Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F3C14A056111EF95059141017001B1.roa
File: 03F3C14A056111EF95059141017001B1.roa (raw, json)
Hash identifier: WVd48Bp7nAS6xcWohFIon0X3UV8A2IDuVCgp/QCkV9w=
Subject key identifier: 51:7A:7C:B2:B8:D7:33:38:E8:FD:80:30:CB:0C:DE:4C:58:5C:7B:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8681
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F3C14A056111EF95059141017001B1.roa
Signing time: Sun 28 Apr 2024 13:12:51 +0000
ROA not before: Sun 28 Apr 2024 13:12:47 +0000
ROA not after: Sun 05 May 2024 13:12:47 +0000
asID: 139646
IP address blocks: 156.246.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34433 (0x8681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 13:12:47 2024 GMT
Not After : May 5 13:12:47 2024 GMT
Subject: CN=662e4b53-4cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:92:b6:f6:a3:0a:46:a4:a0:cc:e5:60:e1:
bf:44:28:d1:63:1d:65:ad:59:91:30:24:d8:c9:65:
b4:28:e6:7f:eb:e4:f0:11:67:68:5d:0c:1a:02:72:
2e:46:66:df:d8:ce:f3:a4:40:52:49:8a:06:06:88:
15:c6:88:69:e5:8d:c4:72:1f:41:58:3f:8f:d9:3d:
db:73:07:dc:d7:56:f0:7f:f0:be:3c:af:ed:ee:96:
9a:77:f7:43:73:74:ca:82:4e:38:c5:10:85:05:92:
2d:ab:01:08:31:f2:0a:9e:f1:ec:3e:d1:f9:45:03:
1f:1a:b3:18:49:ef:42:e6:53:30:87:f4:88:f3:86:
ef:a5:e0:9f:00:62:fa:cf:a3:04:ad:3c:92:a0:ae:
c0:19:3c:c9:4d:ac:d0:87:cf:eb:ec:5f:1e:96:e0:
c6:de:4a:de:65:27:b7:f6:d7:7b:ef:97:dd:42:1d:
a1:18:a6:a3:1b:7a:fe:80:49:e0:f2:bd:34:18:14:
1f:df:ca:5e:50:26:04:1d:f3:25:65:e5:38:42:c9:
db:e9:a0:c2:18:2e:74:b1:45:e7:48:72:bc:14:96:
58:21:c7:12:4b:b3:f5:11:25:5a:90:7f:cb:b9:a2:
72:f5:93:bd:af:29:89:0b:76:68:1c:84:47:ec:ab:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:7C:B2:B8:D7:33:38:E8:FD:80:30:CB:0C:DE:4C:58:5C:7B:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F3C14A056111EF95059141017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.16.0/23
Signature Algorithm: sha256WithRSAEncryption
62:3a:53:23:d2:2d:93:4c:d5:4e:12:2f:d6:09:ff:4b:0f:b7:
7d:32:5b:b4:26:e0:8e:fb:54:f2:ef:4e:5e:62:cc:24:32:05:
a7:92:7f:40:d4:62:62:88:5d:a5:68:98:28:fc:3e:6a:d3:6d:
a0:73:b5:bf:a8:ce:91:2c:97:9b:cb:85:64:39:38:da:64:bf:
d9:43:cd:e6:94:37:a7:bc:83:42:e1:f5:05:fb:da:9e:96:c2:
cd:92:c9:93:c4:d7:00:d0:1b:5a:c3:b1:bc:4f:a0:86:3f:d4:
94:a9:66:db:f8:e1:9a:02:04:0c:e5:bb:38:fb:96:8e:7d:65:
c0:58:73:34:d7:c0:5a:13:55:4f:75:95:d2:d5:4b:5a:8c:b1:
d5:d9:1e:eb:93:87:24:c2:fc:9c:5a:1c:98:c8:e9:5a:25:88:
93:ca:55:ce:58:34:be:8e:e4:74:72:7b:13:52:de:ce:c8:57:
f5:63:9e:1b:5d:c2:2d:c2:fd:8c:92:bb:75:0b:19:fd:34:68:
5d:07:11:49:d6:ef:47:71:ed:ad:33:7d:1d:1b:7f:ca:9e:40:
2f:84:d4:ed:b0:ce:45:25:3c:43:4c:19:3c:ab:8b:83:b2:8a:
c6:9b:15:fb:c9:d0:a4:66:d4:e8:06:47:e9:36:6a:d8:d2:6e:
f3:f3:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org