Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/C5852D46F09811EDB8FCBC1E4AD9E6FC.roa
File: C5852D46F09811EDB8FCBC1E4AD9E6FC.roa (raw, json)
Hash identifier: BP7ogjHlHschcwfU6T+H1pmvIYaCwZUDCBRe8MlVm/A=
Subject key identifier: 38:A0:A0:1A:7C:13:E9:D2:B8:FB:52:C2:C5:E2:DD:34:0C:1C:5A:D2
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0391
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/C5852D46F09811EDB8FCBC1E4AD9E6FC.roa
Signing time: Fri 12 May 2023 07:44:06 +0000
ROA not before: Fri 12 May 2023 07:44:02 +0000
ROA not after: Sun 12 May 2024 07:44:02 +0000
asID: 136923
IP address blocks: 156.0.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: May 12 07:44:02 2023 GMT
Not After : May 12 07:44:02 2024 GMT
Subject: CN=645dee46-a8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:c5:2d:71:9a:10:41:8b:d3:fc:22:35:71:
67:4b:31:94:c8:58:ed:9c:c4:a9:dd:5e:66:65:a9:
5f:3f:4c:0c:96:be:a9:85:8e:4b:f9:3d:0f:db:a9:
a8:ea:95:9e:71:46:15:d7:e3:6e:14:a8:f4:9b:1e:
e0:74:fb:6c:56:4b:be:37:0f:57:bf:24:f4:3e:db:
ca:aa:63:0e:0c:00:c0:69:4f:29:78:1c:1a:36:d8:
60:1f:1c:17:b8:b9:68:f8:32:4b:fa:a3:25:d6:c9:
fa:29:c2:c7:cf:c0:aa:91:de:d3:f7:7f:23:72:42:
be:cd:60:48:d4:66:a5:c4:9c:bd:94:30:b7:8c:30:
c6:ae:b2:9e:29:70:1e:3d:49:c8:36:eb:58:f6:9a:
3a:33:24:44:22:71:3c:3a:f2:ad:cb:c9:8b:9f:ef:
c2:b8:ec:fb:db:a7:df:2c:ec:9c:5e:df:96:60:93:
83:bc:17:3e:b7:a1:02:89:16:de:b7:d8:76:a0:43:
54:f0:90:12:49:f7:68:2e:6e:61:a2:7b:81:23:1d:
ab:48:0c:3d:94:f8:4c:0b:49:ca:ea:11:aa:45:47:
bc:bf:ab:81:b0:29:97:41:b2:1b:f7:3f:4f:89:33:
3f:08:a0:f1:5d:92:cb:92:9f:41:d5:e1:ad:9a:e2:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:A0:1A:7C:13:E9:D2:B8:FB:52:C2:C5:E2:DD:34:0C:1C:5A:D2
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/C5852D46F09811EDB8FCBC1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.100.0/24
Signature Algorithm: sha256WithRSAEncryption
10:fd:e9:dd:97:fd:6f:5b:24:87:01:2a:23:0b:b3:dc:e3:47:
36:94:6e:de:fa:94:c8:93:ad:5a:de:aa:80:b2:c2:d0:6d:2b:
5a:03:c7:eb:02:2f:8a:46:3e:bf:b0:5f:b0:91:48:35:d7:3a:
fe:92:f7:09:31:20:a9:52:79:89:cf:9c:51:e6:d6:0a:30:28:
eb:b7:34:46:df:01:f9:fc:b8:22:68:3d:25:b4:28:bc:18:22:
9a:49:d1:5f:1b:df:be:b2:86:76:d1:42:89:5c:a3:dd:28:a9:
a2:f0:65:7f:3f:81:bf:1c:77:3c:af:6c:ff:9b:c3:eb:6c:93:
ce:04:fa:c7:ac:64:ca:bb:dd:fb:69:29:15:9c:5b:f3:25:e2:
37:b0:a7:7d:69:2a:bb:be:94:ef:bc:cc:51:b0:10:7b:ad:21:
dd:10:e0:f5:c0:17:87:5b:9d:4f:80:b8:67:fe:47:9b:af:ba:
22:93:fd:c5:ea:85:a8:88:2b:4b:ca:27:d7:00:1b:6e:f5:6d:
d0:b0:29:97:2c:3f:da:64:f2:d5:f5:5e:55:c1:1e:1c:e0:a0:
08:5d:77:d2:fa:0f:86:86:4b:56:36:b0:2f:9c:34:20:10:e7:
fa:b5:31:41:56:a8:07:f3:9e:fd:c9:d1:dd:67:70:3c:ef:be:
af:de:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org