Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB7F190C038E11EFB7248364017001B1.roa
File: AB7F190C038E11EFB7248364017001B1.roa (raw, json)
Hash identifier: 3E5THBIUD6k79P7cowoXSnD8tuCM6TiWutsH/qNv7No=
Subject key identifier: 9E:22:FA:CC:97:EE:3C:45:2B:8D:55:65:9E:B5:16:61:EC:09:1A:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB7F190C038E11EFB7248364017001B1.roa
Signing time: Fri 26 Apr 2024 05:34:37 +0000
ROA not before: Fri 26 Apr 2024 05:34:33 +0000
ROA not after: Sun 05 May 2024 05:34:33 +0000
asID: 139646
IP address blocks: 156.242.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34294 (0x85f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:34:33 2024 GMT
Not After : May 5 05:34:33 2024 GMT
Subject: CN=662b3ced-a5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:09:64:4f:59:8c:7b:c4:0f:a3:17:6c:9e:
83:04:98:17:9b:28:d9:0b:e0:ba:2f:8e:b5:b6:d2:
b6:97:83:d1:5b:65:58:b8:e5:0e:56:c6:34:6d:6e:
db:f8:38:1e:8f:f7:85:f0:8c:91:4b:5d:db:c7:f1:
32:3b:7b:88:a7:88:f0:d2:8f:4a:63:fe:33:9d:01:
16:af:1a:7e:3b:77:02:d8:9b:45:a1:75:91:1e:70:
29:5c:00:24:4c:d8:3e:ec:d6:cd:41:fc:62:89:bd:
98:c9:34:68:c3:a6:65:ce:ac:1c:b5:20:f7:b7:51:
65:a8:a6:9b:52:64:39:7e:e7:f9:34:dd:bc:c5:7e:
43:2c:d2:73:d2:b6:7f:38:eb:66:cd:59:c3:02:b5:
37:ec:61:2b:15:ff:e0:2f:31:5d:e8:e6:83:2d:99:
be:a5:e2:be:b0:50:4a:95:73:a0:f0:f0:4d:4c:e8:
cf:ef:17:bf:82:9f:db:30:bc:cd:cc:c3:bf:5a:8b:
59:d8:98:7d:c2:8e:23:7a:da:df:9f:55:22:d5:e7:
b4:6d:78:96:a3:bf:61:d7:87:83:4c:0f:1e:81:a1:
89:15:23:2d:d8:06:b8:86:af:3f:07:c9:ad:8b:2a:
7d:85:5d:ad:46:44:95:58:95:a5:eb:06:69:f7:6b:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:FA:CC:97:EE:3C:45:2B:8D:55:65:9E:B5:16:61:EC:09:1A:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB7F190C038E11EFB7248364017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.14.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:cf:e8:c6:c5:67:61:11:b4:07:3d:64:44:59:fc:4c:97:c6:
c4:c2:ca:31:e7:32:a5:30:2e:54:d9:46:fe:f1:9c:c6:90:5d:
a7:29:c7:64:d4:8d:96:12:8f:cd:9b:ad:a7:ba:bc:9c:19:bf:
12:27:95:0b:86:6e:c4:c8:b1:d2:3e:5f:a0:34:74:f2:d6:6c:
9f:1b:df:af:d2:39:c8:52:a2:6e:19:8a:cd:44:7d:9b:cb:b5:
4c:8f:94:7a:91:d6:55:18:42:ee:b4:67:f6:18:a0:33:bb:a7:
10:ea:c9:b7:ad:94:c5:b2:c7:ac:0f:4c:5c:80:2c:d9:07:7c:
22:65:f7:fa:a8:a1:9a:45:09:c4:c6:32:6e:7a:f2:b1:fe:89:
69:d4:89:73:db:76:39:85:6d:c9:a0:0d:ef:80:56:fa:ab:0d:
c1:e1:a0:61:f9:b7:7d:96:4d:ec:13:2d:41:c9:23:68:eb:e7:
59:81:90:74:bd:2f:76:05:5a:ee:87:ae:b5:e3:53:cc:de:8a:
fe:f0:5f:d0:86:36:1c:6a:20:56:73:47:06:5c:38:be:ff:16:
bb:b1:ef:5a:f8:d0:be:c4:ed:35:53:eb:9e:6f:8e:5a:a9:cd:
01:ef:36:7f:d6:d7:52:a7:61:59:a9:2b:19:16:a6:f0:1f:1e:
2f:5b:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org