Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D68EC32CCBA11EEA1291F7F775412E6.roa
File: 3D68EC32CCBA11EEA1291F7F775412E6.roa (raw, json)
Hash identifier: NgNxhmsjOVfdXdBuZYHTnOPFFS0LjnykawGeYFZ3VeI=
Subject key identifier: F2:F7:6B:1B:F6:29:05:9F:12:01:71:7C:A8:1B:97:3C:BE:3B:13:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7113
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D68EC32CCBA11EEA1291F7F775412E6.roa
Signing time: Fri 16 Feb 2024 10:57:56 +0000
ROA not before: Fri 16 Feb 2024 10:57:53 +0000
ROA not after: Fri 26 Apr 2024 10:57:53 +0000
asID: 9009
IP address blocks: 156.246.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28947 (0x7113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 10:57:53 2024 GMT
Not After : Apr 26 10:57:53 2024 GMT
Subject: CN=65cf3fb4-e1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ad:bf:06:98:6b:83:bc:4b:cd:23:a4:aa:eb:
09:bb:52:b3:97:5e:31:4c:e2:cb:87:59:2c:da:57:
7a:18:bb:7f:fd:66:30:40:d4:87:ba:4b:be:79:07:
3c:c1:80:70:d7:2e:a0:b7:99:65:30:2e:8a:76:35:
e0:96:91:6d:91:ec:07:03:f8:d7:be:a9:1d:34:f0:
63:81:d3:64:6c:b1:3c:ab:f4:5a:36:85:6d:60:5b:
36:ef:43:f6:25:85:84:89:96:c8:fb:d1:6d:76:54:
38:0a:df:8f:41:b2:e7:28:8d:80:f7:cf:fa:15:14:
81:6b:55:70:59:98:c5:2d:97:cf:b1:5a:57:d1:7a:
f1:7b:23:f0:20:0f:97:6d:18:1d:4e:50:44:63:f0:
bf:a1:8d:cf:e4:23:b8:4c:fa:aa:16:97:77:c3:68:
e4:4d:47:38:9e:66:bc:16:05:55:f1:e1:20:82:20:
cf:29:db:34:f8:7f:5a:06:03:7f:66:4f:9a:23:1f:
02:5b:68:ab:25:c3:8d:0c:da:89:39:0c:a4:a9:ca:
f6:68:9d:b7:0d:c5:80:a9:48:04:90:f2:ed:65:0e:
9e:58:c4:4b:b0:fc:41:91:da:a1:ad:89:b5:23:24:
b8:d7:2b:88:04:9b:52:b2:d1:31:37:6f:d6:fd:6e:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F7:6B:1B:F6:29:05:9F:12:01:71:7C:A8:1B:97:3C:BE:3B:13:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D68EC32CCBA11EEA1291F7F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.41.0/24
Signature Algorithm: sha256WithRSAEncryption
75:75:7e:88:b1:f7:84:f1:51:7c:d3:93:17:75:69:53:00:53:
75:0d:a4:3e:1b:07:12:82:08:32:83:20:88:5c:8e:ee:fe:f8:
eb:c2:f1:06:43:32:6c:7e:32:31:ca:30:42:73:ca:7d:17:c3:
45:71:e1:fd:b7:e9:35:73:49:43:4c:30:fd:a9:e1:8d:10:31:
70:37:67:5a:4a:58:2d:6c:1a:04:b8:4c:5e:7e:57:e6:f8:ea:
74:d3:df:d5:c7:d6:15:c2:f8:1c:b7:cf:d8:fe:a8:3a:a6:0f:
3a:dc:d6:39:ed:64:38:8d:f7:46:5f:1c:2d:85:75:69:35:06:
e6:8f:45:17:31:5a:05:e5:df:71:a1:a5:39:8e:0b:e3:1f:80:
a0:06:fd:e6:9e:76:ef:d3:71:5d:08:a4:1a:e3:21:13:a7:20:
0e:1f:e1:b7:1b:7c:5a:a1:17:b1:9b:2d:53:53:e9:8c:17:ff:
53:4d:f4:3d:ec:a5:de:09:bb:a6:31:0c:78:06:06:26:34:7c:
a7:ad:d4:3a:40:c1:4e:f8:db:3c:97:11:1e:c2:c1:9f:3d:80:
40:94:7d:be:31:c9:4e:3b:f2:d1:32:5e:28:42:db:30:19:c8:
06:e9:ba:c1:7f:b7:e1:27:02:b5:d6:f6:ee:ce:9e:11:1a:fa:
1c:a6:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:55 2024 by rpki-client on console-ams.rpki-client.org