Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF3CE8C4488811ECB933133CD8A014CE.roa
File: CF3CE8C4488811ECB933133CD8A014CE.roa (raw, json)
Hash identifier: 9KwbCTegMyZV8VDqWMXqILWmIf7J+gABR0AANHK5ru4=
Subject key identifier: 52:B0:C4:99:02:12:C2:51:90:88:E7:F2:90:43:AC:C6:5D:1D:DC:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF3CE8C4488811ECB933133CD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:01:37 +0000
ROA not before: Fri 19 Nov 2021 16:01:34 +0000
ROA not after: Sat 19 Nov 2022 16:01:34 +0000
asID: 139879
IP address blocks: 156.247.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3557 (0xde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:01:34 2021 GMT
Not After : Nov 19 16:01:34 2022 GMT
Subject: CN=619678e1-458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:33:a1:f4:be:c6:a7:c2:d3:bd:d8:ab:22:
0e:a9:d4:f2:e7:3e:b1:0e:9b:a4:a1:ed:2b:9f:19:
03:a5:5b:43:fd:25:c8:5f:33:77:1c:ab:86:bc:76:
c6:5e:db:4d:73:7a:bb:6b:5f:e6:73:30:5c:a9:ed:
0d:69:d6:c0:7d:81:6a:cb:18:3f:4b:aa:75:54:b3:
9e:6d:0c:68:42:be:ac:8d:f9:47:de:c0:e1:7b:68:
f1:9c:99:c4:48:d9:1d:90:87:0d:f1:b9:65:18:aa:
96:95:a3:1a:13:e2:44:08:19:0f:fa:85:23:c8:7a:
91:f3:42:36:0d:de:cd:fc:bc:94:f4:42:43:20:09:
62:ab:16:5b:d8:b0:f2:de:a9:a0:34:58:da:83:e6:
42:3f:e3:03:08:d4:b9:df:df:dc:26:b2:6e:9d:f7:
14:77:53:a4:49:e9:32:19:b3:2f:6d:1d:ae:7c:ac:
97:e5:19:fa:04:3b:44:51:4d:ed:d1:26:84:fe:14:
e6:19:7d:b4:9b:88:b5:10:3e:01:c0:be:d5:0d:82:
35:07:3f:33:6b:a5:55:ad:85:4f:3d:1f:70:36:08:
43:81:a0:64:c7:6f:6c:47:b7:9e:5c:8f:55:91:0d:
4b:90:3a:84:bf:cb:10:1e:28:5d:9c:6d:7c:f5:08:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:C4:99:02:12:C2:51:90:88:E7:F2:90:43:AC:C6:5D:1D:DC:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF3CE8C4488811ECB933133CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3f:84:fe:db:01:fa:e7:45:46:92:84:3b:ef:21:68:34:80:
6c:5d:15:b1:a0:72:36:69:b0:cb:18:f4:fd:1c:a3:54:47:8e:
52:7e:ef:8b:f5:79:00:b8:96:a6:e8:cb:d7:95:0c:66:27:72:
d8:b2:a5:28:78:fb:6c:c2:2d:4c:9f:72:c9:ae:2a:6e:0e:fd:
48:2c:22:8c:d6:e6:2e:d8:2c:8c:82:39:09:16:36:db:ab:44:
12:16:aa:a2:93:37:71:4f:42:17:5a:6e:cc:44:d9:c0:ac:c3:
34:0c:c1:75:c9:d2:29:ab:36:69:f4:db:22:a4:04:5e:1c:56:
e6:18:a5:62:3b:3b:a8:1b:f3:3c:22:1c:26:48:cd:19:ec:1c:
e4:8e:97:27:91:da:e4:4c:67:0b:9c:cf:e4:45:43:ad:08:82:
3b:49:de:06:47:52:2e:ff:4b:aa:2f:e0:68:64:13:0d:88:13:
a8:ea:7f:20:ba:1a:67:07:46:36:d5:38:f1:f7:c3:06:ba:3d:
e9:74:1a:51:be:4a:e2:97:b7:ac:26:82:4f:30:38:d5:3e:14:
fa:ab:79:63:4f:98:1a:6d:c4:a5:c9:3c:02:54:71:bc:a3:67:
38:fd:08:c4:60:50:5a:58:7c:a9:bc:dc:64:95:4e:d3:51:10:
8a:67:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org