Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044C15C048C811EFBDF95EB6762E951A.roa
File: 044C15C048C811EFBDF95EB6762E951A.roa (raw, json)
Hash identifier: G9rF2QPQ9kFioXqVC+MkqNzrGQhdaLKtMDuGy/ZLxpg=
Subject key identifier: 4F:9B:5D:D2:AB:1F:79:8D:A0:84:D5:CE:7F:19:B4:62:E0:05:D8:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044C15C048C811EFBDF95EB6762E951A.roa
Signing time: Tue 23 Jul 2024 07:48:58 +0000
ROA not before: Fri 26 Jul 2024 07:48:54 +0000
ROA not after: Fri 23 Aug 2024 07:48:54 +0000
asID: 202656
IP address blocks: 156.246.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40562 (0x9e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:48:54 2024 GMT
Not After : Aug 23 07:48:54 2024 GMT
Subject: CN=669f6069-7660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:c3:15:6a:07:b3:eb:95:91:12:93:37:5b:
fd:8c:9e:dc:a8:ee:be:a3:08:c0:64:3c:f4:d9:79:
cf:da:01:a3:01:d3:46:8c:c2:f1:0b:b3:aa:98:6b:
28:18:15:10:89:82:f9:8e:b4:28:3f:96:e8:b4:30:
16:2f:35:4e:85:07:3e:79:7a:f4:e5:fa:f0:f2:ee:
e1:9c:ae:62:8e:c2:73:eb:03:c6:9f:af:aa:f5:66:
50:0b:5e:b6:e6:75:58:70:f3:9d:23:6e:58:a7:92:
fa:6e:b7:d5:65:39:7b:8e:d2:87:a7:a4:06:45:a4:
98:79:e7:98:d0:6b:7f:1c:fb:21:4c:a1:3b:5b:24:
aa:9f:59:c8:16:9c:9b:3c:d8:f2:64:13:55:6b:87:
41:36:07:ef:3a:65:96:bd:22:8c:3a:59:24:89:62:
ed:f4:67:72:77:d1:0e:57:aa:e9:68:c9:86:a6:34:
6d:3d:9c:16:e8:61:25:47:ae:bc:ba:09:4c:4a:62:
ec:e4:c6:67:12:68:2f:29:44:95:5c:be:f5:5b:e7:
99:e5:a0:68:75:57:e5:ea:86:3b:8c:6d:3a:0f:d4:
36:ed:43:96:dd:7a:29:e3:f8:88:00:92:3b:1f:40:
d0:1d:cd:33:06:ce:ab:30:32:8d:56:c1:34:5d:73:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:5D:D2:AB:1F:79:8D:A0:84:D5:CE:7F:19:B4:62:E0:05:D8:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044C15C048C811EFBDF95EB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.192.0/21
Signature Algorithm: sha256WithRSAEncryption
04:d1:1d:a7:71:02:eb:7d:e2:4d:d6:84:eb:20:56:2f:43:e6:
85:e1:3b:ea:2a:85:f2:55:fb:28:01:4b:15:9a:4e:39:f3:ac:
0a:94:aa:40:22:ee:aa:27:78:00:ea:f8:b1:b7:77:14:ba:a3:
d9:e6:51:8b:b5:3b:cd:7b:d0:ec:0e:19:5b:3c:7f:78:52:1f:
94:40:0b:21:e7:a7:d6:ac:64:c9:6a:6b:66:ad:06:67:b2:e2:
18:6c:cb:5c:1f:b6:1f:ac:6a:27:07:00:8b:a4:33:fb:43:be:
0c:9d:96:2e:84:00:aa:0a:89:1f:60:04:37:fd:2f:22:c3:9c:
61:c8:89:33:81:f5:39:d7:d0:d9:2d:74:2b:ed:ef:7c:3f:88:
ab:97:d3:20:e0:c8:c4:b8:7c:bf:d0:15:00:a7:23:41:13:1b:
bd:26:1c:4b:26:b5:6d:cf:f1:6d:d0:2f:88:b6:9f:23:70:89:
c8:22:39:af:01:dc:c7:fb:84:16:8a:fe:23:ac:5f:89:7c:d1:
fb:59:08:b8:32:6c:18:1a:86:61:26:5a:74:f4:70:d4:de:15:
c2:df:72:63:58:ce:11:bb:ac:74:ca:49:fd:e6:0e:4a:b8:08:
9f:34:c1:95:be:3c:28:7f:7e:a5:c0:db:68:1a:a4:41:e8:a9:
88:a4:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:47 2024 by rpki-client on console-fra.rpki-client.org