b:57:46:37:2b:47:
d1:79:42:f6:3a:ec:e8:9f:75:8f:6f:15:a1:49:77:57:0e:c0:
61:09:28:2c:46:ab:8f:a3:01:56:4a:86:94:28:d8:7c:18:5a:
8a:36:ab:35
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNTMyNDNaFw0yMjExMTkxNTMyNDNaMBgxFjAU
BgNVBAMMDTYxOTY3MjFmLTFjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAjOCY0rW1qRolfDeGPMTc3atwiefrhE/E5fl1/mFqswoeeeTrGJiEI6XE
9UlL31aTf64+08QtUBvAiOi87yu5Gd3ZR/qVfj2WvNma7gu2xVZWHztXEjBhLCAq
SmPOIPgUQEUx4vMCMGJzEM6/i/AwgzAsf0zhZ4gpDQddTcIsD8bXATNvUNKeLgJY
2AwsoWSCiOpeNjALP3JUV/reARoa45/80koypRgGRFSeQcNW8wESke+teXoF8Fiz
HjzWqeqzgdaV5jnULd+e0yHbQZQnHeJGeOvNcq2EMzDY+FmN7b0BOr8/nlLVzC0E
Lg3IjjqvMfRtDnYX83vVnwuLB8M/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUaiBz
xsaRoSkR7Wc+e23NCShD7aMwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M3RTNCNzNDNDg4NDExRUM4RjhDMjkzM0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc948wDQYJKoZIhvcNAQELBQAD
ggEBAFXzZzj3AN2JApiX8OxrTneoqaL0AP8/++HscyoFoB6M2b8VVdT2w6HuNcE0
pXHmZ0dXpwek9aiPrHz+oSwMiGoLDNI1/Yyto+SEMmIHYtNRYkXcRZOqpxJjD3FI
7tADaUyqhME6FRKPEmTLIM8RAXSubUXI/QDCBiPGMNrRlbI3Z+w1eTIbvGT+oxY9
TqgfWUQVzLz8Lz+2wApNI04GS7UGTVeS+jXmzF4zxWUjBmUzSVFOf7LReOajvDm4
2CGeXNAxYwB1mnopBz/HS1pwgDg+rHtXRjcrR9F5QvY67OifdY9vFaFJd1cOwGEJ
KCxGq4+jAVZKhpQo2HwYWoo2qzU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org