Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49F53C2CCA511EE8F3FAA5E775412E6.roa
File: C49F53C2CCA511EE8F3FAA5E775412E6.roa (raw, json)
Hash identifier: wEcROY20TfZUW47O5AZvwIX6r75hQnH0scEjf/NruLU=
Subject key identifier: C8:2A:1A:19:77:FB:22:D8:E2:6C:DD:EB:D0:10:98:B3:D3:A5:E6:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 70FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49F53C2CCA511EE8F3FAA5E775412E6.roa
Signing time: Fri 16 Feb 2024 08:31:24 +0000
ROA not before: Fri 16 Feb 2024 08:31:20 +0000
ROA not after: Fri 26 Apr 2024 08:31:20 +0000
asID: 9009
IP address blocks: 156.225.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28923 (0x70fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 08:31:20 2024 GMT
Not After : Apr 26 08:31:20 2024 GMT
Subject: CN=65cf1d5b-27e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:a9:76:db:8b:02:8d:66:ee:3c:ec:21:3d:
f5:c1:78:85:67:ee:6b:d4:88:6e:17:3f:b2:8d:3d:
45:2d:c5:5f:92:5f:01:6a:96:f4:39:9d:62:1b:3d:
45:91:1f:aa:45:6a:23:9d:0b:7e:67:7e:d0:dd:94:
ec:08:32:14:2b:04:b5:47:6f:a0:15:7a:f6:4b:27:
18:30:07:95:9d:09:1b:a2:56:b6:3a:77:cd:96:cc:
0e:f7:3c:5f:84:74:ea:89:69:3c:6d:82:87:ea:a3:
e2:1b:47:84:bd:4c:ee:95:e6:95:90:e0:c4:d8:0a:
16:ac:fd:6f:1e:c5:5d:af:e2:94:2b:5d:9c:36:c0:
26:71:d6:3a:bf:a6:de:dc:0b:18:c0:6e:d5:e7:f6:
0e:cb:36:05:63:90:5b:b9:96:39:79:bf:3c:1a:a9:
64:87:be:be:2b:7e:03:b9:f9:16:a0:d2:ca:f9:7d:
df:5a:8c:21:f4:47:08:8c:aa:ce:cc:dd:ff:cb:37:
8d:11:3e:d8:52:31:fb:53:bd:07:5a:cc:ba:9c:fc:
45:4c:c9:dd:28:90:8a:40:5d:e4:2e:a7:16:93:21:
36:08:64:d2:31:8e:25:c3:04:94:3e:cd:ba:b8:80:
33:73:4d:1e:af:98:30:97:d9:b5:ce:e1:1e:14:8b:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2A:1A:19:77:FB:22:D8:E2:6C:DD:EB:D0:10:98:B3:D3:A5:E6:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49F53C2CCA511EE8F3FAA5E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:58:d2:77:76:97:e5:ae:fb:ea:3f:fb:fd:3f:47:51:b5:45:
95:c8:67:94:0a:98:6a:6e:37:b1:ff:eb:8a:db:e5:ea:e5:ea:
ef:9c:81:e3:b0:5b:2c:d2:c9:e5:a6:18:8e:d4:b0:19:4f:47:
da:75:35:04:a6:20:9b:6a:e9:8f:4e:c9:e4:12:b6:3c:ce:d9:
51:07:9f:01:89:45:ff:1f:cf:35:4a:5b:5f:d1:dd:c4:76:f4:
6f:bc:a1:8f:1e:1a:fc:3a:36:ce:e6:52:65:55:06:03:57:06:
59:89:ce:7e:15:03:24:09:6b:0e:0b:f8:67:61:e2:17:6e:fc:
36:b3:18:62:6c:67:c8:45:1b:21:84:6e:1d:ab:2d:0f:a1:c9:
b6:8e:8b:7f:da:67:a5:84:c5:2e:d2:38:73:4d:d3:7f:db:77:
d3:af:42:0d:2f:49:af:46:d3:28:87:6f:48:3c:33:be:63:8f:
85:88:c5:f2:0a:5b:c0:bf:ab:90:71:68:31:41:ba:1f:f7:48:
15:23:0a:38:fc:08:dd:b1:82:4a:59:85:54:c3:09:f7:4b:a4:
a1:14:d8:54:98:aa:7b:5f:70:fc:96:c2:f2:cc:02:d9:88:6e:
0c:a1:20:d2:2c:ae:68:55:cd:18:c8:2c:d5:a2:9b:88:26:08:
bb:c0:27:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:03 2024 by rpki-client on console-ams.rpki-client.org