Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1955E808FF11EF817A8641017001B1.roa
File: 6E1955E808FF11EF817A8641017001B1.roa (raw, json)
Hash identifier: ITaZ4zgwOE20Avc/n2rKnJROavysroTn8YbNh/IOdxs=
Subject key identifier: 28:42:E6:1F:55:66:FE:CE:6C:7F:89:5B:C3:4F:3D:9E:73:91:D8:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8781
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1955E808FF11EF817A8641017001B1.roa
Signing time: Fri 03 May 2024 03:44:23 +0000
ROA not before: Fri 03 May 2024 03:44:20 +0000
ROA not after: Sat 11 May 2024 03:44:20 +0000
asID: 39600
IP address blocks: 156.255.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34689 (0x8781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:44:20 2024 GMT
Not After : May 11 03:44:20 2024 GMT
Subject: CN=66345d97-7202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:86:64:40:f5:48:40:a0:b9:a5:3a:89:e3:
be:b8:60:ba:5a:29:dd:3c:bc:d8:d5:04:ce:11:72:
d1:53:c7:e8:d5:8d:be:83:64:ff:ca:3d:44:7b:ac:
20:3f:1e:6a:3d:76:6f:8d:70:05:ef:80:85:37:62:
af:f0:2f:b6:23:7f:3c:fd:86:3b:85:a1:b6:3c:11:
f2:45:c0:f1:41:00:ae:e4:1f:1a:33:7b:7a:06:0d:
00:29:52:9b:f5:c3:1e:a6:26:46:f7:39:b2:b5:3c:
64:d2:12:ba:ac:69:82:7c:62:f9:c7:18:fc:a6:84:
17:19:de:d9:d3:0f:72:e3:8c:0a:5a:bf:25:20:d3:
73:c9:86:5a:99:7b:29:6f:92:b3:50:09:2e:43:97:
be:d3:cd:15:29:75:bd:ad:22:b4:d1:d2:57:31:fc:
4f:92:e6:45:24:c0:7c:3d:b5:0c:5a:7a:2f:94:88:
ea:53:78:c0:2c:65:d7:e9:c0:77:27:78:9c:79:1b:
38:4b:11:c9:fb:18:5c:76:4d:ae:dc:9b:b1:86:6a:
1d:e3:56:3f:f2:aa:66:84:bc:87:75:6b:c3:a3:b2:
a1:44:1a:c9:6c:71:88:e6:63:e7:ba:5c:79:7f:b2:
69:05:32:d9:51:36:5d:e9:b0:9b:f8:be:11:a0:ff:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:E6:1F:55:66:FE:CE:6C:7F:89:5B:C3:4F:3D:9E:73:91:D8:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1955E808FF11EF817A8641017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.72.0/21
Signature Algorithm: sha256WithRSAEncryption
73:47:72:54:87:47:9a:2a:3b:30:c6:e5:55:34:07:94:46:ac:
d6:ab:11:85:f2:6e:29:cf:54:72:79:18:4d:4d:98:44:77:bd:
b8:3b:8f:fa:23:76:c3:cf:62:10:2c:4f:bd:8a:62:4b:ad:ce:
ac:e6:c0:58:54:37:27:ad:2d:bf:c6:09:8c:3d:02:d2:31:f6:
4a:fb:7b:77:eb:39:64:ca:29:05:5f:01:14:43:e1:0a:d5:90:
7c:36:70:c3:99:17:8d:c8:4a:07:70:f6:14:22:13:7a:81:b4:
c0:a2:d7:18:ab:9c:3e:6f:83:55:a9:18:16:ee:f9:de:83:2e:
55:cd:42:7f:80:d4:fa:db:d9:78:93:9a:e8:c1:18:b7:64:62:
de:eb:cb:20:03:ee:d0:52:b3:a4:04:25:47:83:c0:ed:94:81:
9a:70:fb:08:ee:59:7b:a0:d3:9e:8e:73:5d:e5:77:dd:58:11:
a1:d5:71:e5:f8:33:d9:3e:5c:28:eb:81:3c:b4:69:35:df:2a:
44:79:37:42:6e:ab:56:d3:36:d8:e4:ae:c6:b0:cb:b7:fb:08:
42:f8:d3:ab:c8:09:9c:53:86:9e:c7:1b:fd:e7:10:5b:d6:46:
7a:3a:21:00:ca:93:d4:76:67:50:cc:6a:39:35:d7:89:fa:f1:
08:97:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:22 2024 by rpki-client on console-ams.rpki-client.org