Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EDB4F8408FF11EF8D18E741017001B1.roa
File: 8EDB4F8408FF11EF8D18E741017001B1.roa (raw, json)
Hash identifier: SdIH7tCBYzcA0q/OoWlD1dPS/fKmpxfJ4BwIpKHuqY0=
Subject key identifier: 55:EB:52:2D:DB:DC:DE:D8:0F:4C:88:79:EA:D3:26:EF:DA:E4:21:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8783
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EDB4F8408FF11EF8D18E741017001B1.roa
Signing time: Fri 03 May 2024 03:45:18 +0000
ROA not before: Fri 03 May 2024 03:45:14 +0000
ROA not after: Sat 11 May 2024 03:45:14 +0000
asID: 39600
IP address blocks: 156.252.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34691 (0x8783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:45:14 2024 GMT
Not After : May 11 03:45:14 2024 GMT
Subject: CN=66345dce-81b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:cf:dc:9d:d1:f7:0b:5d:6f:bd:d4:53:ba:
70:63:ea:17:cf:e9:c8:4b:c7:60:11:66:bc:2f:01:
56:ca:a5:ed:ea:b7:97:3c:6f:b5:54:61:7f:54:43:
4e:b0:9d:f5:60:29:99:69:a8:6b:9c:4a:6c:85:df:
12:86:9f:b1:a3:29:3a:d2:6b:02:6c:3f:3e:77:51:
90:00:fe:19:fc:a4:91:6a:fb:45:f0:61:22:85:ea:
30:be:df:51:9e:ee:a8:a6:ff:3a:69:16:a6:16:9d:
2e:53:30:0f:2a:e2:55:04:fa:74:62:60:cd:bd:95:
d8:71:57:63:95:bb:9f:4d:77:5a:8d:6c:f5:fc:a9:
92:fb:a3:53:8f:9b:3b:46:c7:11:82:e0:e5:96:cd:
5e:96:a9:b3:41:75:61:51:a3:11:ea:7a:88:cf:14:
1a:f0:4c:d5:c4:a6:56:eb:c1:b7:06:18:38:58:f2:
82:2f:fc:19:77:f9:00:de:4f:a5:03:97:37:84:27:
19:0d:23:75:f3:d3:61:ec:1e:c4:18:be:62:aa:10:
01:8a:12:02:34:2d:0f:f1:6a:31:bb:e8:ee:9e:5e:
13:8a:8d:51:b3:70:6a:1a:f1:ba:8a:92:84:15:de:
04:a1:c8:6a:cf:4c:09:e7:38:f8:b3:a6:a3:2e:60:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EB:52:2D:DB:DC:DE:D8:0F:4C:88:79:EA:D3:26:EF:DA:E4:21:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EDB4F8408FF11EF8D18E741017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c0:7b:75:69:ac:a1:20:b1:52:cf:40:06:c3:2f:07:6d:7d:
79:0a:69:cb:21:33:35:a0:b3:ed:c3:19:0d:6f:d0:f5:77:af:
34:35:be:29:21:43:ef:c7:6f:53:6a:55:03:9a:d5:0d:7c:3a:
c9:15:8b:7f:26:a0:88:69:67:c8:57:ee:f4:9e:7c:29:f2:f5:
a2:02:18:7f:19:3f:0c:f2:76:f2:2e:19:5d:66:bf:3f:6a:37:
df:c1:39:77:f5:ea:96:5d:44:0d:83:ba:5a:45:aa:f0:34:79:
62:85:3b:6f:67:fd:cb:d9:e9:27:cd:33:e2:b3:99:a8:7c:06:
18:8d:63:79:aa:4c:d6:26:12:b5:17:23:b4:a4:fc:1e:c6:34:
bd:d9:49:23:c7:a0:8e:59:df:a1:1d:03:fd:72:c4:52:29:9c:
93:8f:75:b8:c5:bb:81:51:55:d2:1f:57:9d:cb:79:65:16:60:
eb:b2:f8:c6:d4:7c:7c:43:58:1f:9b:c5:26:10:ed:d5:9d:1b:
97:83:d6:0f:39:3d:d9:84:6d:1a:06:77:5f:e3:e3:b8:81:29:
1c:d9:df:bc:3c:27:f8:de:9c:1a:69:58:83:92:a8:d5:08:e8:
11:42:bc:76:62:e1:9f:6e:f0:0a:f7:50:93:08:7d:e8:d4:d0:
ac:fc:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org