Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD5F6FF6CCB911EE8B3A447E775412E6.roa
File: CD5F6FF6CCB911EE8B3A447E775412E6.roa (raw, json)
Hash identifier: iDfadS6ZJ3ndrRS1Y1I7VINiGrOpytAdy1h1iTcB2l4=
Subject key identifier: 38:47:CC:91:A7:48:31:8F:41:2A:40:DA:15:0A:78:95:96:2E:0D:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 710D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD5F6FF6CCB911EE8B3A447E775412E6.roa
Signing time: Fri 16 Feb 2024 10:54:48 +0000
ROA not before: Fri 16 Feb 2024 10:54:45 +0000
ROA not after: Fri 26 Apr 2024 10:54:45 +0000
asID: 9009
IP address blocks: 156.246.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28941 (0x710d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 10:54:45 2024 GMT
Not After : Apr 26 10:54:45 2024 GMT
Subject: CN=65cf3ef8-6eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:b5:45:b8:a1:ca:1f:5f:72:a6:94:41:d5:
05:18:8d:87:8d:5c:fa:54:9c:63:46:58:99:d2:62:
08:9d:83:52:e8:78:c3:f3:dd:7b:60:c2:f1:c8:14:
b4:c0:ed:0c:2b:6c:aa:ed:41:77:32:94:aa:58:ee:
7b:fd:f4:bc:46:84:81:51:a4:d2:99:01:43:9c:30:
fe:9b:b4:19:21:70:97:fb:79:4a:db:e4:64:14:2d:
a1:86:e2:e2:6c:ba:92:53:32:1e:7d:e5:f7:3d:2e:
17:8a:90:0f:cf:63:8e:a2:df:83:45:ca:aa:56:cf:
20:72:89:3a:85:33:3e:b5:8d:6b:05:1e:84:24:d3:
25:74:64:1c:89:91:a2:17:c8:5f:d5:4a:63:01:9e:
f5:7a:e2:5b:09:bd:38:47:3c:ac:01:bc:88:2c:f6:
e7:2e:5a:dc:21:9f:eb:19:de:01:26:fe:a2:51:a4:
ec:5a:f4:91:d2:c8:54:a7:96:88:bd:b9:e4:09:aa:
09:ac:89:1a:69:0f:a6:0d:dd:f8:cf:02:b3:dd:df:
f5:fd:98:86:b0:fd:a5:0e:0f:94:af:55:4d:53:c5:
fa:9a:ba:c3:02:95:e9:ef:69:6f:15:eb:86:96:a7:
8d:aa:e1:d3:72:d2:eb:c3:ac:1c:96:c1:12:7f:0d:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:CC:91:A7:48:31:8F:41:2A:40:DA:15:0A:78:95:96:2E:0D:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD5F6FF6CCB911EE8B3A447E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.38.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ea:13:5c:73:df:cf:88:ff:12:e3:f5:8e:e7:19:f3:db:f2:
cc:67:10:fe:a5:d5:a9:c9:71:49:bf:79:56:5e:13:da:ec:16:
70:5b:37:29:a0:37:b7:47:a6:15:e8:83:56:b1:a4:53:55:f9:
23:81:10:2d:bd:9b:34:2a:15:ab:c4:ad:97:b0:17:af:12:b2:
9b:57:95:05:52:50:54:be:ac:5a:fa:d7:98:1d:28:7e:9a:50:
32:58:73:a9:6b:19:18:98:84:b4:d4:a9:7c:14:4a:13:99:cf:
25:11:f5:52:64:e9:ca:ea:2e:21:72:a8:f1:43:95:a9:a4:e3:
d1:4b:fc:51:89:53:60:f6:64:48:0a:93:f8:cd:bc:9f:79:43:
1f:0b:b8:c6:0b:5c:56:1f:be:f0:30:ae:3a:d4:7b:43:16:7c:
62:dd:27:eb:64:49:e9:fb:0d:21:9f:ba:72:93:20:43:8e:4b:
66:c1:47:d2:22:35:5c:44:cf:43:1c:8a:19:36:a3:86:da:eb:
52:46:ff:9f:71:92:c3:66:38:c1:34:4b:1d:da:af:f7:43:fc:
df:aa:ee:9f:25:e9:e5:61:fc:1d:7e:f4:d2:87:00:c3:99:35:
b2:9b:f7:b2:d6:dc:95:68:c0:d5:d8:83:ff:1a:d4:db:b7:23:
6d:69:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:04 2024 by rpki-client on console-ams.rpki-client.org