Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE2E79A06DF11EFA5BF8F70017001B1.roa
File: CDE2E79A06DF11EFA5BF8F70017001B1.roa (raw, json)
Hash identifier: EH3uRk8X5ExuFPTIVu9zCG82QQIJzRLrU7rqjgO22YA=
Subject key identifier: C6:B4:7D:B2:0B:E4:BE:89:9B:CE:F3:AE:B5:A7:9D:63:F8:7C:2F:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8707
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE2E79A06DF11EFA5BF8F70017001B1.roa
Signing time: Tue 30 Apr 2024 10:52:57 +0000
ROA not before: Tue 30 Apr 2024 10:52:54 +0000
ROA not after: Sat 11 May 2024 10:52:54 +0000
asID: 9009
IP address blocks: 156.225.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34567 (0x8707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 10:52:54 2024 GMT
Not After : May 11 10:52:54 2024 GMT
Subject: CN=6630cd89-698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:3a:fe:a4:3c:d8:ea:a8:06:64:23:c7:29:
9a:46:a4:03:f6:57:4b:53:51:95:3d:d4:cd:16:43:
90:57:cc:de:ea:df:3e:19:5a:7b:65:55:ea:0f:7e:
f1:12:a3:d1:44:65:9c:7d:da:c8:0a:f7:78:90:6c:
ae:40:6c:64:20:b5:cf:42:0a:ec:82:08:dd:8d:c6:
9b:d0:af:b0:bb:3e:9e:50:6a:4b:4c:9c:a6:fe:c5:
fd:06:cb:a5:8c:03:c5:a1:4f:0b:60:53:0a:a7:e1:
94:43:b5:3c:b4:d1:f2:91:27:9e:de:bf:6e:ea:1e:
66:60:10:52:51:d6:52:3c:ce:6e:b7:29:ce:50:2f:
8c:9b:66:34:bc:1c:43:51:05:fd:e8:b0:3f:2b:37:
2c:35:71:12:af:02:25:24:ae:25:c3:05:12:41:a4:
34:49:3d:fe:1c:72:17:27:c5:e7:f6:7f:1c:dc:23:
92:2a:84:02:73:08:ca:8f:94:d6:32:a5:9a:36:13:
e9:c2:dc:fd:89:99:59:57:db:86:ad:23:39:fc:bd:
97:ca:37:94:c8:6c:f7:14:87:a1:a4:cb:57:78:b3:
72:c6:4b:ae:d5:a4:4c:a7:fe:c0:cc:22:7a:f5:38:
3e:d4:0b:3c:44:62:86:40:78:97:da:7c:01:f8:ca:
ac:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:7D:B2:0B:E4:BE:89:9B:CE:F3:AE:B5:A7:9D:63:F8:7C:2F:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE2E79A06DF11EFA5BF8F70017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:9d:eb:0a:88:bc:aa:fd:01:3b:50:f4:74:6f:d3:82:c5:00:
32:14:6c:be:ea:c9:dc:94:bf:0c:6e:e5:e2:5b:c2:1a:49:02:
76:a9:49:5a:56:0a:a4:60:c9:c4:5f:34:5d:d6:b9:1b:51:8d:
cd:5a:09:ed:eb:00:a0:73:90:3e:76:67:12:53:d8:fe:a5:f5:
7e:ad:16:6b:90:dc:5e:91:65:24:c9:97:bf:b0:47:25:79:20:
ce:c5:f7:0b:02:f5:4a:b6:fe:e2:3d:f7:5d:3f:b1:09:64:e9:
f0:99:18:b0:e6:a4:0c:1f:c2:2c:51:10:48:c1:66:79:d9:20:
ca:30:64:94:41:e6:6c:02:3f:bd:d2:dd:15:00:2b:4a:be:27:
ea:f3:32:28:05:6e:ba:76:25:49:a5:9e:9a:4f:47:06:fd:18:
25:97:7a:c0:97:c9:99:93:db:a9:04:39:1d:b2:a7:89:11:15:
c8:06:ef:9d:58:ca:96:0d:26:d7:d3:41:08:c2:e5:e6:a1:29:
1f:42:65:77:3c:4f:73:a8:fa:f1:7c:03:da:11:01:d5:ff:00:
11:d6:3f:08:48:7d:f8:b7:44:1d:98:b5:ce:c4:77:1d:30:ea:
c8:78:ae:b0:ae:77:ce:f6:bb:ee:4e:51:1f:ab:ed:f9:1d:cf:
57:12:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:50 2024 by rpki-client on console-fra.rpki-client.org