Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE744A44487311ECB7A9E317D8A014CE.roa
File: EE744A44487311ECB7A9E317D8A014CE.roa (raw, json)
Hash identifier: ug2A5XmQ+CahZeh7SUL91zVoSQ5GjzrTii5V++NJKD8=
Subject key identifier: 96:9D:A5:DA:D5:12:29:86:FD:49:8E:E0:B6:7E:3F:6E:9A:7F:B9:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE744A44487311ECB7A9E317D8A014CE.roa
Signing time: Thu 18 Nov 2021 13:32:10 +0000
ROA not before: Thu 18 Nov 2021 13:32:06 +0000
ROA not after: Tue 27 Dec 2022 13:32:06 +0000
asID: 328867
IP address blocks: 156.225.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3241 (0xca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 18 13:32:06 2021 GMT
Not After : Dec 27 13:32:06 2022 GMT
Subject: CN=619655da-0e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:d9:fe:a1:dd:71:e4:e9:2c:8b:10:80:39:
7c:36:60:a2:91:9b:d0:7a:d8:69:08:4f:80:ec:48:
c6:a6:ff:74:92:aa:bc:8b:8d:c0:84:c1:35:92:7d:
0f:af:a9:e6:1f:14:56:66:6c:13:2b:e1:ce:d0:1b:
3d:2e:0b:19:80:30:10:38:e1:fe:3d:04:39:8a:27:
c3:b8:bc:dc:e6:24:95:ee:48:e1:39:5b:a1:a5:61:
a4:74:70:2f:a8:ec:11:de:82:0d:fc:97:ee:6e:8f:
50:ab:37:7a:e0:31:28:1c:89:1c:12:4a:04:ce:39:
a9:df:40:3b:d6:d6:aa:e3:17:63:05:ae:0a:ec:e3:
2b:60:9a:ae:3b:9f:e1:90:4c:79:6e:92:bb:7f:22:
8c:a9:1b:dd:aa:66:df:28:09:a4:5e:ef:c7:41:99:
e7:a7:74:20:2b:ac:0e:14:a1:26:1e:45:cc:1a:a7:
4b:28:af:f0:bf:d7:ac:df:48:44:26:d2:e6:a9:6c:
36:ba:91:c6:d2:10:1b:67:65:99:ac:9c:19:83:7d:
6a:de:eb:6b:df:f0:c0:15:36:cd:9d:22:80:61:31:
8c:e8:cb:02:7c:38:01:cd:0a:5e:c1:56:de:92:88:
65:7a:58:a3:22:ea:2e:ee:a3:b3:2f:67:7d:63:b1:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:A5:DA:D5:12:29:86:FD:49:8E:E0:B6:7E:3F:6E:9A:7F:B9:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE744A44487311ECB7A9E317D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.129.0/24
Signature Algorithm: sha256WithRSAEncryption
26:87:7e:a5:be:eb:07:61:76:0f:5f:c0:95:94:ab:11:6c:f9:
5d:cc:5a:b7:b2:0e:15:fb:99:84:84:d6:74:29:14:a5:39:15:
d2:c5:54:73:b2:30:8c:de:8c:57:18:dc:c6:2f:c1:67:0d:70:
e2:b5:81:99:c7:16:a1:a0:f1:94:20:fc:15:7f:17:d9:6b:10:
ec:2e:45:38:c7:71:16:bb:e2:2d:7d:99:67:1a:b7:16:95:d3:
69:b3:7b:f6:ef:60:32:91:4a:08:b6:44:fe:5e:a5:e6:28:91:
c8:81:b3:c7:31:3b:11:c2:22:27:2e:de:33:9e:80:dc:e9:e6:
af:26:33:b6:f4:30:7c:ad:99:06:fe:97:d6:d8:e2:91:52:17:
fd:14:7e:30:84:c9:64:15:98:49:47:11:c3:a8:a0:0b:19:6a:
5f:99:6c:2b:8f:23:e1:81:9e:27:84:b0:ba:d5:77:55:4e:93:
a2:5b:b2:17:b6:43:61:52:3b:46:7c:98:5b:7d:e8:cc:f5:cf:
4f:cd:d8:db:ff:f0:42:c6:03:4f:da:dd:33:bd:5a:7d:6c:78:
c1:35:20:d4:75:10:49:14:88:46:e3:49:e4:9a:a0:30:60:e4:
ed:5a:ae:39:a6:bf:fd:db:c4:99:92:30:b4:80:2f:62:98:d3:
9d:93:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org