Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/021D804E48C911EFB7A1BABB762E951A.roa
File: 021D804E48C911EFB7A1BABB762E951A.roa (raw, json)
Hash identifier: q2on0JKr28cyaZ71NZbHQN/0H+a8GY6rHDtvQrvHrJY=
Subject key identifier: 7D:10:69:32:49:FC:65:5D:E7:1E:82:2A:01:D8:5F:D0:C9:45:74:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/021D804E48C911EFB7A1BABB762E951A.roa
Signing time: Tue 23 Jul 2024 07:56:03 +0000
ROA not before: Fri 26 Jul 2024 07:56:00 +0000
ROA not after: Fri 23 Aug 2024 07:56:00 +0000
asID: 202656
IP address blocks: 156.246.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40578 (0x9e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:56:00 2024 GMT
Not After : Aug 23 07:56:00 2024 GMT
Subject: CN=669f6213-f3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:5c:b6:f8:9c:83:7b:c9:66:a0:4c:76:8f:
c1:64:96:5c:9d:00:11:3c:f5:5c:f4:54:ee:8f:ae:
ab:4b:40:99:79:4c:e5:5c:b6:fd:46:5a:41:91:45:
b2:7a:49:7e:c1:83:9e:23:75:c9:ae:ce:2e:ba:53:
35:1f:a0:be:53:c1:f1:6a:db:eb:1b:97:52:c0:32:
e8:c1:0e:21:8e:7a:93:72:03:c9:3f:a4:54:11:48:
f3:4a:af:fc:97:b0:b9:0c:7e:90:3f:e7:3f:c3:15:
04:3f:2b:b1:af:90:00:78:57:1d:e2:5e:3e:d9:5d:
22:2a:93:99:ca:f9:19:03:c6:4b:70:f9:0f:03:ba:
32:fb:30:95:3d:6f:da:68:bb:9f:5f:36:0a:2e:5a:
8d:53:bf:dd:39:a2:b7:43:f1:22:f7:36:bc:c6:f4:
6b:0c:56:b4:60:15:32:e2:28:55:8c:e1:55:55:b6:
8a:4b:0d:26:ca:3e:de:b7:8d:89:4e:a7:42:08:cd:
a7:c2:f3:8c:0f:d8:31:4b:31:f0:57:d0:10:ee:8f:
f7:5c:2c:0c:ff:1c:fc:94:b2:42:4c:f1:0f:8d:5c:
ac:cf:7f:ce:7c:89:3f:ac:7c:a7:e7:7f:4d:49:2b:
d0:fd:db:26:34:ba:ac:37:64:da:9e:74:a5:b2:79:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:69:32:49:FC:65:5D:E7:1E:82:2A:01:D8:5F:D0:C9:45:74:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/021D804E48C911EFB7A1BABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.168.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:7d:2f:fd:f4:98:e3:82:f2:2f:e4:7b:3d:8c:50:6c:a6:60:
ec:ad:ac:89:68:78:7e:d4:d9:ec:45:3d:c3:4b:fc:5d:55:af:
f3:17:8c:da:ce:09:38:ed:d4:02:c0:69:24:73:25:7f:cc:6f:
b5:ee:a0:35:d9:a3:c7:af:cc:ff:a0:e3:d6:d9:d9:d5:ff:eb:
3d:c0:85:ed:f7:18:09:bd:cb:8b:2e:73:4c:69:c3:39:fe:70:
54:57:c4:a4:33:54:93:a5:eb:9f:4a:0c:28:53:2c:5a:0e:2a:
a2:57:94:81:ed:db:c9:01:a4:e2:e6:4f:16:45:1c:3f:df:be:
8c:83:ad:f2:27:a9:4b:ba:4b:f4:5f:9b:58:a2:9d:a3:c7:9f:
a3:f2:42:66:a8:de:95:72:07:56:78:4f:7a:15:1f:cd:00:af:
1c:0c:da:60:19:11:86:20:4b:5b:2d:5e:68:6b:ac:f4:6f:09:
d9:c0:46:de:2b:a2:94:cb:5a:47:2c:95:1d:fb:2c:30:98:07:
cb:67:1e:74:c3:66:ec:b1:d7:58:0a:3d:b9:73:3f:48:c6:11:
3e:cb:67:62:ad:0a:fd:90:b4:2d:ba:82:12:b2:4a:25:db:46:
4a:63:08:6b:16:35:d5:f7:27:0f:b2:17:7e:69:6c:0c:55:1e:
4a:b5:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:47 2024 by rpki-client on console-fra.rpki-client.org