Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15E419A2090011EFACD10F47017001B1.roa
File: 15E419A2090011EFACD10F47017001B1.roa (raw, json)
Hash identifier: KER0JmNwmxBpO4xT7BNS5KEhGXaEhaLVibLtNBcxd9s=
Subject key identifier: 84:9D:C9:D7:D1:4D:8C:22:9A:0A:42:76:6D:12:88:54:38:BD:3E:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8789
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15E419A2090011EFACD10F47017001B1.roa
Signing time: Fri 03 May 2024 03:49:04 +0000
ROA not before: Fri 03 May 2024 03:49:01 +0000
ROA not after: Sat 11 May 2024 03:49:01 +0000
asID: 39600
IP address blocks: 156.238.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34697 (0x8789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:49:01 2024 GMT
Not After : May 11 03:49:01 2024 GMT
Subject: CN=66345eb0-88d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:84:16:7a:3a:89:2d:ae:60:11:79:40:a1:
ea:73:fb:72:35:40:43:1d:4d:20:a6:15:bb:6e:60:
9f:2d:cc:ba:5f:2f:f4:fe:d2:b2:5b:1a:0d:d7:ca:
8c:78:39:3e:de:f7:dd:23:0f:ba:de:0f:e9:60:d8:
a8:e5:d6:f8:f6:ba:e6:24:69:4c:62:17:91:04:3b:
4a:b0:78:29:32:6e:5d:df:7a:0c:d9:21:8b:b2:79:
ad:16:18:db:f2:54:fc:7c:75:8f:5c:70:06:9c:2b:
ae:b5:2c:6e:30:b5:3d:df:d4:80:98:bc:a6:a6:3b:
23:5b:5d:38:29:48:44:a9:9b:ae:ba:cc:dc:24:ed:
ba:0e:72:26:45:a7:df:78:cd:5e:c9:cb:56:22:6f:
4f:bc:c0:ff:23:d8:9e:00:42:45:93:79:67:ab:28:
c2:cd:97:14:9f:b6:c9:e5:6d:5f:05:e1:69:71:7b:
f4:6d:a7:30:1c:a9:26:f7:e8:7a:52:a1:7e:14:01:
b4:0e:3f:40:e6:93:66:4a:11:26:1a:fb:be:9a:b3:
85:7e:b6:7b:82:e7:60:53:5e:51:ee:73:43:87:60:
73:fb:ba:3a:6d:34:15:8d:1f:e4:a1:1b:c7:ee:48:
45:18:07:4f:fd:5d:7e:49:33:fc:9c:c1:09:54:3f:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9D:C9:D7:D1:4D:8C:22:9A:0A:42:76:6D:12:88:54:38:BD:3E:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15E419A2090011EFACD10F47017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.184.0/21
Signature Algorithm: sha256WithRSAEncryption
65:69:5f:ca:1e:3d:92:c6:2e:ff:8b:e6:da:00:b1:5e:4e:c5:
53:ae:9b:a6:6f:74:74:98:a0:f7:6d:d0:c3:bb:2e:11:35:bd:
b7:c0:67:31:91:dc:e0:86:39:c2:ee:3c:1d:7e:86:00:28:42:
75:cd:32:cf:13:f4:1a:e7:3e:48:28:f3:3e:fc:21:fe:7b:16:
a0:8e:0b:bd:33:cf:10:89:3d:a4:58:50:25:67:a2:01:fd:75:
ed:53:93:dc:18:3e:89:2a:be:6a:e2:d4:ba:29:32:79:23:1e:
f2:55:9e:ea:ec:ee:b0:e9:3a:47:79:5e:fb:82:6b:94:aa:d6:
62:e1:0b:c7:6e:ec:85:18:1b:96:d7:21:1b:5e:b4:f9:86:c4:
10:05:27:aa:8b:9f:d9:1e:02:22:ee:ca:c2:88:8a:99:32:8e:
4b:47:a5:ed:77:61:e3:ed:ee:a5:54:3f:81:e4:9d:f7:d5:ce:
c1:b5:37:2e:d0:cf:84:a7:23:b1:24:56:6e:5d:90:fe:17:57:
f7:1f:f6:24:6c:d3:36:7f:6b:6c:5a:75:fb:7e:59:54:4c:55:
29:b4:17:07:66:32:6a:94:99:48:87:b0:0e:e4:8d:eb:55:4f:
c5:a0:08:f8:60:98:44:0d:d4:1e:6a:16:fb:24:fe:75:1a:cb:
55:2f:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org