Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5616FC606D711EFBB9E552F017001B1.roa
File: D5616FC606D711EFBB9E552F017001B1.roa (raw, json)
Hash identifier: gP4+CfhHX8sETF/BDoGjHGL0IVeR/SJguPi9SWU7TD4=
Subject key identifier: 65:0D:24:3A:9D:95:D7:0E:7E:78:A7:56:32:E0:A0:8E:AA:3E:E0:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5616FC606D711EFBB9E552F017001B1.roa
Signing time: Tue 30 Apr 2024 09:55:54 +0000
ROA not before: Tue 30 Apr 2024 09:55:51 +0000
ROA not after: Tue 07 May 2024 09:55:51 +0000
asID: 142062
IP address blocks: 156.238.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34539 (0x86eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:55:51 2024 GMT
Not After : May 7 09:55:51 2024 GMT
Subject: CN=6630c02a-c05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:46:45:04:89:a8:a6:8f:1e:11:94:9c:6f:
f3:3b:e8:31:26:c7:fa:2b:ec:5c:b4:c6:96:d5:90:
80:cb:1d:c3:1b:a7:a5:82:f1:01:af:bc:e9:2b:7f:
04:5a:b0:a4:f0:49:c1:e6:d7:2a:2c:33:06:8b:ec:
a4:6e:7b:63:b0:c6:ce:b0:7e:f2:f6:a5:37:29:d5:
08:0b:f6:e3:bb:13:52:c8:34:70:51:c8:ac:bc:74:
e0:cc:9a:e5:54:51:8c:6a:1f:43:28:d0:56:6b:62:
16:03:58:54:d5:96:8a:8b:38:c1:c7:f3:56:9e:a5:
cc:ba:59:63:8c:8a:82:e3:91:9e:94:5d:ee:05:ec:
9e:e4:1e:90:99:db:01:a6:d9:9f:0c:99:b5:c0:a7:
40:6d:d1:a2:86:b1:b3:ba:9a:8c:0c:4e:17:fd:56:
59:ad:6f:93:f7:7a:49:0f:17:72:7d:62:2f:42:05:
89:a5:3f:c2:b3:bc:1b:4a:cc:42:7a:ef:12:bd:ee:
e4:af:5d:83:fb:82:32:b8:ae:19:95:32:51:af:85:
69:ae:5a:26:89:dd:36:c2:72:c2:bb:29:f0:7f:3a:
50:ff:df:31:65:8f:79:1b:1c:d9:17:cc:e8:4a:df:
a2:3c:51:03:36:dc:49:b4:33:0d:0d:05:21:27:ad:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:24:3A:9D:95:D7:0E:7E:78:A7:56:32:E0:A0:8E:AA:3E:E0:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5616FC606D711EFBB9E552F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
51:2f:0f:3b:c8:39:48:e3:bd:98:02:68:f7:d1:de:22:5a:f7:
47:8f:9b:c5:84:0a:1c:67:e3:1a:91:dc:e5:ab:6b:81:66:68:
ec:f7:a9:2c:f2:03:64:2e:26:0d:f8:1e:97:e7:0e:86:42:c5:
ab:2d:8e:c8:af:7c:b5:c6:c0:ec:57:6d:66:d6:7b:57:f6:41:
0e:29:cc:e8:31:ff:d9:59:93:dd:71:ec:1e:5e:c9:a5:06:61:
5b:02:9d:d9:45:26:ef:7f:de:9b:3d:a9:90:39:48:1a:f1:e5:
50:75:f2:49:a4:00:9f:57:cc:70:67:1a:f9:7f:30:11:5e:48:
d4:da:50:54:c5:a9:bc:2c:7d:b9:63:68:22:f4:cf:29:d1:91:
32:ce:03:f6:91:8f:10:67:6b:74:68:f8:23:e5:73:a7:76:61:
83:59:fa:70:8c:00:25:d0:cf:d4:db:0d:b0:8d:ce:2b:ba:0c:
9c:7b:35:5f:9c:e3:ee:b3:99:d0:82:92:01:b6:9c:af:00:b7:
be:92:27:f4:df:12:06:17:77:75:c8:e7:02:56:da:28:b7:cc:
fc:c3:c2:f7:3a:03:9b:6b:60:3b:0a:eb:c5:c2:79:aa:b8:6a:
76:1e:25:5e:57:e2:02:fb:37:81:a5:4f:4b:35:42:c8:e2:37:
4c:b3:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:59:23 2024 by rpki-client on console-fra.rpki-client.org