Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F65B6406488A11EC904FBB40D8A014CE.roa
File: F65B6406488A11EC904FBB40D8A014CE.roa (raw, json)
Hash identifier: TgTpzLv40ZLfrqEesf/5pJ6g45LQ9mXqRmFFKD4xZEw=
Subject key identifier: DF:07:68:AB:3B:04:42:61:07:0C:5E:27:24:8B:06:0D:31:A2:6F:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F65B6406488A11EC904FBB40D8A014CE.roa
Signing time: Thu 18 Nov 2021 16:17:02 +0000
ROA not before: Fri 19 Nov 2021 16:16:58 +0000
ROA not after: Sat 19 Nov 2022 16:16:58 +0000
asID: 139879
IP address blocks: 156.231.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3674 (0xe5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:16:58 2021 GMT
Not After : Nov 19 16:16:58 2022 GMT
Subject: CN=61967c7e-f46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:1f:66:0c:42:40:13:62:94:33:af:6c:f3:
33:6d:38:59:69:b9:ca:17:e3:c7:27:95:6b:c9:1a:
62:cb:cb:de:71:48:e6:0e:78:2c:c1:07:bf:3c:d7:
2a:ca:80:62:6d:b7:02:3e:20:60:2f:79:a1:9e:ca:
d8:92:c7:21:fb:31:bf:82:07:8a:0b:2d:82:18:46:
f2:a9:dd:89:db:c7:b7:cf:e1:99:fb:d3:18:d8:ac:
17:e9:4a:de:0a:01:1d:5e:64:ea:8d:ad:37:ce:4a:
ca:ee:31:c2:ef:dd:c7:0e:75:89:27:89:9b:6b:d2:
2d:b4:46:a8:d0:ed:a6:ae:1c:44:ce:01:a8:5c:34:
2f:f2:0c:d2:f5:3a:ed:ab:0a:0e:e5:95:c0:2f:44:
2b:6d:35:b3:c0:0e:c0:40:57:18:5b:dd:2f:42:5e:
2f:09:8f:f1:5f:e0:e2:01:8f:1f:a1:6f:72:78:98:
45:ba:fa:6e:5f:2d:80:d9:7f:96:60:11:18:27:f7:
18:8d:37:18:9d:17:b5:52:9c:0f:bb:23:0e:d9:26:
4a:2d:5f:12:ce:aa:ff:2d:62:9c:78:a3:96:31:b5:
c3:59:1f:e2:1c:2d:be:64:fa:11:be:db:2e:6a:8a:
a3:b8:3b:0f:00:f0:bb:90:16:88:e9:e1:95:bf:e8:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:07:68:AB:3B:04:42:61:07:0C:5E:27:24:8B:06:0D:31:A2:6F:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F65B6406488A11EC904FBB40D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.209.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3e:b9:d3:08:c1:a5:17:7b:57:bf:93:c2:2b:37:3c:f1:c7:
65:87:ac:3e:e4:b2:5a:4e:5e:99:c9:9c:9c:dd:d7:a0:8e:55:
bf:b7:36:b1:7d:00:01:65:3e:ab:d4:85:d7:90:17:45:77:5c:
64:67:b7:cb:f6:13:da:11:2f:0d:18:60:5f:a5:20:3e:a2:64:
57:05:1d:a0:ee:a1:60:db:c0:ce:04:24:4a:05:20:89:bf:a0:
65:c9:d9:8d:28:2b:05:f5:13:cf:8d:2c:e9:9d:f1:00:c4:47:
65:94:e5:1d:a0:13:b3:6d:92:af:cf:04:38:12:1a:1b:72:22:
56:7c:c2:43:3e:6b:34:d9:64:ef:a4:42:ad:b5:c7:b8:7f:8c:
17:08:58:6d:4d:15:78:ee:1d:8a:eb:e4:3f:f9:1c:9d:b7:5a:
ee:29:e3:1a:0a:84:ee:cc:70:06:cb:11:e5:04:bc:b0:8d:17:
77:44:b9:f7:a7:10:4c:71:e5:2d:f4:93:50:fa:52:77:b9:79:
a1:40:1f:0c:4d:6c:17:3d:c5:73:be:4d:b7:ff:3d:57:62:22:
64:1b:88:23:82:f5:e0:44:4f:0f:4f:1b:15:97:1e:d5:cc:dc:
4a:d5:8c:15:fc:11:f3:ae:3c:3c:36:46:75:ea:da:39:41:cd:
ce:81:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org