Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729734AECCA611EEA94CC55F775412E6.roa
File: 729734AECCA611EEA94CC55F775412E6.roa (raw, json)
Hash identifier: QrdXsE8yKkoML42d9oggZ75KP93+TtXfcOEs9xcAreE=
Subject key identifier: 02:BF:8B:DC:96:8D:D2:CD:F8:48:87:1C:01:91:C9:5B:F0:58:05:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 70FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729734AECCA611EEA94CC55F775412E6.roa
Signing time: Fri 16 Feb 2024 08:36:15 +0000
ROA not before: Fri 16 Feb 2024 08:36:12 +0000
ROA not after: Fri 26 Apr 2024 08:36:12 +0000
asID: 9009
IP address blocks: 156.225.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28927 (0x70ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 08:36:12 2024 GMT
Not After : Apr 26 08:36:12 2024 GMT
Subject: CN=65cf1e7f-ee1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:09:9f:fe:5a:6b:9d:74:4b:61:08:81:ac:
8b:3a:98:77:ca:fd:c3:28:bb:7c:70:71:c7:ee:29:
eb:55:e2:b4:41:ab:bf:f4:ef:33:b0:1d:76:b5:d1:
18:97:71:1c:6f:f0:ea:eb:8f:b2:5c:97:ae:5a:52:
54:6d:92:5f:6d:1d:3f:4b:10:42:e7:a1:58:cd:60:
14:ca:f8:b8:59:e3:67:cd:7e:aa:c3:e5:9d:6c:b4:
61:a0:f3:32:a6:28:91:f2:04:ad:ee:8a:ba:fa:d4:
a7:9d:71:b3:3d:10:69:39:73:86:86:6a:e3:77:bb:
72:47:5e:51:86:5b:7a:53:d2:49:ba:bd:0d:e9:78:
f2:b3:cf:f6:54:5e:2c:28:06:43:03:6d:57:f7:88:
2c:2e:1c:4e:5b:50:1d:ed:75:8a:1c:a7:5f:ae:15:
4f:12:74:4b:54:29:16:51:fa:67:40:48:ea:4c:49:
71:6c:17:1c:e6:8d:7a:5b:e3:1f:3b:93:f7:57:14:
e9:9e:b7:a8:6e:11:5c:8e:a3:cc:19:84:44:cc:bd:
38:6c:63:08:72:11:cf:ae:d2:b7:5e:80:95:93:7b:
9b:61:01:f7:24:d4:a6:34:c1:fc:68:92:5d:3c:bf:
89:a8:92:7f:7e:05:e3:69:32:32:ab:90:68:0f:9d:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:8B:DC:96:8D:D2:CD:F8:48:87:1C:01:91:C9:5B:F0:58:05:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729734AECCA611EEA94CC55F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.79.0/24
Signature Algorithm: sha256WithRSAEncryption
47:68:d2:76:02:03:c1:b7:1b:43:4d:19:e6:39:d2:fb:77:95:
fd:9b:ed:83:f0:94:f0:c3:1c:42:4d:00:45:29:45:fe:63:d5:
c9:8a:6b:9f:24:30:08:50:62:43:7d:d0:7e:b6:fc:c5:d6:5e:
f4:c1:1d:16:b4:ad:71:e6:da:40:f4:e4:3c:02:3d:08:cb:2e:
d6:e9:78:d7:e7:08:21:c5:6a:ac:9c:c1:6a:5d:06:ff:de:ca:
74:43:03:a5:8f:6d:86:79:11:3f:26:7b:45:ed:c7:52:4f:1a:
e3:d0:48:81:c7:58:7a:fe:a1:5f:ba:75:21:e3:1f:99:3d:43:
9f:bc:cb:ff:c1:06:4d:51:bc:ce:f4:39:9b:09:76:be:ef:98:
f6:98:80:f3:a9:0b:0f:54:d8:0b:dc:0a:6b:9c:75:50:0d:84:
09:86:48:9a:1c:d9:2f:83:4f:c5:a3:0e:35:d3:1e:73:21:44:
16:e2:e9:e9:41:dd:c2:0b:50:04:1f:1f:a9:10:ab:e3:5a:d7:
c6:65:70:f7:2b:e4:07:9a:55:01:d1:52:8e:e6:e3:26:eb:c9:
07:07:37:3d:79:58:c4:d8:6e:76:6f:7d:3e:09:87:f6:1e:e6:
82:b4:49:89:aa:4f:69:b9:39:b3:1c:5f:2e:68:89:cf:e2:c2:
e6:fa:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:58 2024 by rpki-client on console-ams.rpki-client.org