Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02DDE14C499411EFB28FC2A0762E951A.roa
File: 02DDE14C499411EFB28FC2A0762E951A.roa (raw, json)
Hash identifier: 6vWnInO/qbLBdFLsd1Cr8kPdCyYRXXIx9Orw1knjMMs=
Subject key identifier: 63:C0:FC:4D:D5:E1:DA:0D:A2:63:36:48:BF:F2:E8:9E:7D:A2:1E:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02DDE14C499411EFB28FC2A0762E951A.roa
Signing time: Wed 24 Jul 2024 08:09:12 +0000
ROA not before: Wed 24 Jul 2024 08:09:09 +0000
ROA not after: Fri 23 Aug 2024 08:09:09 +0000
asID: 202656
IP address blocks: 156.246.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40687 (0x9eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:09:09 2024 GMT
Not After : Aug 23 08:09:09 2024 GMT
Subject: CN=66a0b6a8-043e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:69:25:b6:a9:88:47:dc:df:46:1a:ea:46:
4d:04:75:ee:f9:33:9a:35:d0:49:c0:fd:43:e7:af:
9f:15:f0:98:d5:fb:78:e3:8a:e0:c1:25:cc:f7:39:
b0:68:83:90:84:3e:05:b9:7f:90:9b:0b:9d:73:5d:
6c:62:f5:ff:29:fd:44:db:f4:18:03:84:06:e9:b9:
90:26:4c:f8:66:a7:0b:69:0a:22:16:4a:58:1c:22:
36:16:6c:4c:7d:20:ca:1d:47:a0:9a:9b:05:6c:a0:
33:28:fd:ee:2f:14:79:59:80:cf:e6:de:42:70:e0:
0e:0d:cf:25:32:be:5b:b8:3c:5f:ae:db:3a:cb:cb:
71:76:d7:93:2f:d1:82:1a:c8:42:1b:35:72:85:60:
8d:00:8b:08:43:d2:fe:9e:26:fb:fe:90:cb:85:93:
f3:02:aa:c0:52:26:7e:b8:70:c1:2e:84:fb:e9:51:
0c:73:15:f1:4f:69:b6:62:71:60:49:0b:90:55:f3:
fe:d7:05:69:d7:2f:f7:09:00:8b:86:b8:d2:f7:9e:
dc:e0:54:76:11:a3:0b:1e:a3:c2:92:da:80:9a:f1:
3d:9b:1a:7b:d6:de:fb:65:b6:29:1b:39:87:ac:e1:
39:61:2f:62:d2:a9:98:49:d2:8f:9f:fa:f8:af:5e:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:FC:4D:D5:E1:DA:0D:A2:63:36:48:BF:F2:E8:9E:7D:A2:1E:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02DDE14C499411EFB28FC2A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.180.0/22
Signature Algorithm: sha256WithRSAEncryption
90:43:42:c6:22:6d:7d:01:82:d4:54:e3:fe:3b:bf:0e:49:24:
ab:e0:bf:25:45:11:d2:78:1e:96:34:94:bb:43:18:ad:1e:83:
a5:59:a0:93:a3:f7:73:69:83:f4:cd:b6:bd:b6:cb:8f:f0:81:
0b:7f:ed:a7:be:7b:19:2d:56:13:c5:a8:69:70:64:32:86:31:
f5:95:99:b5:31:43:ae:19:fc:e4:28:48:a8:4d:da:c1:ff:5d:
41:9e:05:48:d5:ea:af:94:ac:c8:97:49:ce:39:49:3f:cf:b8:
1a:13:2a:63:47:77:65:b0:af:0c:5d:d5:61:36:53:39:e4:52:
c1:e2:f9:d2:26:e1:d9:d6:df:ff:cd:8a:a9:ed:db:0e:57:3c:
fb:fd:12:ef:c6:62:d1:86:d5:40:86:3d:41:88:c0:38:05:9c:
80:c8:ac:7d:40:b2:9d:5e:84:e5:ec:7c:84:37:25:4e:d3:65:
68:de:48:0f:0d:c9:73:d3:96:00:1f:26:94:9b:75:02:ae:36:
5c:72:27:85:bb:8d:77:ed:b7:ac:d6:3a:0a:21:9b:0e:56:f5:
94:3e:97:73:98:57:fa:f7:3b:14:a7:7c:0e:07:9d:98:3e:29:
56:0a:ae:7a:04:7f:d8:13:e5:70:48:f5:b1:4e:5d:e8:06:18:
df:18:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org