Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2A596F8089111EFAC49423B017001B1.roa
File: C2A596F8089111EFAC49423B017001B1.roa (raw, json)
Hash identifier: oHQklPjZQrPawem9v+11TUnN3RnhX+hMsbBtm32wCwk=
Subject key identifier: 18:73:88:AD:83:A8:5E:17:10:23:35:A1:69:D0:AC:4A:8D:98:4A:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8766
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2A596F8089111EFAC49423B017001B1.roa
Signing time: Thu 02 May 2024 14:39:20 +0000
ROA not before: Thu 02 May 2024 14:39:17 +0000
ROA not after: Sat 11 May 2024 14:39:17 +0000
asID: 39600
IP address blocks: 156.233.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34662 (0x8766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 14:39:17 2024 GMT
Not After : May 11 14:39:17 2024 GMT
Subject: CN=6633a598-44e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:a1:ab:c7:54:6c:c5:1b:87:43:67:c3:43:
4a:22:75:c7:f4:e1:d1:70:78:ed:df:ed:a2:bf:07:
5a:a3:a0:3f:3e:22:d3:f7:7c:e8:76:e8:89:98:cf:
f6:a8:39:8e:26:a8:87:6b:9f:54:57:62:0b:7f:f5:
6c:c1:df:9f:e3:b4:f8:55:86:a5:cd:62:cb:44:30:
03:06:b8:94:b0:b7:36:92:7c:d8:61:7b:e6:2f:d3:
cb:87:5c:f1:e4:71:1c:85:3a:c5:cd:44:90:81:5e:
5b:5d:2d:b4:35:6f:b8:cc:ca:45:15:53:9c:6c:72:
f4:ab:a3:b9:e0:e2:07:ba:a0:82:29:56:15:86:0a:
e8:b9:2d:15:cb:e1:9b:09:a9:e4:4b:4f:b8:74:4b:
9e:d1:2b:54:50:f2:b9:4b:96:f9:ca:ae:2a:b5:8d:
2e:7d:6b:29:df:2b:e9:41:62:14:de:41:7d:33:96:
3e:93:76:5c:51:e2:06:6e:43:96:d1:8d:16:72:be:
f0:a8:fd:a1:e1:e8:e3:18:7a:8a:cd:33:87:e8:be:
39:b0:a6:ca:97:94:61:ac:68:36:50:fd:bf:b4:48:
3a:c5:73:96:36:8d:18:93:79:0d:1b:17:46:0d:f0:
cc:00:dd:9a:e6:84:4b:af:b3:ad:e3:6a:57:a3:ab:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:88:AD:83:A8:5E:17:10:23:35:A1:69:D0:AC:4A:8D:98:4A:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2A596F8089111EFAC49423B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/21
Signature Algorithm: sha256WithRSAEncryption
55:4a:74:4e:b2:7f:11:e5:45:f0:f0:31:3d:46:11:19:dd:47:
0c:73:26:65:74:ee:4f:f2:63:bc:86:12:a3:4d:26:d2:5b:74:
2c:ad:bb:90:73:dd:6d:45:a5:a2:78:ea:56:83:8e:a4:02:ec:
3a:f2:95:10:97:2c:1e:5b:5e:b0:c1:e3:f1:2b:44:81:01:2a:
7f:b1:07:79:43:d4:44:95:5f:8d:be:8a:63:0a:de:30:ec:5d:
ed:76:99:58:59:bd:68:c2:f7:ce:24:6c:20:a4:a1:ce:ac:42:
bd:0d:75:66:0e:f6:d2:67:d1:37:ee:19:c5:4d:b7:25:af:98:
04:f8:c6:53:55:4e:df:f2:bb:11:59:48:d2:db:e2:02:36:40:
70:83:1a:08:7c:81:42:a5:05:c4:84:97:36:73:45:6d:e2:c7:
ef:fb:7f:8b:9a:37:89:60:b0:0f:55:c5:27:ee:b0:36:46:73:
c4:65:0f:6f:a9:68:eb:db:e1:16:c4:c5:b0:34:33:3b:0b:18:
8e:f3:d0:90:70:27:7e:71:d8:fd:8b:67:e7:a8:d1:71:a4:00:
f6:9a:ac:44:ba:c2:78:ce:0c:3b:11:da:11:7d:1a:86:af:79:
44:23:49:aa:09:a5:ac:fe:6d:0f:e1:59:1b:6a:c4:cb:6e:c5:
b3:92:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:50 2024 by rpki-client on console-fra.rpki-client.org