Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DADCDCE039211EFA38A5E07017001B1.roa
File: 9DADCDCE039211EFA38A5E07017001B1.roa (raw, json)
Hash identifier: yCyJSlUBLnz4GteQzcdIf4CzyZzRFna0mlWQf4e3M3U=
Subject key identifier: 69:94:A2:93:7E:EE:DD:77:2D:CB:89:55:FC:E0:71:0C:B2:34:08:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 862B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DADCDCE039211EFA38A5E07017001B1.roa
Signing time: Fri 26 Apr 2024 06:02:52 +0000
ROA not before: Fri 26 Apr 2024 06:02:48 +0000
ROA not after: Sun 05 May 2024 06:02:48 +0000
asID: 139646
IP address blocks: 156.240.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34347 (0x862b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:02:48 2024 GMT
Not After : May 5 06:02:48 2024 GMT
Subject: CN=662b438c-2996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:44:51:76:70:e4:00:fd:a1:b3:de:ea:3f:
ec:d2:bd:32:17:08:bd:a6:bf:a2:d5:d0:a6:7b:4d:
8a:a2:0f:95:78:7a:4e:d6:75:6a:20:20:9f:ae:87:
c8:97:0c:0d:b4:31:41:af:a2:e0:a4:6a:aa:66:b0:
11:cd:29:f9:af:28:77:90:da:ca:da:f5:41:38:a2:
d0:43:c7:fe:ea:1f:8e:3e:ef:3f:09:0e:a2:5e:bb:
75:89:56:ff:b3:9b:09:33:34:4e:61:b8:af:97:9c:
0b:bf:0f:33:8a:f9:61:cf:0f:ca:2b:b9:f7:da:ff:
22:ac:9b:31:cc:2d:94:be:dc:c9:e4:22:94:b9:18:
36:9d:4d:a1:a9:14:e7:d2:e6:b2:97:8e:8f:09:49:
8f:49:79:d5:d9:90:a6:cb:67:25:20:b7:cc:80:6b:
67:e7:c8:e6:62:1d:2c:00:c5:84:15:f8:d8:77:fb:
87:de:2b:b0:2c:0a:72:8c:fe:26:95:36:e2:89:74:
19:f8:a7:47:f2:7e:f3:d0:39:cf:63:32:94:36:52:
6b:18:d6:90:57:ab:11:26:e5:fe:d7:c6:36:4e:0d:
53:d4:d0:a3:3c:f5:84:ca:dc:db:c2:2a:82:75:42:
d3:da:07:8c:2f:59:88:ca:e2:ae:34:ad:e2:38:a6:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:A2:93:7E:EE:DD:77:2D:CB:89:55:FC:E0:71:0C:B2:34:08:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DADCDCE039211EFA38A5E07017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:8d:bb:db:d7:53:51:d1:a0:87:e1:02:7d:10:22:45:fa:2b:
29:e5:58:d1:96:ac:af:23:44:b2:75:93:fa:19:04:72:0c:5f:
24:07:36:11:45:da:05:da:a3:cb:bb:1b:84:88:26:30:19:09:
84:ac:0a:bd:33:7d:e0:b4:15:64:ab:c8:61:44:d8:21:83:3b:
c0:1a:79:5d:40:cd:03:61:54:af:c1:4b:5b:37:b4:ae:04:0c:
89:b9:76:82:e8:0b:1d:cb:aa:3b:07:fb:85:5d:93:4b:d1:86:
73:b0:e9:18:5b:c9:53:76:54:37:ee:c6:f1:e4:78:c4:bc:09:
ca:ca:f9:3b:36:fb:51:a6:8a:18:32:85:d0:42:e8:c2:a7:10:
7f:d0:96:72:95:d8:1a:bb:b2:3b:95:f5:a6:4b:ae:b7:bc:ad:
a4:e7:cd:09:57:93:e6:de:dc:16:16:bf:7a:ef:0e:d9:7c:90:
b2:36:f0:00:10:a2:0d:e3:9d:50:77:98:96:5c:1b:5b:d0:67:
aa:78:4f:4b:55:37:e6:33:df:21:d3:b6:2e:05:55:b7:20:65:
72:a9:2e:f3:81:20:ba:55:be:e3:e7:d4:78:a5:ad:fb:02:d2:
fb:56:82:c6:1d:ce:dd:f4:59:9e:21:d5:5d:ad:f1:ee:f5:72:
1a:fa:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org