Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0689F0D047D511EF9EFA8944762E951A.roa
File: 0689F0D047D511EF9EFA8944762E951A.roa (raw, json)
Hash identifier: w5wzoI/zPKny9ZA6dihfRA7iJP46pw1cDuI0Zz5utDA=
Subject key identifier: 5C:02:AB:2A:8C:A1:3E:CF:63:89:55:5A:24:3B:45:A3:0F:F0:29:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0689F0D047D511EF9EFA8944762E951A.roa
Signing time: Mon 22 Jul 2024 02:49:33 +0000
ROA not before: Mon 22 Jul 2024 02:49:30 +0000
ROA not after: Fri 23 Aug 2024 02:49:30 +0000
asID: 44559
IP address blocks: 156.246.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40401 (0x9dd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:49:30 2024 GMT
Not After : Aug 23 02:49:30 2024 GMT
Subject: CN=669dc8bd-1f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:15:c9:cc:83:f4:78:36:fd:ba:c0:e2:fc:
8a:05:e1:de:13:0f:e5:2f:9f:11:00:22:2b:ef:da:
d6:06:7e:36:43:6f:de:f4:31:8f:d7:dc:f4:a2:50:
30:fe:a1:fa:5e:9b:0b:9b:5a:01:c4:35:6f:29:e7:
18:cf:3d:34:ca:23:a7:47:0e:03:71:cd:b7:06:fd:
8d:45:d5:19:dd:d6:a2:65:7c:07:77:c2:af:10:02:
b5:51:71:d5:55:bc:8a:8a:f0:9b:07:0c:90:f5:6c:
42:d4:37:c3:c5:28:05:0e:4c:c8:07:7c:cf:2c:e1:
c9:84:76:74:20:5b:75:c8:20:c2:ee:6a:4e:8c:cb:
60:fd:85:7b:fd:23:43:f6:23:34:f9:12:71:a3:45:
53:10:dd:ba:e7:56:c6:40:8d:c3:dc:61:a9:72:ae:
1b:a7:60:4d:21:9f:30:e3:14:6e:45:95:ae:6c:23:
bb:12:f2:12:5a:8d:af:2a:2d:ce:fb:5c:88:50:fe:
82:44:55:61:92:15:1a:d8:b1:89:59:d7:07:1b:d3:
ba:61:ed:ab:38:97:cc:fd:ad:c3:12:15:c6:ee:7c:
5d:c2:91:f9:fb:ee:4e:f3:f4:f4:05:bd:b5:23:3f:
84:91:a3:58:bc:9c:e0:60:ec:98:b9:7a:89:8f:5a:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:AB:2A:8C:A1:3E:CF:63:89:55:5A:24:3B:45:A3:0F:F0:29:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0689F0D047D511EF9EFA8944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.246.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b2:a8:c8:e2:93:87:4d:6e:24:2c:59:38:85:8d:2c:2a:23:
fc:9d:b3:f8:27:0f:cf:a3:c0:d0:a4:21:9d:9e:df:07:4e:56:
74:6b:8b:01:bb:42:da:23:ca:aa:de:25:80:5f:b2:34:ca:19:
2e:28:54:9b:14:c8:dd:76:75:ae:13:c2:20:2a:76:65:0d:8a:
24:5b:76:12:17:c5:4d:a1:53:4e:3b:4a:7e:84:6e:b2:38:cb:
72:3c:99:c7:a7:6c:89:71:b1:92:e6:c9:c0:2a:3c:25:a0:61:
0f:86:41:c8:00:5c:0e:54:2c:f3:0d:f5:51:a4:ee:b2:bb:8b:
d9:78:14:61:9a:c1:76:f8:84:99:d0:03:c3:17:2a:2b:8d:91:
16:78:7d:d0:f2:c0:3d:ce:08:19:4e:82:1b:27:5a:4f:7f:a8:
2c:6c:a7:c7:d0:64:6c:94:46:44:68:0a:59:6c:cf:e5:50:72:
89:86:2d:cd:a7:e6:24:88:dc:2a:c8:fc:f6:b8:12:fb:1e:4f:
50:53:2e:8d:93:a9:09:c6:66:28:64:2a:43:e8:34:22:38:a2:
80:fa:f6:64:d0:85:bd:5a:82:1f:2c:02:48:4d:11:47:5e:a4:
5e:c9:6f:8f:27:74:48:d4:53:12:e7:71:8c:38:22:f9:ad:65:
d6:0c:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org