Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3FF8C9407AB11EF82F8C868017001B1.roa
File: B3FF8C9407AB11EF82F8C868017001B1.roa (raw, json)
Hash identifier: ZKY1HnNitYoy+uEpP4SGPTyUK0DsCO1F+2N1WRGOEfw=
Subject key identifier: 12:CC:F0:50:50:97:F0:42:59:EA:B2:1E:6D:7E:CD:B0:4F:FA:DD:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8733
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3FF8C9407AB11EF82F8C868017001B1.roa
Signing time: Wed 01 May 2024 11:12:31 +0000
ROA not before: Wed 01 May 2024 11:12:28 +0000
ROA not after: Thu 16 May 2024 11:12:28 +0000
asID: 151979
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34611 (0x8733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:12:28 2024 GMT
Not After : May 16 11:12:28 2024 GMT
Subject: CN=6632239f-8a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:49:06:a5:55:67:6d:b5:26:3b:53:52:7b:
a0:f6:3f:b2:99:31:f3:fa:b8:a2:b5:7f:b3:2d:e0:
1a:67:d3:8f:cd:47:e1:15:ff:0a:c8:ef:b2:2c:1b:
fa:81:83:60:d1:54:88:fb:50:76:a5:08:96:28:94:
d6:36:3b:dd:ed:a1:a6:6e:53:c3:74:34:b0:5c:eb:
13:dd:a3:c3:f0:0d:62:ed:61:95:28:c2:72:60:06:
ac:c1:7a:b6:9e:4b:a5:cb:d4:eb:e3:c0:96:55:f8:
33:35:95:94:0e:7f:65:f0:cf:07:d6:ef:17:56:63:
17:d2:be:54:11:be:f3:93:45:7b:58:1e:64:32:c8:
df:99:c1:04:03:bd:88:19:e7:0a:2e:4b:f9:f0:2e:
9e:ba:7a:3c:f6:bd:b0:09:f1:cf:0e:1e:32:ae:86:
30:68:4b:53:73:ef:15:86:44:67:f3:92:1b:cf:3d:
50:70:13:cb:7a:90:e9:fb:d9:c8:10:bc:ae:ae:54:
63:23:10:db:f0:19:76:d2:26:18:68:c3:46:85:19:
2f:ca:89:2f:3b:70:a6:95:f7:15:9b:85:d2:8e:ea:
97:30:a5:d5:92:5b:a2:2e:6b:68:ee:ed:38:65:0c:
36:a4:60:a1:ed:3a:f5:50:f6:51:29:53:ff:b9:d5:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CC:F0:50:50:97:F0:42:59:EA:B2:1E:6D:7E:CD:B0:4F:FA:DD:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3FF8C9407AB11EF82F8C868017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:0b:7b:c0:51:90:97:3f:b4:d8:48:03:87:d0:59:d8:73:46:
e3:da:f8:3a:1b:df:75:ea:49:fd:5d:3a:3f:e6:57:f5:35:a3:
2b:3f:f4:ed:36:c3:db:1d:04:d5:ed:11:9c:34:4e:11:bd:cb:
01:50:ef:24:25:15:71:57:c5:1c:40:3e:30:f6:a8:ab:cc:45:
8a:bf:40:b8:63:46:93:cf:b4:9d:13:50:6d:ea:37:23:04:5f:
66:fd:28:7b:77:e3:84:57:84:94:90:45:b0:e6:77:d5:69:87:
ca:12:6e:0b:1f:1d:55:d8:38:ed:27:6c:20:87:9b:bd:f8:82:
24:87:f5:6d:92:7d:fd:f7:b3:61:fd:1e:67:57:a0:26:d1:be:
e7:d9:6c:3d:d1:9a:0b:fe:af:93:a3:4f:d2:ef:27:6e:90:59:
1a:39:01:54:4d:00:c6:57:d8:2d:db:15:0b:de:9a:93:dd:9d:
a9:e5:a7:23:21:6f:ee:5e:f2:98:78:3f:57:6b:0d:98:d1:ca:
c6:1e:27:3e:bd:a9:d1:d0:7e:7d:73:d5:54:79:39:07:96:3d:
b3:0c:0d:95:2c:da:81:1d:6e:1c:ce:25:29:28:67:df:50:ad:
f5:d7:ba:48:16:dd:d3:be:c1:29:b7:3f:ed:75:e8:b4:bd:35:
cc:27:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:22:09 2024 by rpki-client on console-ams.rpki-client.org