Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF7B9561C3B11EFB84AAE577DDC24C2.roa
File: FFF7B9561C3B11EFB84AAE577DDC24C2.roa (raw, json)
Hash identifier: cMaFR9fO2KIlppwQY5Ka3gyxXns893HOvrp3eJiHJbI=
Subject key identifier: D5:8B:1C:CE:7A:B3:8B:D3:65:DE:52:CE:2D:37:19:55:7F:4E:A7:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8C87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF7B9561C3B11EFB84AAE577DDC24C2.roa
Signing time: Mon 27 May 2024 15:15:50 +0000
ROA not before: Mon 27 May 2024 15:15:46 +0000
ROA not after: Sat 07 Sep 2024 15:15:46 +0000
asID: 138415
IP address blocks: 156.225.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35975 (0x8c87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 15:15:46 2024 GMT
Not After : Sep 7 15:15:46 2024 GMT
Subject: CN=6654a3a5-a236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:cf:54:e6:0f:93:c0:31:af:b1:3e:ec:35:
d0:2d:14:f7:98:e6:90:2b:a3:1f:a2:9d:8f:f3:08:
81:98:90:c4:30:c2:b3:ed:81:77:40:a4:d9:a8:bd:
fc:40:07:fe:c4:83:61:7f:d4:ea:e0:6d:09:c4:a1:
7c:bd:09:43:cd:cc:af:c1:4e:a3:d6:4a:fa:d9:e1:
09:ee:c0:00:4c:e2:20:f7:23:20:f2:2c:f7:c3:6b:
69:e6:7d:c7:ca:3a:10:e8:36:90:17:b0:76:75:2f:
46:58:57:29:e9:a4:c6:4e:37:61:67:fc:f0:9b:bc:
e1:b6:71:5e:8c:8a:5f:ea:7c:25:60:44:6c:f0:d6:
78:88:b5:dc:45:67:a9:de:12:0f:40:ee:42:96:03:
50:cc:e1:04:9b:12:bc:01:25:ec:f2:05:d6:49:64:
ef:45:09:92:b8:0d:ba:13:58:18:bb:c7:98:62:60:
13:d0:4c:71:60:dc:cc:da:fc:27:a3:d7:5f:c5:33:
29:84:df:a3:2b:a3:81:9e:9f:74:16:39:f5:52:d6:
7a:a7:bf:56:f9:52:9a:1c:25:ef:23:3d:bf:66:3d:
7a:d4:ab:91:66:a3:fa:85:e2:b2:fd:be:ca:5b:dc:
f3:c6:a8:e8:56:90:92:ef:10:63:e4:d8:ec:c2:40:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:1C:CE:7A:B3:8B:D3:65:DE:52:CE:2D:37:19:55:7F:4E:A7:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF7B9561C3B11EFB84AAE577DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.160.0/19
Signature Algorithm: sha256WithRSAEncryption
74:2f:56:81:a4:4b:28:fc:b0:8b:f6:df:00:03:9a:70:47:50:
00:33:14:ad:22:fd:b8:b9:91:32:b7:f7:f4:f5:05:0c:81:45:
e4:4d:70:85:a3:76:d5:a8:47:11:ce:d5:16:d9:df:b9:13:f5:
bf:a2:80:b7:65:e1:43:57:0d:76:f3:59:58:14:42:67:1c:09:
fa:4b:78:5b:e9:90:cd:29:ca:75:8d:16:40:85:16:2c:92:cb:
64:35:c9:d3:19:e6:d5:db:1d:81:22:21:fd:cb:3d:e6:f9:87:
60:c8:19:88:03:25:2d:30:49:54:90:5f:62:22:39:c2:ce:be:
cb:16:3c:c8:7c:78:11:36:57:db:24:70:4c:00:e4:64:46:7d:
b6:6b:a3:ab:a6:2c:eb:d5:18:ff:6b:59:d9:cb:1c:c5:75:03:
26:0d:6a:8a:74:f8:44:48:15:14:f8:fa:15:84:11:24:28:6c:
38:d4:50:c8:64:f3:be:e1:66:51:79:7b:ca:c9:71:02:01:a6:
76:a5:20:25:69:82:15:30:9c:59:e7:87:16:d4:94:2a:a0:00:
92:63:1d:2c:97:44:1a:fa:5f:d7:78:f2:b9:23:fa:ba:64:83:
f6:ea:8d:6d:6e:ce:8d:ad:2d:4e:80:5b:6d:4a:c8:7d:62:9e:
25:95:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 03:52:17 2024 by rpki-client on console-ams.rpki-client.org