Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1A156E07AB11EF85EE6968017001B1.roa
File: 8C1A156E07AB11EF85EE6968017001B1.roa (raw, json)
Hash identifier: gd4H+/UxlHyRvSu+wsQNqp2i0M5v2GF5AMFwismpRLQ=
Subject key identifier: D4:35:33:40:9E:6A:28:24:D4:D0:F5:A6:80:90:53:69:8A:F9:B9:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8731
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1A156E07AB11EF85EE6968017001B1.roa
Signing time: Wed 01 May 2024 11:11:24 +0000
ROA not before: Wed 01 May 2024 11:11:21 +0000
ROA not after: Thu 16 May 2024 11:11:21 +0000
asID: 142062
IP address blocks: 156.245.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34609 (0x8731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:11:21 2024 GMT
Not After : May 16 11:11:21 2024 GMT
Subject: CN=6632235c-70b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:c0:4d:ca:9c:af:43:71:30:f7:cc:98:12:
9c:f0:3e:4a:98:9c:12:40:0f:eb:f7:ff:5a:64:72:
37:06:5d:13:81:d7:77:ef:fc:07:7c:f0:0f:a1:10:
c9:c4:e7:59:58:de:70:a7:26:e1:fe:cb:80:5f:dc:
56:74:4f:af:70:05:d4:a7:2a:61:9f:f3:21:4f:36:
c4:ec:85:86:b3:eb:ad:7f:6c:5a:42:00:19:7c:82:
5e:3a:15:ed:d4:9f:16:42:12:37:c7:5d:6c:c1:08:
9d:b8:56:ca:cc:2f:00:8e:a9:c0:1d:44:a7:55:6c:
2e:d4:e3:36:19:5d:67:1b:72:78:b9:15:8e:6b:f9:
79:7b:55:21:b2:29:b4:34:49:7f:99:43:e4:4e:57:
33:2c:9a:6e:04:9b:46:b9:ce:76:64:74:9a:8d:2c:
6a:8b:32:a4:0c:f2:16:ab:34:40:cf:1c:4f:d5:c0:
97:08:57:ae:da:35:7b:ab:27:0d:28:9d:d9:7e:cc:
82:43:70:9c:6a:b4:b4:cc:dd:d2:81:18:af:4f:75:
64:0b:a9:4e:4e:52:15:2c:97:73:fb:cd:40:22:92:
d4:6d:90:d5:d2:f4:b6:21:89:63:26:9f:9f:fa:1c:
75:87:06:f9:ef:ea:d6:57:c1:e1:5d:c5:f5:72:03:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:33:40:9E:6A:28:24:D4:D0:F5:A6:80:90:53:69:8A:F9:B9:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1A156E07AB11EF85EE6968017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:ec:b3:cf:e7:4c:e2:30:50:dc:28:3d:9f:48:aa:83:fc:04:
c3:ee:fd:88:60:34:ea:d8:79:f1:48:4a:d0:21:12:05:38:d6:
29:06:7e:dc:97:15:5d:54:b6:72:39:28:51:f1:fc:70:97:f9:
cc:b2:a2:56:f2:e2:f0:5d:3b:38:39:98:05:3b:93:4a:98:cf:
81:0b:11:01:b1:fd:f0:53:79:17:18:8c:9d:ac:8a:8f:8a:b2:
02:68:b0:49:23:3e:bc:41:cc:40:a9:55:5c:b5:24:07:c2:41:
ce:a1:72:fc:41:f2:b8:bb:ac:57:8c:97:b3:ae:1b:22:17:26:
d9:59:10:79:fb:62:94:d8:d9:4c:d6:03:c5:61:36:7f:ad:97:
0b:db:94:c0:4d:51:67:4c:0e:c4:38:7c:0a:9d:72:5e:43:88:
51:a9:e1:95:01:e1:56:99:ca:7d:9a:1e:8e:58:92:bf:a3:62:
e0:19:94:2a:ff:1c:ad:68:dc:71:17:15:2a:e3:e2:e4:8e:41:
44:f4:42:70:8c:30:d7:a6:62:17:5f:63:db:d4:97:98:c0:82:
fb:76:81:96:27:19:61:39:d2:ef:ea:97:d9:d4:7e:2a:97:d0:
8c:b9:01:06:85:50:79:61:14:8a:a4:59:95:33:e6:c2:bc:b4:
ab:5e:8d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:22:08 2024 by rpki-client on console-ams.rpki-client.org