Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/426660581C3C11EF9D797BDD7CDC24C2.roa
File: 426660581C3C11EF9D797BDD7CDC24C2.roa (raw, json)
Hash identifier: J2cf8+AZgi2Z1Z2TtwSv2W0/h0MTT6kIGsJOvs3IOtI=
Subject key identifier: C2:B3:93:48:B1:81:D4:5D:C9:D9:04:BC:96:A9:99:8C:27:3F:AA:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8C8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/426660581C3C11EF9D797BDD7CDC24C2.roa
Signing time: Mon 27 May 2024 15:17:41 +0000
ROA not before: Mon 27 May 2024 15:17:38 +0000
ROA not after: Sat 07 Sep 2024 15:17:38 +0000
asID: 138415
IP address blocks: 156.241.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35979 (0x8c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 15:17:38 2024 GMT
Not After : Sep 7 15:17:38 2024 GMT
Subject: CN=6654a415-fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:58:8c:50:dc:30:89:50:a8:4e:78:9d:30:
ff:d2:de:16:6b:f7:83:c7:19:02:e1:95:3c:3c:79:
cb:ce:29:de:83:54:6d:03:92:16:27:4a:a2:e4:fe:
ad:a6:38:5f:1f:51:e2:58:a0:5e:76:08:4a:e6:bb:
af:d8:7e:fb:1f:ab:25:a0:1f:f5:bf:51:8f:36:82:
61:96:7b:70:75:6f:52:ae:dc:7d:e7:50:f4:b1:ce:
7b:9f:cf:62:71:d4:43:b5:a9:c5:f6:2d:a9:e0:26:
05:29:af:ab:9e:19:13:35:de:eb:7f:10:1c:dc:80:
1d:fa:85:a3:41:23:e1:d0:71:4d:15:82:62:7e:cc:
21:9b:3e:13:65:f1:24:f3:ec:4c:e4:37:fd:f6:c0:
6a:03:6b:01:22:f9:5f:61:72:f5:bb:67:b7:62:ff:
18:66:12:d8:86:18:e0:c7:7b:47:9f:1c:64:4c:70:
af:38:70:68:e2:60:76:be:18:b8:61:bf:cb:5e:b7:
d0:c1:71:23:0f:50:d2:2e:29:54:9a:52:85:5b:89:
12:4a:de:8e:7c:2f:23:fe:00:ac:39:0b:9c:14:81:
59:f1:ca:79:83:36:69:3c:45:6e:1e:7d:1e:aa:37:
46:88:45:69:ee:2d:3c:96:72:ca:39:35:7b:c5:f1:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B3:93:48:B1:81:D4:5D:C9:D9:04:BC:96:A9:99:8C:27:3F:AA:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/426660581C3C11EF9D797BDD7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.32.0/19
Signature Algorithm: sha256WithRSAEncryption
30:89:3e:96:41:ea:8e:9c:64:0d:4c:2b:00:02:60:15:b8:42:
61:8d:04:23:14:f3:b3:63:17:f3:b0:55:c0:cb:2a:46:3e:9d:
2d:c7:6f:a3:02:98:19:8c:46:d4:18:99:f0:08:c8:7e:8d:0e:
54:b7:1c:98:b1:dd:1b:e0:b0:9f:f8:66:47:25:a7:dd:ff:48:
b8:bf:6d:0c:d3:a1:22:d0:6b:a0:1e:1a:76:da:5b:cc:50:b5:
6e:0d:5d:26:b6:d0:16:1c:76:7d:97:75:e8:fb:66:85:a5:7d:
a2:be:1e:48:6d:52:13:0f:2b:b4:dd:d8:8d:6e:8e:f2:ff:d4:
d3:b5:47:74:49:5e:ae:25:76:1c:f4:07:25:79:ce:f1:96:bb:
d8:bc:1b:09:bf:e7:e2:73:be:f5:6f:ee:45:16:6f:66:d2:20:
12:89:d6:1a:07:57:10:99:af:54:30:c9:94:19:55:eb:b0:9c:
8d:a8:01:e7:2d:92:3b:ca:08:7e:9f:17:b8:51:77:1c:c2:5d:
f9:ba:b2:94:b0:b6:e1:17:8a:65:6d:85:e5:d9:b8:d7:17:15:
4a:c8:d1:d6:13:95:1d:43:3e:43:99:7a:86:03:34:af:b7:2a:
fb:c6:17:80:bf:ca:aa:9c:09:e4:6b:04:0c:61:46:0a:87:6d:
c3:4e:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 03:52:17 2024 by rpki-client on console-ams.rpki-client.org