Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E1E9DEE06D111EF9F72DFFA007001B1.roa
File: 1E1E9DEE06D111EF9F72DFFA007001B1.roa (raw, json)
Hash identifier: 7wH2G1GiVYO3RQ46ys6fLVwEOkjnh9BR/J79cQonwvs=
Subject key identifier: 12:52:84:63:32:51:58:53:B5:77:A7:F7:CA:08:42:B0:C6:14:C2:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E1E9DEE06D111EF9F72DFFA007001B1.roa
Signing time: Tue 30 Apr 2024 09:07:50 +0000
ROA not before: Tue 30 Apr 2024 09:07:46 +0000
ROA not after: Mon 20 May 2024 09:07:46 +0000
asID: 39600
IP address blocks: 156.226.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34497 (0x86c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:07:46 2024 GMT
Not After : May 20 09:07:46 2024 GMT
Subject: CN=6630b4e5-1e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:fc:cf:03:e9:f1:4e:c4:9a:51:1d:06:23:
62:56:71:88:c1:df:4a:8f:49:cc:8f:55:be:58:25:
3f:0f:16:23:08:ea:7a:7c:a7:21:4a:d5:c0:f6:51:
e9:ee:3e:17:fe:57:08:cc:7a:ea:66:4d:a2:d1:d2:
22:39:95:43:8f:70:0d:a7:be:f2:32:a7:5d:e0:f8:
4c:09:de:86:8a:50:bb:ed:6b:d9:c0:2e:04:23:43:
a4:40:44:33:db:ef:fe:9a:40:02:83:f1:07:a0:5b:
13:31:5e:8f:fd:d8:7e:a5:dc:42:97:9c:7b:e2:35:
e3:21:e2:52:cd:09:f8:45:34:5e:69:1a:f6:a7:0a:
ef:6e:5f:0f:1b:60:8d:3e:db:24:ee:68:77:63:fd:
16:03:2d:17:ab:cd:3e:df:8d:72:82:20:b4:cd:f6:
42:5e:89:cc:92:c2:e6:44:cd:e8:5f:8c:69:d0:82:
3c:dd:d2:cf:c4:ec:16:ad:60:4d:cc:07:5d:ef:73:
9c:45:22:2c:46:b8:62:5f:71:6b:55:d7:d8:85:eb:
db:4f:1e:f6:4f:35:b2:0f:bb:72:23:ea:1e:2a:5f:
30:1a:33:89:65:d0:c1:f4:aa:eb:e1:7f:20:dd:17:
15:f8:aa:0f:28:88:80:de:5f:2e:b5:41:d4:81:a5:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:84:63:32:51:58:53:B5:77:A7:F7:CA:08:42:B0:C6:14:C2:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E1E9DEE06D111EF9F72DFFA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:60:59:fb:89:0b:ac:8a:20:26:45:a6:d3:55:b4:39:01:6a:
e0:9c:6a:5e:18:ac:7d:db:b4:e2:0c:24:d7:90:29:05:52:8c:
38:ef:a9:dd:5b:d1:78:2b:71:dd:93:8b:ef:80:d3:6a:58:7f:
ac:35:99:38:f1:e9:68:66:38:c0:f4:81:a5:a3:23:dc:9f:96:
e1:64:c2:5f:f5:f5:27:28:76:98:49:38:43:4c:ee:f2:49:60:
cd:05:bd:ea:b5:c9:c9:f1:af:80:e4:7b:ef:cf:07:89:2a:89:
84:5c:5c:9b:15:85:b3:67:97:1e:dd:85:c5:15:49:9e:a2:e2:
71:84:ec:ae:a5:b1:30:24:c9:55:07:49:a3:d5:33:6f:90:a4:
89:a0:47:b4:bf:5e:10:08:f3:90:e1:e2:8a:59:01:a0:16:61:
bb:57:d7:a7:f3:c0:fe:06:ad:82:78:c1:9f:04:9a:92:25:fd:
a7:b5:ee:79:a9:8b:09:e7:bf:63:ef:3c:3f:03:e4:80:fb:02:
13:02:31:9e:52:c3:fd:8f:1b:12:69:fd:6e:36:d8:a0:13:04:
ce:8e:e3:4b:a2:12:6e:fd:f1:80:68:38:a2:50:f4:3d:68:22:
20:2b:99:c6:2f:7c:c1:97:cd:2e:41:c1:8b:ca:17:fb:48:be:
a1:ce:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:17:28 2024 by rpki-client on console-fra.rpki-client.org