Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B6B47A488611EC84C1B137D8A014CE.roa
File: D5B6B47A488611EC84C1B137D8A014CE.roa (raw, json)
Hash identifier: Illj7jl/7Y2v+ImJ5zlOfgjRMmHENmOhEi9H1akM2To=
Subject key identifier: 44:2B:0A:A8:14:B3:F2:82:23:C9:86:DC:50:A2:00:2A:A2:B1:31:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B6B47A488611EC84C1B137D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:47:29 +0000
ROA not before: Fri 19 Nov 2021 15:47:26 +0000
ROA not after: Sat 19 Nov 2022 15:47:26 +0000
asID: 139879
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3447 (0xd77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:47:26 2021 GMT
Not After : Nov 19 15:47:26 2022 GMT
Subject: CN=61967591-bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:fb:97:3d:a2:c4:8a:ec:83:8b:21:16:68:
27:69:df:c7:5f:9c:17:dd:c1:39:a8:49:36:f7:97:
17:55:45:84:29:84:02:f9:54:2a:61:8e:08:a1:22:
69:14:a3:ff:3b:46:a4:2e:f8:52:86:cf:1b:1c:21:
56:16:a8:0b:d6:c3:86:b7:54:fa:59:22:2c:02:21:
8a:01:e0:2b:9d:04:95:07:f7:89:13:36:9f:df:e2:
8a:d5:a9:05:e8:43:c3:5e:2d:be:75:c1:03:92:d2:
50:b0:13:0a:32:ac:91:44:0e:63:7c:cb:12:55:3d:
53:7c:51:61:73:89:3f:e5:c4:a3:00:2b:70:23:30:
eb:7c:80:5a:31:95:00:46:e9:6b:cb:d7:0b:66:c8:
37:b3:63:67:e4:e6:23:df:8e:51:3b:d9:5a:77:48:
4a:6e:df:a9:87:ae:3f:80:63:13:9b:2e:a2:b8:d7:
4a:96:73:d9:9a:a6:aa:59:35:5a:44:2f:46:0c:de:
be:42:cd:ee:66:88:f3:2f:10:8e:3f:5a:5b:a6:8d:
67:80:2d:00:e8:e4:91:20:df:04:f2:c5:bb:75:d3:
27:5a:3a:8c:65:8e:4b:56:43:39:5a:8c:ff:6c:3d:
a8:b8:e7:a1:bb:92:92:fe:fd:63:93:2a:fd:6f:0f:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:0A:A8:14:B3:F2:82:23:C9:86:DC:50:A2:00:2A:A2:B1:31:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B6B47A488611EC84C1B137D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
45:46:fb:f3:33:78:5c:4f:a4:f0:51:0d:9d:ee:99:8d:6d:53:
46:a0:b4:01:4e:73:60:22:04:32:41:f2:1a:f2:45:27:59:53:
b9:a1:c7:35:d4:4a:3f:9d:41:4b:44:01:4e:76:4f:c3:54:c4:
7c:fc:eb:7d:2a:2c:18:d6:3f:ee:e4:c9:d7:6f:99:e0:d4:a1:
51:9a:fd:9a:9d:72:94:71:d6:07:21:b6:58:d1:64:ac:46:94:
d5:54:49:d1:9e:50:7e:26:a2:e5:df:1e:b0:b0:ae:7f:2d:fe:
2d:c7:9a:fe:9a:fd:d0:f2:35:72:ba:6b:88:6f:a3:d1:d2:43:
7a:b8:1b:b8:8f:1e:98:98:f6:67:5b:f3:65:f6:44:66:85:00:
7f:38:78:fe:70:5a:42:23:87:34:6b:16:c9:a6:04:09:0d:61:
11:d0:0d:ce:a8:1d:bc:87:ef:ad:b9:60:2d:e1:4f:ee:21:d5:
dc:88:40:2f:c5:35:f9:5f:66:e8:3e:bb:57:c5:60:1d:c5:4b:
2a:d9:53:8b:a2:ea:e3:53:c3:68:81:30:cd:c8:3f:32:6c:26:
72:26:14:ad:6f:bc:ce:ba:eb:56:be:b1:a1:df:45:38:fc:a4:
04:46:76:74:0c:d6:d0:16:ff:aa:40:71:fc:fa:a7:14:bd:06:
40:1b:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org