Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DA6D3CA27C311EFA6A850317DDC24C2.roa
File: 4DA6D3CA27C311EFA6A850317DDC24C2.roa (raw, json)
Hash identifier: ++MTnvUeig4pY3Vnr9pvmyLqu9ylKk963LvEE1lZ4So=
Subject key identifier: A0:2C:33:C6:02:6C:67:41:FC:C0:CD:F3:BB:1B:6B:1F:5C:C7:59:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 906E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DA6D3CA27C311EFA6A850317DDC24C2.roa
Signing time: Tue 11 Jun 2024 07:22:05 +0000
ROA not before: Tue 11 Jun 2024 07:22:01 +0000
ROA not after: Thu 20 Jun 2024 07:22:01 +0000
asID: 139811
IP address blocks: 156.249.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36974 (0x906e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 07:22:01 2024 GMT
Not After : Jun 20 07:22:01 2024 GMT
Subject: CN=6667fb1d-b059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:38:6a:3a:7d:02:7e:64:13:fa:30:a6:b1:
f1:04:ad:e2:fc:e0:5a:6b:99:92:95:1d:4c:5c:e6:
0b:bc:09:8f:3b:53:dc:a1:fa:78:9e:d6:f9:76:33:
9a:3b:69:0b:d4:d8:74:4d:d1:89:82:7d:4e:a4:43:
2c:8c:a2:2c:db:e9:8b:52:80:35:f7:ec:6b:8f:6a:
0a:c4:d5:ec:83:20:2b:ee:f2:0d:64:1a:53:ab:c4:
d4:9d:51:09:0a:28:43:7f:4e:7c:4d:71:4b:48:8d:
8d:fa:f4:ea:b1:fb:f6:5d:92:77:10:19:d5:e1:f6:
0d:f9:72:a3:dc:37:b3:a0:b2:b4:2b:80:e4:4f:98:
c0:3a:5f:fc:86:fe:1b:ae:e4:d0:7e:9b:15:a1:e2:
9e:8b:53:b2:ab:90:f9:8e:c5:a4:7e:34:75:dd:5b:
63:49:7a:66:b4:c4:81:0c:9f:26:33:c4:15:80:54:
b2:7f:f4:e6:94:42:1f:41:50:28:b8:27:62:b8:2b:
81:7a:7b:e8:ae:bb:e7:ba:66:27:cf:fc:c5:d9:fa:
6c:81:5e:9a:13:96:4b:20:dd:f4:a0:8c:66:73:9d:
c5:7f:b8:cc:e0:76:a8:8a:3f:8c:0f:57:17:3d:11:
11:e2:23:16:e7:bf:87:ed:2d:21:e0:cf:bc:dc:74:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:33:C6:02:6C:67:41:FC:C0:CD:F3:BB:1B:6B:1F:5C:C7:59:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DA6D3CA27C311EFA6A850317DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.25.0/24
Signature Algorithm: sha256WithRSAEncryption
33:12:d6:12:af:d7:1b:60:95:2c:ae:4e:df:e0:58:22:0a:37:
61:36:35:a8:ea:7b:e0:fa:fc:e5:ab:8b:db:4a:67:7f:7f:f6:
02:92:e6:02:a1:dd:8b:c2:54:bf:a7:36:3e:9e:61:8e:6a:d4:
44:8e:5d:03:b4:b2:6f:52:47:93:cf:c8:d7:d8:20:24:5f:63:
2d:f0:df:58:42:11:c3:4f:5d:1c:99:b9:f2:e9:6b:21:9c:f8:
e0:d1:c7:f9:97:a4:c8:33:3b:fa:cf:4d:95:ad:4e:1f:bc:b7:
ed:6b:01:61:52:22:20:18:98:3a:fb:d0:c3:68:ca:8f:3a:9e:
a0:48:a7:d3:3f:09:d5:28:8b:38:dd:e9:a8:05:7a:17:43:8d:
5e:b9:35:84:f8:d9:fd:2c:78:93:84:55:e5:91:26:f6:0c:11:
ab:b9:16:fc:5d:2c:8d:03:d5:98:cc:29:f3:74:8e:a8:02:38:
d8:98:3a:63:c5:46:08:b4:e1:b9:94:5a:3b:5a:32:8d:97:23:
0f:b7:92:e5:8d:21:01:f2:3c:ac:57:91:b0:3b:7f:62:95:26:
03:81:2d:0b:5d:7b:b4:78:a8:a2:ab:9d:cc:56:8a:a8:89:53:
c1:ba:77:24:54:cf:4e:38:33:d5:18:29:ec:27:1e:2c:75:96:
bc:3b:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:17:52 2024 by rpki-client on console-ams.rpki-client.org