Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C73FFA0CCB911EEA51A807D775412E6.roa
File: 5C73FFA0CCB911EEA51A807D775412E6.roa (raw, json)
Hash identifier: 7gpMJN9RSD7sHg8YU2NaY0dOI8At9V62T9V0h8uReCc=
Subject key identifier: 79:9A:75:84:BC:6E:F3:25:F3:14:0C:26:1E:CC:F0:0F:6F:BD:DC:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7107
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C73FFA0CCB911EEA51A807D775412E6.roa
Signing time: Fri 16 Feb 2024 10:51:39 +0000
ROA not before: Fri 16 Feb 2024 10:51:35 +0000
ROA not after: Fri 26 Apr 2024 10:51:35 +0000
asID: 9009
IP address blocks: 156.246.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28935 (0x7107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 10:51:35 2024 GMT
Not After : Apr 26 10:51:35 2024 GMT
Subject: CN=65cf3e3b-4665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:2a:1b:f6:26:54:ab:b6:15:8f:1a:11:26:
8a:6d:96:25:71:04:43:5e:37:48:fe:e8:74:e6:a5:
12:82:1f:c2:bf:57:c9:1a:31:6f:28:a3:30:f5:8c:
10:1f:c6:47:b5:22:32:90:00:aa:0d:6e:ce:7e:e6:
39:bc:f8:0c:a2:f4:9d:ef:36:ca:f2:5d:79:90:53:
c5:b1:3d:80:ee:0c:84:e4:4a:9f:80:53:c4:85:dc:
fb:e4:91:0a:de:83:1c:e4:81:ec:4f:2f:9c:37:48:
11:9d:31:08:95:8c:8e:a8:a3:62:a1:6b:e0:ff:b8:
a7:84:dd:50:38:42:55:51:85:54:33:5a:32:b1:76:
79:17:2f:0a:b0:b1:83:b9:70:68:0f:03:a2:cd:dc:
b2:bd:95:75:76:12:7a:c4:57:68:e4:e1:ce:71:d7:
2a:03:d5:b5:c3:2b:f2:89:8d:ee:2a:91:d7:60:d9:
d6:d6:38:84:db:df:d1:22:ee:f6:ae:1e:92:50:50:
87:e8:86:b9:78:29:83:7b:b8:f8:41:94:27:9d:bb:
04:c3:40:d7:4c:8b:1b:5e:74:f9:c6:82:e0:62:58:
db:dc:fe:1a:8c:04:f5:d7:30:cb:86:a8:3a:e2:22:
4f:f9:41:6f:fe:e6:66:4e:00:8f:b0:90:72:41:e8:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9A:75:84:BC:6E:F3:25:F3:14:0C:26:1E:CC:F0:0F:6F:BD:DC:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C73FFA0CCB911EEA51A807D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:85:5e:7e:45:5a:01:93:ed:4a:88:f9:bd:19:41:b5:e0:07:
41:46:fa:d5:2d:96:db:38:41:63:f1:67:59:9d:3c:d7:82:ac:
c4:20:46:38:ef:89:81:67:dc:65:e4:6b:6d:89:56:fc:22:7e:
21:81:6d:d3:d1:42:9e:35:fc:6e:fb:6e:0d:e8:75:bf:b2:fd:
3c:73:94:df:c4:5c:80:39:2e:ec:ea:ca:ec:9c:0f:7b:df:9e:
08:8f:e6:c6:9a:d8:8d:ca:83:2a:43:42:a6:a1:89:5e:3d:2d:
dc:0d:b5:35:bc:6c:6a:3d:37:99:a5:0b:c0:e1:e4:85:61:78:
e0:2c:8b:23:8f:e3:16:bd:9b:db:13:fa:33:6d:4d:26:c6:a1:
45:30:d6:bf:83:3d:89:3a:28:86:63:e2:bb:67:71:00:e7:71:
bd:0e:02:61:6c:44:02:93:ce:d9:e0:03:d0:09:bc:8f:80:57:
bb:cd:7e:35:6b:de:e6:4b:65:e9:da:86:f7:48:d9:b6:b7:10:
75:86:c1:02:73:45:68:90:31:93:1b:32:83:0a:24:b8:35:94:
7e:b2:c5:dd:7f:b2:84:f9:bb:f4:11:ce:d4:98:19:ec:b8:5c:
28:ad:a8:ce:0c:f6:b2:3c:ee:0e:b8:a5:81:f3:27:07:26:5d:
21:e4:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:57 2024 by rpki-client on console-ams.rpki-client.org