Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/095EFAB40DB311EFA642090B017001B1.roa
File: 095EFAB40DB311EFA642090B017001B1.roa (raw, json)
Hash identifier: 1TeE0NqXlQT2Fq87J13GX4OpGL3nucU0EDG554cJB3c=
Subject key identifier: 02:02:9C:FD:7B:1D:16:E3:66:F0:F2:95:5C:67:9F:04:4B:53:66:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 88AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/095EFAB40DB311EFA642090B017001B1.roa
Signing time: Thu 09 May 2024 03:20:08 +0000
ROA not before: Thu 09 May 2024 03:20:05 +0000
ROA not after: Sat 18 May 2024 03:20:05 +0000
asID: 44559
IP address blocks: 156.233.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34991 (0x88af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 03:20:05 2024 GMT
Not After : May 18 03:20:05 2024 GMT
Subject: CN=663c40e8-27e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:aa:83:7c:ce:76:d5:e5:5a:62:dc:4c:e8:
cd:72:2e:53:f9:10:0c:c7:9f:99:7a:19:f9:2a:f9:
bb:cf:6e:6b:5b:08:b7:b9:92:4c:c7:35:65:0a:00:
5d:1c:ce:c2:9a:be:fd:c5:b2:3d:70:c3:a1:f3:8f:
1e:9e:eb:02:d6:c1:0e:34:50:89:c8:27:fd:77:00:
16:0c:da:39:ee:10:12:25:ad:eb:ea:68:40:4a:54:
71:4e:18:e2:3f:bb:22:48:44:aa:5e:b5:0a:fc:71:
6c:14:9e:55:4e:b6:50:9e:90:4f:53:d4:0e:ee:35:
55:92:f5:f4:71:9a:ef:ee:43:5a:f6:67:3a:5e:b8:
d5:9c:32:9e:17:26:c0:42:01:99:e4:30:94:c4:9d:
83:01:94:9e:d7:d6:db:99:3f:14:dd:f5:75:39:21:
da:04:c4:1b:3b:ca:00:23:a0:f8:6c:78:4a:53:00:
3e:f6:63:ed:97:b7:8b:3e:f4:5b:5d:9b:1f:51:aa:
03:91:32:59:ef:bd:56:e3:d9:f8:d1:38:8c:71:61:
8a:78:51:1b:3c:5a:21:a1:a0:de:86:7d:65:5c:e3:
f0:90:94:cc:a4:84:b1:5b:2a:52:38:ef:04:a2:7c:
3a:7c:39:63:0e:d6:51:c1:a9:ab:1f:99:15:fd:62:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:9C:FD:7B:1D:16:E3:66:F0:F2:95:5C:67:9F:04:4B:53:66:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/095EFAB40DB311EFA642090B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:01:3c:5b:de:af:8f:cc:8f:83:d3:da:c4:89:ef:52:dd:32:
7f:d0:ee:b2:ac:c4:8c:8c:84:23:4b:be:18:14:15:08:e7:76:
bb:99:5f:80:74:1a:d3:b1:66:97:4f:a5:87:79:59:0e:a3:f0:
df:6b:d4:d2:51:a4:bd:90:16:28:37:68:69:98:5e:9e:3d:91:
fb:25:4c:04:b3:ae:f5:cc:24:1d:ce:9f:37:05:a7:c0:cb:11:
48:6e:40:b0:19:1f:f8:a5:04:c9:7f:14:51:42:e4:f1:f9:59:
ea:5f:b4:ae:8b:d9:6f:db:b0:22:af:a7:ee:aa:39:13:3e:e8:
d9:8d:ed:ba:b8:f4:22:c6:ce:1b:e9:34:82:20:ea:0d:96:25:
7a:39:a8:e0:6f:47:d9:28:6a:d9:4e:a9:fa:6c:71:ef:34:22:
29:6c:b7:e4:92:22:5e:7f:e0:2a:0c:c0:7d:d6:23:f4:ad:89:
53:de:1c:96:6a:e5:23:04:09:9b:7e:9e:59:06:3f:45:f6:d6:
0a:20:38:47:7d:dc:9c:a5:ea:c2:c3:36:c4:3e:1e:60:49:59:
f7:fc:a2:35:5f:78:41:c6:e8:22:c2:03:6a:30:ab:e7:c1:1c:
2f:84:6a:ad:ee:93:81:66:f2:e7:07:b0:ae:c7:1e:4c:d2:bc:
eb:14:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:38 2024 by rpki-client on console-ams.rpki-client.org