Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B607E04ECCBA11EE8609CB7F775412E6.roa
File: B607E04ECCBA11EE8609CB7F775412E6.roa (raw, json)
Hash identifier: KIhjAPs4yzAbgrw8O/Na1ze/9mBF00SiFXOUTnqiceM=
Subject key identifier: 03:0E:98:FA:2D:2D:75:37:F5:24:B4:16:E8:BB:32:F5:A2:F8:82:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7119
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B607E04ECCBA11EE8609CB7F775412E6.roa
Signing time: Fri 16 Feb 2024 11:01:19 +0000
ROA not before: Fri 16 Feb 2024 11:01:15 +0000
ROA not after: Fri 26 Apr 2024 11:01:15 +0000
asID: 9009
IP address blocks: 156.246.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28953 (0x7119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 11:01:15 2024 GMT
Not After : Apr 26 11:01:15 2024 GMT
Subject: CN=65cf407e-611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:1a:2d:58:cc:d2:cf:4c:44:81:b7:e7:61:
9f:fb:d8:d9:a2:6f:3c:64:66:7f:ec:5c:fb:2a:a2:
c7:ae:1d:d6:de:b3:22:2a:b4:80:a4:1c:6b:e1:9c:
3a:2f:6e:ef:9a:21:ec:b9:54:db:da:3f:46:79:d3:
18:33:b9:aa:98:75:9b:af:42:30:78:0e:7d:8a:2b:
87:58:8e:15:b7:9a:3d:54:b2:30:4e:65:3b:40:33:
d8:29:87:8d:b9:b9:d7:bc:22:86:cb:59:c5:60:ae:
60:93:81:93:aa:6e:01:22:6b:39:c3:05:b1:6a:b4:
cf:f6:5f:dc:7e:36:2a:95:8e:33:11:aa:76:00:3a:
57:7b:a8:79:6f:9f:58:4c:f4:05:93:37:e6:a0:a1:
20:96:ac:82:df:56:06:7a:68:80:c9:f9:aa:05:ee:
bc:be:3e:dd:c1:55:ce:24:c2:85:db:b6:5f:70:bd:
3c:0a:38:54:e6:95:25:b0:9a:4e:da:e3:94:6e:a5:
05:00:73:37:fb:a1:c6:01:6a:4f:cc:27:4b:05:be:
bc:74:ee:e0:75:7c:80:4f:4a:38:4b:6b:89:af:ef:
59:3b:6e:86:c7:7f:32:5f:99:c1:71:7d:a0:6a:2f:
d5:0f:5b:dc:c2:cf:96:7c:68:2b:41:5e:a9:64:45:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:98:FA:2D:2D:75:37:F5:24:B4:16:E8:BB:32:F5:A2:F8:82:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B607E04ECCBA11EE8609CB7F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.44.0/24
Signature Algorithm: sha256WithRSAEncryption
97:df:57:45:f6:89:07:35:42:9c:f2:4f:d0:fc:b7:f4:46:b5:
a6:e6:e4:7d:dc:49:db:41:6b:30:f5:98:18:dc:56:04:3e:1c:
aa:72:72:c6:07:92:03:eb:a6:b4:90:5c:82:ae:0b:ab:02:5c:
31:18:0f:39:16:22:92:5c:8c:be:2d:fa:f3:fa:c4:54:37:46:
e1:bb:24:55:9e:8f:ad:cc:db:29:51:fe:3c:9e:1d:f3:b6:e7:
9c:8e:a7:ad:d0:22:ac:34:36:2e:7b:93:a5:43:3f:52:a0:92:
86:30:6c:a3:36:b3:8f:f7:92:db:c0:7f:d8:13:ab:86:91:8b:
69:45:24:3b:fd:2a:4c:fd:4f:34:65:bb:f8:0f:45:e3:0b:5f:
55:df:d1:b4:74:c9:2c:58:67:68:e7:1b:73:c6:a4:29:82:14:
44:93:c7:54:bd:c2:3e:c9:c2:da:86:09:c1:99:83:52:33:49:
91:bd:05:7e:5f:ba:c7:4f:76:8e:16:4d:6c:bb:e7:a2:8c:c8:
50:9a:b4:18:fb:61:ff:db:03:cc:15:cc:6c:a9:42:47:d9:b8:
99:8e:62:77:44:f1:4e:6c:98:be:7b:0d:a6:bc:5f:35:0e:78:
bc:cc:09:66:0e:6a:1e:8c:ae:c4:f1:e6:3d:ec:17:9a:49:d1:
2d:a6:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:03 2024 by rpki-client on console-ams.rpki-client.org