Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3F78D5A27C711EFA1CE8C4E7DDC24C2.roa
File: B3F78D5A27C711EFA1CE8C4E7DDC24C2.roa (raw, json)
Hash identifier: Gf7qvfcgz4hqH66osPFwmBLUrIVgWqx8D9YPUJmf69Y=
Subject key identifier: E1:73:EB:0F:BD:0A:26:BE:4B:E1:D4:25:96:AB:21:71:0E:F2:A3:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9088
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3F78D5A27C711EFA1CE8C4E7DDC24C2.roa
Signing time: Tue 11 Jun 2024 07:53:34 +0000
ROA not before: Tue 11 Jun 2024 07:53:31 +0000
ROA not after: Fri 21 Jun 2024 07:53:31 +0000
asID: 138995
IP address blocks: 156.227.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37000 (0x9088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 07:53:31 2024 GMT
Not After : Jun 21 07:53:31 2024 GMT
Subject: CN=6668027e-40d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:bc:71:53:51:6e:b0:00:46:b9:7a:1c:06:
92:2c:cd:84:16:df:a6:5d:34:82:92:88:3d:7a:37:
a5:39:2d:e9:26:38:b5:fa:0e:61:27:4e:c0:21:25:
7e:89:55:c0:e2:58:49:1c:06:1b:8e:15:eb:84:fc:
8d:77:be:1d:35:67:9b:16:f0:3b:7b:0f:d9:23:77:
71:ec:e5:13:8c:bd:b6:a4:e5:59:0a:b7:a0:4b:3d:
1f:d9:7c:a6:e8:76:2e:31:72:3e:78:d0:9d:32:fc:
93:b6:a6:7e:bd:28:c7:4a:1f:fc:e3:82:ec:c2:f7:
21:d0:ec:1e:f4:90:8a:a8:fb:d5:16:d6:a5:b2:0d:
0f:6e:60:06:1f:37:f9:d5:31:21:6e:6a:31:45:d1:
33:01:37:3f:c7:d1:e0:be:68:10:e6:a7:79:8a:e8:
13:be:f5:58:79:a9:a0:8a:ad:1b:91:c0:cb:be:c4:
b2:45:47:ed:96:5c:c5:5a:4e:6f:53:c7:48:34:1e:
1e:e5:e3:ab:01:c0:49:12:81:cb:a9:fb:1a:b3:c7:
e0:63:99:5d:84:cb:d8:52:14:8f:5c:53:91:09:a0:
8c:ee:3d:33:36:a8:b9:2d:21:51:80:a4:ff:0f:c5:
2a:d8:f3:9e:8f:4e:a1:56:7d:53:a6:4e:80:1f:ab:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:EB:0F:BD:0A:26:BE:4B:E1:D4:25:96:AB:21:71:0E:F2:A3:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3F78D5A27C711EFA1CE8C4E7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:43:54:dd:82:e3:c2:8c:a4:61:c2:63:da:66:71:61:2a:c7:
6b:f5:c3:73:6b:bc:fc:ee:52:7d:7a:30:3d:d7:84:34:93:3c:
89:33:ea:ca:ff:09:e7:fd:29:b4:71:d7:29:0d:db:74:e4:9c:
a6:a1:87:cd:a3:13:7f:42:7d:70:0f:18:84:74:cc:54:38:2b:
19:94:0d:1b:c1:57:75:12:7b:99:45:0a:69:d9:eb:33:d9:e3:
4e:0d:af:f4:d4:b7:04:75:8b:be:5a:9c:2c:11:21:67:ec:05:
6d:04:1e:9b:f1:32:b8:e8:b8:4e:a9:51:e7:38:c2:a2:3a:ee:
16:4a:bc:64:2f:1c:3a:aa:c6:5d:2f:30:29:5e:50:d8:e8:5e:
fe:cd:55:e2:9c:d7:de:e2:fa:5a:7d:9b:3c:88:65:79:32:65:
df:1d:ce:ad:76:d6:86:47:94:42:76:10:04:f1:7e:e6:85:6a:
1d:2c:6a:43:f1:e7:11:c3:45:2a:1d:10:3b:07:4e:27:b1:34:
17:bc:56:6a:21:a7:b2:ed:ec:cf:b9:f9:c8:4a:a9:e0:1a:29:
89:16:a8:7c:a0:46:bf:20:46:9f:b0:4d:78:f8:1a:5f:d0:7e:
ac:63:e6:a2:82:67:5b:67:90:1b:c3:5c:13:9f:ad:7c:34:1c:
bc:9c:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:57:32 2024 by rpki-client on console-ams.rpki-client.org