Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/912EE86CCCBA11EEB488877F775412E6.roa
File: 912EE86CCCBA11EEB488877F775412E6.roa (raw, json)
Hash identifier: gf5tQ9zWxywjTBVOhEpTYzOVbLl4AsRXG1zEDX9gboM=
Subject key identifier: DC:BE:86:98:25:9E:7C:61:BE:81:81:0C:77:3A:35:E6:35:D6:CC:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7117
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/912EE86CCCBA11EEB488877F775412E6.roa
Signing time: Fri 16 Feb 2024 11:00:17 +0000
ROA not before: Fri 16 Feb 2024 11:00:13 +0000
ROA not after: Fri 26 Apr 2024 11:00:13 +0000
asID: 9009
IP address blocks: 156.246.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28951 (0x7117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 11:00:13 2024 GMT
Not After : Apr 26 11:00:13 2024 GMT
Subject: CN=65cf4041-2537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:71:41:49:c2:d7:31:af:c6:3b:29:ba:30:
00:ef:5f:ee:ba:ee:f5:cb:e4:6b:e3:aa:d5:82:9f:
54:b0:59:ba:73:e3:f9:d8:17:f1:7a:d6:d7:be:cd:
11:d2:ea:22:dc:b8:4c:2e:06:d9:3b:d7:91:71:11:
02:b1:c4:93:67:43:36:2d:fc:ac:4e:06:45:27:94:
91:06:22:0b:bf:1d:ca:f4:87:42:eb:c4:92:a9:ac:
d4:b7:18:09:6b:15:f9:51:5d:6a:3d:3d:c4:6b:4c:
dc:d1:34:a8:a7:82:01:73:d4:fc:b3:8a:e6:78:2c:
aa:18:16:f4:b0:f8:cf:7f:73:f6:a2:7d:1c:be:4c:
41:49:ea:98:bb:23:3d:7d:c6:4e:ce:81:6c:13:0f:
d6:0e:37:7a:5c:b7:8e:ca:12:ff:72:49:9b:9d:52:
31:af:49:8f:f6:d1:98:fe:e3:7a:d0:1c:93:a1:55:
1c:90:9d:e6:e8:51:9d:ca:0a:b3:4b:ef:36:51:ce:
2f:05:a6:1a:1f:1d:5b:2b:0b:e4:82:0e:ee:90:a3:
72:47:ef:24:e6:23:db:6d:e4:46:e6:e2:b5:7c:89:
53:4c:1e:ce:85:60:33:66:e5:de:d6:5a:58:5b:a6:
3c:20:cb:1c:c3:40:26:64:1e:35:21:07:0e:f7:35:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:86:98:25:9E:7C:61:BE:81:81:0C:77:3A:35:E6:35:D6:CC:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/912EE86CCCBA11EEB488877F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.43.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ef:07:4e:8f:3c:65:77:63:0d:34:e0:3a:05:98:98:4d:e0:
f3:51:5d:79:ed:55:15:80:98:c8:70:68:63:04:e2:80:32:19:
64:e2:b2:9f:46:c8:2a:4a:da:c2:9b:3f:c2:b7:f2:98:cf:c5:
60:f8:cc:15:99:fb:98:fd:df:5c:6b:7d:70:29:9c:ca:43:54:
21:1c:a7:8a:5b:78:84:5b:fd:12:a9:26:f0:3f:d0:11:44:05:
e0:70:5b:eb:6d:b4:ce:61:73:c4:14:df:50:e9:4e:d0:bc:88:
10:bc:99:e9:20:04:73:e6:07:47:c5:4b:9b:ab:2c:0d:bd:c7:
19:71:f9:82:27:72:91:c7:88:13:63:50:46:8c:cf:57:1b:0e:
05:cd:67:cd:f5:67:7b:53:ed:6d:d8:5d:f1:a1:a4:47:e6:ad:
e8:93:36:53:6a:81:1b:54:e9:76:22:a3:46:ea:e9:0b:80:4e:
cd:32:ba:f8:eb:68:e4:6a:07:f2:9e:d6:2c:cc:62:2d:8b:3b:
30:aa:9e:3e:57:1f:9a:10:70:59:b6:27:d9:d1:f5:47:ee:82:
a4:64:90:67:d7:6e:40:f7:e3:17:47:47:a1:9e:83:7c:c7:cc:
fa:07:2f:5f:a0:43:9a:c1:d3:b4:7f:42:c5:10:bd:a0:01:57:
81:01:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:00 2024 by rpki-client on console-ams.rpki-client.org