Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB7E39CA488811EC989C513CD8A014CE.roa
File: EB7E39CA488811EC989C513CD8A014CE.roa (raw, json)
Hash identifier: wyV5uSQ4KhBf6ZHKgEPuXzK5MtlUWtYZnBwHyGRzHEw=
Subject key identifier: 05:5F:C2:ED:DD:C5:EB:B2:C7:CC:B6:CE:59:0A:CB:95:07:1E:A5:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB7E39CA488811EC989C513CD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:02:25 +0000
ROA not before: Fri 19 Nov 2021 16:02:21 +0000
ROA not after: Sat 19 Nov 2022 16:02:21 +0000
asID: 139879
IP address blocks: 156.247.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3562 (0xdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:02:21 2021 GMT
Not After : Nov 19 16:02:21 2022 GMT
Subject: CN=61967910-2f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:a5:23:df:b7:8e:9f:78:c0:b4:0e:22:86:
4a:01:7e:37:8f:65:31:9d:70:87:d2:06:38:7e:47:
53:62:d7:90:51:65:e1:5c:e8:cc:99:cf:0f:b0:20:
98:7d:a1:19:8c:bd:d2:cd:df:e9:c1:db:20:08:aa:
73:8a:e8:33:f1:18:6e:95:e4:6d:d9:12:fe:8e:d7:
14:95:11:3d:98:9d:11:69:7d:20:cf:c2:77:f3:b1:
24:67:9d:71:76:f9:61:f0:d1:44:21:c0:8a:9d:70:
17:5c:3e:1a:f6:ea:96:fd:98:dc:b3:7f:49:c9:94:
dd:d0:28:ba:c7:c4:d3:65:15:96:71:b8:6a:db:65:
89:29:fc:fa:fc:2a:95:b2:22:3e:fd:a7:e6:f0:32:
f8:9d:0a:52:47:38:69:d0:20:50:7d:31:e3:a4:92:
2a:22:9a:eb:f4:f4:53:b9:ba:cd:95:cc:6e:2e:6f:
80:12:0e:5c:67:11:ca:3e:a2:f8:b7:43:de:65:a6:
72:cd:73:c3:26:0f:49:e7:cb:ce:fa:bf:f3:31:1d:
43:f4:ee:75:69:39:79:04:66:66:e3:dd:c4:4e:36:
65:d8:19:dd:31:74:00:22:da:60:32:bc:e4:d2:42:
b9:65:00:40:4b:1d:7f:ae:84:09:b1:87:21:19:85:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:C2:ED:DD:C5:EB:B2:C7:CC:B6:CE:59:0A:CB:95:07:1E:A5:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB7E39CA488811EC989C513CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.187.0/24
Signature Algorithm: sha256WithRSAEncryption
87:31:58:83:9b:f1:f7:53:6c:78:02:e8:a7:31:2c:00:76:00:
d2:86:2c:4c:ac:a6:cd:5b:d2:d1:b0:d4:81:d8:79:cb:e0:d1:
09:ac:3d:c9:d4:8c:39:cf:bb:75:94:c6:74:4f:d3:8d:56:d0:
2b:44:e5:d9:ce:7a:57:2d:b4:0f:cc:fc:8d:a5:c6:44:42:d5:
3d:b8:d0:bf:ee:10:1e:a6:0a:65:0f:e4:c9:79:f1:e7:a4:cf:
c9:75:f1:61:7f:f8:bc:eb:df:5d:a3:14:c9:9e:63:79:25:23:
92:bb:1d:e1:66:6f:b9:c5:d4:ef:2d:6d:0f:2a:7f:e2:8f:7c:
53:84:a4:9f:80:ea:77:17:12:83:84:5f:4e:bf:4f:9a:e4:c4:
19:ed:09:84:bd:fe:44:0b:f2:e8:03:cb:a0:a8:62:87:7f:4c:
29:56:3c:12:d0:bc:c1:d3:ee:9c:2a:36:07:a3:9d:8c:48:33:
e2:fe:71:c0:c7:44:62:3d:ed:29:43:22:1d:21:77:24:ee:e6:
b2:f4:e8:4e:bd:36:f2:c6:86:ed:84:e2:c3:29:5d:b4:a2:47:
f1:97:83:b0:50:66:f9:08:15:dd:ad:94:f7:27:c1:12:4a:76:
e2:6d:0b:42:3d:fb:06:c3:3d:ee:3f:53:83:6e:7f:2a:f7:99:
b7:0b:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org