Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8164748089111EF888AAA3B017001B1.roa
File: E8164748089111EF888AAA3B017001B1.roa (raw, json)
Hash identifier: hmQJZTqyh8SwRE16KEXu5LmsUfV1IgpsFbolbSFLc6c=
Subject key identifier: C7:55:AB:D0:D2:01:1E:3C:33:1A:44:18:09:00:5B:0C:D4:36:68:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8768
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8164748089111EF888AAA3B017001B1.roa
Signing time: Thu 02 May 2024 14:40:23 +0000
ROA not before: Thu 02 May 2024 14:40:19 +0000
ROA not after: Sat 11 May 2024 14:40:19 +0000
asID: 39600
IP address blocks: 156.255.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34664 (0x8768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 14:40:19 2024 GMT
Not After : May 11 14:40:19 2024 GMT
Subject: CN=6633a5d7-43a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:a4:b1:28:50:c1:49:84:ee:fe:00:7f:34:
64:25:0a:02:52:20:ac:98:cc:dd:a7:f9:8e:66:6f:
35:55:ff:d5:8b:67:0c:91:34:2a:e7:92:93:47:26:
6f:3e:35:12:d8:c8:d2:5c:62:a3:a0:e8:e5:13:a5:
a5:c2:55:96:70:15:7d:be:85:fa:19:fe:70:85:41:
45:4d:9b:19:29:a6:39:00:aa:80:fb:a4:85:c9:43:
2b:e2:79:86:89:9b:ea:d0:95:ec:9f:91:aa:89:00:
e2:1a:3b:96:e5:32:c3:cd:73:69:bd:ad:6f:b3:61:
fc:cc:d0:1e:f0:14:39:cf:d9:a0:b1:27:44:eb:25:
38:f9:c4:3f:9a:fc:f6:ba:6c:a7:8a:1e:4a:48:d2:
69:61:cd:0b:8b:6a:73:d2:8a:5b:05:62:1e:29:31:
30:07:6f:e1:63:74:25:f8:d2:17:ed:5e:60:c3:f6:
0a:96:72:64:e8:72:5d:f3:dc:e7:a8:7b:22:87:73:
3a:a8:fd:ce:25:46:cd:28:cb:ae:96:1a:d5:88:48:
09:8b:94:05:50:79:e7:07:ac:4f:8f:e3:48:60:62:
1c:a5:ea:f9:41:1b:ef:87:67:02:57:15:fd:3b:56:
13:76:86:68:c8:07:75:95:ca:43:99:9f:45:dc:22:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:AB:D0:D2:01:1E:3C:33:1A:44:18:09:00:5B:0C:D4:36:68:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8164748089111EF888AAA3B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.80.0/22
Signature Algorithm: sha256WithRSAEncryption
31:65:fa:63:0d:fb:ab:22:f1:8f:40:c1:25:ff:a1:f4:f6:c8:
7f:60:41:fd:4e:fb:2b:35:fa:14:ae:1c:bd:40:ab:2e:b9:b9:
6b:94:08:83:2f:50:5b:55:26:26:b3:87:35:cd:8c:8c:30:22:
89:70:f1:e7:df:60:f1:e9:77:5c:43:f3:40:ec:bd:89:c0:3f:
25:23:32:f5:ba:16:81:64:ca:20:ea:51:ba:21:7e:80:b8:4d:
0e:df:f1:4f:36:4a:e7:a0:80:28:9e:54:5b:15:19:5a:7e:42:
c9:3f:b6:9f:55:b9:78:c4:41:5c:5d:c8:a0:c6:8f:82:92:bc:
db:75:3e:e4:70:37:7d:04:75:cb:45:a2:b9:47:f5:a6:e8:9c:
bd:94:b2:15:ee:7b:bf:a8:c5:78:75:31:9d:e5:1f:db:84:fe:
87:98:c9:8d:23:c6:f3:c9:56:7c:ce:a7:9d:bb:15:af:d2:3d:
83:c0:ca:98:f0:67:99:c2:08:7b:65:e9:87:ec:60:c6:cb:59:
03:53:a0:83:46:c3:c3:82:74:5f:2d:e5:38:6a:29:b4:1f:67:
92:74:10:30:45:3b:b9:7e:72:6e:b3:2f:8a:67:fd:7e:6a:09:
08:0d:b2:1d:7b:8c:81:79:cc:7c:74:f1:af:00:18:0c:6c:e0:
98:12:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:50 2024 by rpki-client on console-fra.rpki-client.org