Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05853A3645AB11EFAB9A018F762E951A.roa
File: 05853A3645AB11EFAB9A018F762E951A.roa (raw, json)
Hash identifier: nTD6SMM7nX0f9+R9rDu3sBpB4VToARAJG9Y6tqvnq1M=
Subject key identifier: B4:46:95:9C:23:25:65:99:FD:6B:32:72:7A:7C:AB:AF:C2:3B:99:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05853A3645AB11EFAB9A018F762E951A.roa
Signing time: Fri 19 Jul 2024 08:43:51 +0000
ROA not before: Fri 19 Jul 2024 08:43:47 +0000
ROA not after: Mon 29 Jul 2024 08:43:47 +0000
asID: 212238
IP address blocks: 156.226.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40366 (0x9dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:43:47 2024 GMT
Not After : Jul 29 08:43:47 2024 GMT
Subject: CN=669a2747-520d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:cd:cb:8c:c4:a7:9d:f3:46:18:7f:ee:13:
29:9f:e0:47:66:9b:56:b0:31:d4:33:93:f9:83:10:
79:ad:bb:6a:ec:d9:2b:ab:92:87:5b:5f:b8:e9:0a:
6b:30:5d:d9:7d:39:e7:53:af:8a:5f:d8:0f:66:fa:
c9:a0:f2:94:b0:44:f9:dd:0e:93:7b:8d:2b:b4:8b:
10:7e:07:9a:b9:f9:3a:4f:09:fc:53:12:67:b3:17:
dc:a8:48:6f:7e:91:cf:88:db:f7:bf:1f:c2:8d:bc:
23:ac:1f:03:c2:77:08:48:a2:31:01:d1:bc:a8:8b:
6e:07:b1:70:b2:16:66:25:08:e1:a2:2b:2f:54:bd:
7e:40:0b:e7:9d:2a:96:59:15:c8:b6:f8:a3:e8:3d:
bc:fc:d6:28:96:83:89:c7:d6:35:e1:24:57:12:b9:
37:3b:70:aa:14:58:0e:80:e7:6a:99:34:f6:40:f6:
13:d4:42:b0:83:10:87:c5:06:1d:4d:90:49:54:91:
dd:dd:c8:e5:39:72:c8:06:77:b4:a5:2f:2f:c1:d5:
64:9e:bd:0d:84:1b:5a:03:15:7d:d3:16:91:1e:eb:
3b:ac:8b:1b:dd:13:53:f4:e5:c8:c6:9f:55:17:e8:
f3:25:94:94:4c:91:42:ec:43:28:83:65:01:25:90:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:46:95:9C:23:25:65:99:FD:6B:32:72:7A:7C:AB:AF:C2:3B:99:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05853A3645AB11EFAB9A018F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.8.0/21
Signature Algorithm: sha256WithRSAEncryption
50:bc:87:eb:28:86:a2:27:16:57:08:ec:b9:15:32:bd:ec:04:
95:fe:31:f8:9e:0a:0b:dc:b4:2c:1d:6c:41:33:42:d8:1f:49:
75:cf:47:4a:77:d6:1f:ac:86:60:05:4c:f1:ae:b8:f7:b5:4f:
6c:6f:9c:67:af:a1:30:c7:32:dc:cb:a0:1a:65:fa:03:b5:f8:
20:96:56:25:81:9b:14:c3:5b:b9:46:5f:07:ad:5d:e9:92:b8:
30:bf:33:2e:ea:ed:4b:c4:b1:31:7a:9d:ec:71:14:b1:dd:f1:
b3:07:80:0b:3a:a8:fd:03:ed:ce:6b:64:37:9b:19:dd:3d:8f:
bf:3c:99:1c:4d:e2:e8:54:47:e4:77:14:08:90:a9:15:92:d7:
12:7b:1f:4c:2d:cb:06:d6:36:e8:51:a9:12:ec:e8:4a:8c:32:
f2:9b:7c:be:b0:2a:0b:f6:2b:02:50:9b:1e:ad:e5:17:c4:91:
56:e4:08:a6:35:51:ae:73:f3:ca:d3:d8:d4:84:8b:a2:c1:3e:
54:c6:73:f7:9e:a4:e3:5b:85:68:15:03:c9:13:3e:5a:52:82:
c1:e4:3c:2a:52:f6:9c:dc:7d:f3:7a:0b:32:e9:a3:6e:65:37:
8a:13:b0:a3:cd:aa:08:fd:ef:7e:8e:00:ae:fc:97:a4:d8:95:
e6:ac:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:53 2024 by rpki-client on console-fra.rpki-client.org