Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D87A3AD2488711ECB71CEC39D8A014CE.roa
File: D87A3AD2488711ECB71CEC39D8A014CE.roa (raw, json)
Hash identifier: URIz/EmImMa31KXNZXAD/mq/b8rCjKmd3W0wnMv4HQU=
Subject key identifier: 6C:8A:82:1F:47:F3:70:82:5F:AA:AD:2D:DA:FE:49:85:D5:1A:2C:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D87A3AD2488711ECB71CEC39D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:54:43 +0000
ROA not before: Fri 19 Nov 2021 15:54:40 +0000
ROA not after: Sat 19 Nov 2022 15:54:40 +0000
asID: 139879
IP address blocks: 156.247.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3502 (0xdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:54:40 2021 GMT
Not After : Nov 19 15:54:40 2022 GMT
Subject: CN=61967743-e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:03:45:1a:c2:2a:c4:3e:02:8f:e7:35:ce:90:
f7:82:4d:12:2e:bf:a1:2a:d0:09:4f:73:ce:21:46:
f5:c4:47:19:57:23:f0:4f:92:21:00:cd:fe:77:97:
a4:1c:93:8b:f3:47:a5:be:36:e3:2e:2d:ef:70:d6:
a8:9e:e7:93:10:c6:1e:63:f2:cf:74:6e:fd:1c:46:
09:ab:2b:27:78:f5:9a:42:a8:a8:3b:38:1f:9b:36:
a7:75:82:aa:c6:65:2c:42:b6:62:f1:9d:1a:de:1a:
f5:39:f8:c8:c0:1e:2b:d5:8c:ef:aa:36:3b:90:41:
63:65:04:7b:8b:79:5d:84:e5:58:ea:88:e3:9f:8d:
1e:a4:b9:01:22:b7:a0:10:8a:0f:0f:4a:04:be:31:
b3:46:17:1a:7e:8a:fb:9a:a4:f3:40:a8:80:5e:47:
87:39:3b:db:d2:bd:91:78:9d:06:87:6b:e8:98:21:
b5:cd:6b:4a:b4:77:67:d4:f5:4c:59:c4:18:e4:3c:
04:4c:bb:53:84:0a:a3:00:4c:d6:a8:10:7d:71:5e:
9a:73:ac:2e:8e:98:7d:d3:4a:6a:de:52:be:64:82:
de:49:cf:83:35:87:49:2a:21:9d:a0:e8:a7:34:b9:
bc:37:db:fd:13:e2:03:6c:34:d3:d5:d9:e6:6b:b0:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:82:1F:47:F3:70:82:5F:AA:AD:2D:DA:FE:49:85:D5:1A:2C:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D87A3AD2488711ECB71CEC39D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:09:20:a1:40:b0:c9:c4:14:5f:d6:6c:ee:be:1e:a4:4d:ab:
90:9f:4a:cf:ad:03:77:ad:f5:d9:90:9b:fd:c8:e7:12:59:8d:
7d:41:5c:29:f4:7a:df:85:15:a3:c8:4a:b7:b0:26:10:fe:b8:
53:47:d8:50:07:eb:dd:e0:86:a8:37:c5:ab:4f:9f:10:d2:98:
7e:5b:48:4b:47:19:be:05:41:0b:02:c7:00:7c:53:3b:f1:8e:
34:4e:ad:4f:cd:f2:ef:62:17:a6:ee:f2:61:40:14:25:76:ba:
84:ea:82:6b:04:b7:bb:e1:f5:65:af:bf:b0:3c:dc:ff:f7:50:
87:0b:26:d3:68:86:85:7d:b1:a8:d1:fd:8c:dc:90:23:44:ae:
33:56:b2:91:64:0f:ab:7b:67:c3:51:9c:9c:4f:98:cb:81:72:
11:a7:13:69:aa:85:22:1c:7b:fb:c6:1a:92:0d:b9:39:9a:ca:
4b:eb:90:83:0e:4c:e8:9d:a6:11:63:7f:96:bc:f3:b6:a0:7c:
ae:43:32:06:21:80:e9:f0:38:09:96:a6:73:68:39:0f:93:c5:
10:cc:4d:51:91:e9:bd:ce:55:25:aa:26:07:85:05:6f:c0:7a:
8f:9f:34:09:d8:98:1b:26:98:18:9a:bc:96:a7:1f:bf:e9:fc:
46:24:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org