Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9562A38E27C711EFA8772E4E7DDC24C2.roa
File: 9562A38E27C711EFA8772E4E7DDC24C2.roa (raw, json)
Hash identifier: JFC7FBFhT6gzy9BEGlDFMbijyvmScj1LZ40fzYwZ6QI=
Subject key identifier: 3F:21:08:12:19:6A:2B:41:5C:F6:60:FE:50:53:49:58:77:02:BF:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9086
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9562A38E27C711EFA8772E4E7DDC24C2.roa
Signing time: Tue 11 Jun 2024 07:52:43 +0000
ROA not before: Tue 11 Jun 2024 07:52:40 +0000
ROA not after: Fri 21 Jun 2024 07:52:40 +0000
asID: 138995
IP address blocks: 156.227.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36998 (0x9086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 07:52:40 2024 GMT
Not After : Jun 21 07:52:40 2024 GMT
Subject: CN=6668024b-7710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:e5:12:7b:40:03:f7:24:7c:af:0f:46:4d:
1b:22:0d:f6:76:af:40:ec:f8:47:de:bf:de:40:76:
93:b9:3d:d8:45:53:6e:86:27:cf:50:53:06:99:5f:
01:1b:36:a8:1f:e2:15:e4:d4:07:09:9c:9c:9e:eb:
06:c2:0e:8e:2c:02:77:fd:9e:74:aa:58:7c:49:ff:
11:99:43:7f:66:5a:11:6a:08:99:60:b8:7f:6b:b2:
02:25:46:d9:97:d0:92:17:91:5a:76:13:a5:cb:fc:
bd:8d:4e:b3:76:f0:92:e1:2f:06:a6:80:a4:f8:b5:
5e:0b:44:21:ba:78:1a:b6:86:db:19:43:b3:f5:0e:
f2:98:2a:65:ca:41:21:0c:ce:94:ac:e3:45:7a:ff:
e6:82:c6:58:da:80:7b:da:37:c8:63:b7:bc:35:a4:
c1:32:d7:4d:9d:0f:51:1d:b5:52:50:f3:68:d9:5e:
f8:83:dc:44:c9:2a:63:38:2c:02:e6:65:cf:30:4d:
00:0f:aa:f0:0b:af:0f:8b:64:c5:89:89:24:d3:14:
31:6b:78:12:8a:e7:2c:50:bc:10:45:1b:16:28:ef:
fd:dd:7b:de:ea:95:8e:5f:85:34:95:dd:10:7c:cb:
b1:5c:e6:e3:75:41:7f:9f:27:20:1b:8c:aa:bf:6f:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:08:12:19:6A:2B:41:5C:F6:60:FE:50:53:49:58:77:02:BF:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9562A38E27C711EFA8772E4E7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.28.0/24
Signature Algorithm: sha256WithRSAEncryption
10:47:95:d4:45:3b:e8:1c:1d:0a:f5:76:fa:3b:4d:33:0c:41:
1d:1a:c9:cc:9c:7a:03:6f:c6:50:65:03:5b:07:16:7f:07:23:
5c:b0:40:76:86:bb:e2:39:ab:2d:20:77:3d:33:d5:ff:e9:ba:
00:45:3c:d0:9b:8b:5e:8f:96:49:7c:d0:f6:58:e6:ce:a8:54:
1e:7b:3a:5e:d0:44:55:e3:b9:e3:d1:23:ab:e8:6a:fa:9d:51:
6e:f0:fe:39:ac:78:b5:9a:e3:c1:b2:2c:35:04:9c:ab:c2:a7:
80:b1:54:f3:a9:b2:88:1f:79:0f:4c:c1:0e:ce:78:79:d9:08:
cb:50:70:5a:ac:40:70:31:b1:92:71:c9:ac:7d:bd:42:bf:c2:
77:d2:5f:15:0f:cb:10:ed:f9:e1:f0:97:ec:44:22:b4:73:db:
32:d3:16:42:55:d3:db:5f:2f:96:fc:68:fe:6a:b2:d7:4e:48:
13:f2:0f:5d:9b:31:a4:f8:1c:ab:91:49:de:bc:9b:11:6d:8b:
6a:48:4d:ca:99:79:38:52:e3:b8:44:d4:2b:c8:73:de:9f:92:
e6:3a:3c:1e:7c:fd:6c:64:32:54:c7:e4:0b:4c:6f:77:70:9f:
42:4c:ee:7a:95:aa:aa:21:3b:fd:92:f0:4f:d2:62:ad:4b:a9:
3c:15:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:46:02 2024 by rpki-client on console-fra.rpki-client.org