Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F57DF206DC11EF85F26C55017001B1.roa
File: 98F57DF206DC11EF85F26C55017001B1.roa (raw, json)
Hash identifier: 3A/RKbB9TIaCaaXQfPVzdkEtc+TcQrEFKDQ5Numr1zM=
Subject key identifier: 1F:67:02:F2:12:8A:74:8E:49:F1:BC:29:02:B2:CD:FC:5A:5C:6E:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F57DF206DC11EF85F26C55017001B1.roa
Signing time: Tue 30 Apr 2024 10:30:00 +0000
ROA not before: Tue 30 Apr 2024 10:29:57 +0000
ROA not after: Tue 07 May 2024 10:29:57 +0000
asID: 151979
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34543 (0x86ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 10:29:57 2024 GMT
Not After : May 7 10:29:57 2024 GMT
Subject: CN=6630c828-b34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:43:fd:17:e6:97:15:84:b9:c4:5e:d9:ce:
87:4b:20:62:a8:41:10:30:11:d3:58:36:8e:82:26:
ff:a7:c5:f0:3e:1f:d2:86:4d:08:f8:b7:7f:0f:9b:
15:f4:d0:a6:e9:4f:b1:ff:0f:ac:66:cd:a0:8f:44:
13:61:08:c8:af:a8:49:44:1d:78:08:3d:9f:63:1f:
0f:2c:00:25:dd:51:b6:d3:d4:96:af:0a:a2:ed:7a:
2b:d7:37:81:db:9c:58:a2:ca:fd:ef:c0:11:43:6f:
41:09:bf:6a:04:fd:3a:0b:89:ae:92:cb:5a:e5:3e:
4a:c4:21:c7:d5:36:8e:c7:8d:37:e3:53:f2:43:80:
15:dc:0f:9a:df:44:e4:f2:0c:b9:cc:2e:7e:6b:73:
92:fe:dc:97:a6:5d:f5:6d:01:ab:cc:ec:5d:eb:c0:
6c:97:a8:03:4c:03:36:f6:61:ff:6a:fb:7e:e6:e8:
41:6b:1c:c9:bc:de:0c:d4:01:f2:04:0c:24:3c:06:
d7:7f:89:88:3f:a8:59:53:6f:a1:eb:a4:16:db:89:
aa:de:71:b3:77:70:1b:3e:ea:30:c7:29:1b:67:89:
c4:31:8a:69:d5:4e:09:4b:c8:40:b2:69:88:2f:e9:
f4:df:9c:56:ef:73:7d:47:70:18:ee:8f:00:99:5c:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:02:F2:12:8A:74:8E:49:F1:BC:29:02:B2:CD:FC:5A:5C:6E:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F57DF206DC11EF85F26C55017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
54:cc:95:ef:cf:34:06:17:c9:c9:21:7b:1f:40:88:ee:27:fb:
7b:dd:0c:35:63:20:43:98:6f:93:be:c5:58:1a:3c:2a:75:2d:
c4:f3:36:ae:76:7e:ec:82:04:ab:6e:7b:22:db:66:1e:c6:95:
0e:90:de:37:45:88:44:4b:3d:a9:3f:fa:69:df:2d:97:85:4f:
1b:86:a3:c4:33:aa:3a:9d:df:40:34:f8:4b:4e:f3:74:3a:56:
72:ea:a7:39:13:1b:7f:2e:49:9d:70:13:01:32:91:92:67:fa:
48:a0:d1:96:bb:b9:a6:a0:1f:93:9c:5a:12:48:1b:b7:0a:ed:
c1:c5:73:b0:2e:17:07:93:41:41:8c:22:38:17:e6:12:40:48:
1f:27:14:f3:3a:9d:27:5a:ee:0f:0a:da:4e:7f:65:1f:ff:01:
dd:bb:c5:1d:00:36:fd:b9:d5:3f:fa:38:bb:47:52:1d:35:f1:
bf:9f:53:50:7d:36:9e:68:42:cf:6f:5c:36:09:52:4e:77:54:
85:08:15:d6:4c:2e:bd:bc:19:28:56:2f:01:fc:2f:86:3f:73:
c8:45:85:5a:21:a3:49:c9:1f:82:f5:6e:2c:36:e0:90:f4:28:
64:99:4f:b0:71:a6:0d:88:a6:ff:a6:08:e6:46:90:08:58:f7:
a3:2f:57:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:43:29 2024 by rpki-client on console-ams.rpki-client.org