Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0430C5FA48C711EF8561C4AD762E951A.roa
File: 0430C5FA48C711EF8561C4AD762E951A.roa (raw, json)
Hash identifier: +In14rLG1ISHJEfNdS35Plls3/99XBYJlvFWAM1Zqgg=
Subject key identifier: 29:3B:ED:DB:A0:CD:FC:F2:22:B2:2C:96:1C:8C:78:1A:94:11:BB:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0430C5FA48C711EF8561C4AD762E951A.roa
Signing time: Tue 23 Jul 2024 07:41:48 +0000
ROA not before: Fri 26 Jul 2024 07:41:44 +0000
ROA not after: Fri 23 Aug 2024 07:41:44 +0000
asID: 202656
IP address blocks: 156.246.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40548 (0x9e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:41:44 2024 GMT
Not After : Aug 23 07:41:44 2024 GMT
Subject: CN=669f5ebc-548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:d0:3e:23:24:78:53:d7:f5:2f:77:a4:6b:
ba:38:56:44:ed:7e:0f:23:c5:16:97:fb:e2:5e:7f:
70:cf:8d:f3:a4:0c:51:cf:fe:6b:41:91:37:2e:ba:
f8:d2:63:d4:08:5a:e5:dc:4f:81:87:16:e5:92:e0:
d2:7c:55:6d:a9:15:9e:e1:19:fd:f2:ee:2b:c5:26:
a3:09:5c:26:57:4d:aa:6a:d9:be:4f:73:31:b2:73:
e0:61:40:fd:3d:eb:ef:e7:71:16:d1:70:f1:4e:d0:
56:f4:72:1b:04:a1:5f:aa:a1:9f:81:ea:3f:70:aa:
96:40:77:b4:42:ce:18:8b:aa:11:93:b8:4f:0f:56:
b2:f6:70:f1:af:a2:e5:24:8a:1e:e6:3f:28:06:34:
4b:15:cf:ac:02:87:fb:95:19:84:5d:fa:82:fd:ed:
5f:8f:17:85:ed:1a:f3:c3:c2:f5:ff:88:12:09:85:
99:d7:2a:3b:f4:eb:2d:56:4a:76:fe:29:59:34:f3:
72:33:64:56:45:6d:95:eb:62:ba:ba:56:80:b9:1f:
ce:b2:f8:26:6b:1f:f0:e1:bb:0f:9b:05:5a:7d:ce:
3c:04:12:04:59:97:e3:7a:27:38:a1:97:f2:b4:44:
6e:1b:bc:e4:a3:af:1b:45:26:67:5b:37:2a:5a:04:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:ED:DB:A0:CD:FC:F2:22:B2:2C:96:1C:8C:78:1A:94:11:BB:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0430C5FA48C711EF8561C4AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
28:e9:2c:f1:b4:dd:8d:74:d4:a3:3d:2c:db:42:6d:e8:00:62:
a9:6e:40:3d:4a:3f:ee:06:31:7e:4b:46:84:d8:ea:eb:7e:14:
bc:27:31:14:bd:fe:42:9a:ff:df:66:ad:e8:24:ff:4f:12:aa:
66:53:bc:99:79:b1:8e:0c:71:d1:92:3a:4c:b1:da:f7:5b:76:
e8:5e:ab:53:33:29:33:ea:c0:5d:8a:a9:2b:be:37:1c:e5:5b:
67:c1:b6:00:e3:5e:fe:91:2f:70:c7:21:7b:37:72:a7:9d:ea:
32:f8:67:a0:d1:c3:d1:fb:28:72:48:44:4c:c0:48:b2:d1:f6:
15:7f:a0:cf:a7:e0:c3:1f:85:a4:c8:84:e8:05:5f:46:70:bd:
a0:f1:cb:f0:1e:1e:75:56:2f:35:6e:97:7b:cc:2f:90:6a:93:
a3:3b:39:7c:6f:f9:cd:90:60:38:0a:96:2e:3b:04:1a:a0:df:
e9:f6:01:1c:81:21:16:4b:21:1e:d8:34:30:98:cf:70:76:6a:
bb:1c:d6:0e:8c:3e:05:a6:a0:16:7d:91:97:a8:cf:08:75:a5:
4a:54:03:7b:ea:22:2f:d6:bc:ee:67:a5:c6:d8:95:26:a8:2d:
42:85:6e:99:d8:76:20:89:d3:25:2e:62:11:4e:f2:3e:1b:11:
23:65:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org