Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1193A88C3E9C11EFBD5A2962762E951A.roa
File: 1193A88C3E9C11EFBD5A2962762E951A.roa (raw, json)
Hash identifier: QOGNedBpb821hkyKENIIs+VQIlMEBVgY/1GdlRT0Jn8=
Subject key identifier: BC:31:56:34:D3:99:AF:DF:D6:83:F3:0B:78:74:4E:A1:B2:4E:3F:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9AA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1193A88C3E9C11EFBD5A2962762E951A.roa
Signing time: Wed 10 Jul 2024 09:09:10 +0000
ROA not before: Wed 10 Jul 2024 09:09:07 +0000
ROA not after: Fri 02 Aug 2024 09:09:07 +0000
asID: 141883
IP address blocks: 156.249.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39588 (0x9aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:09:07 2024 GMT
Not After : Aug 2 09:09:07 2024 GMT
Subject: CN=668e4fb6-3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:f2:ce:25:0c:87:02:23:b6:70:ed:d4:1d:
44:ea:a1:7b:90:d9:f8:87:7f:f2:fb:69:1b:d1:60:
c5:40:d3:73:1c:13:62:e0:a2:ed:09:73:a5:93:9f:
13:c9:74:9c:29:82:8b:30:f3:ad:b6:e5:6e:29:49:
3a:c6:7e:17:41:47:7e:f5:4d:8a:ce:2c:ae:9b:b8:
df:5d:c8:08:40:f8:0b:f9:fd:6a:e1:16:ff:7c:b6:
9b:f3:bc:bb:47:d8:d4:c9:f3:ab:74:03:bf:6a:62:
72:2f:f8:b1:18:8e:52:6e:2c:4b:44:5a:6d:34:61:
1e:53:f7:3b:f2:7c:45:f7:30:10:7f:1c:f3:24:89:
f1:43:ca:93:9c:79:10:6e:71:59:1b:44:2c:14:09:
74:7c:20:b9:e2:83:cc:c4:2e:48:e1:41:e0:32:1e:
50:35:b1:76:79:bc:94:ad:9e:72:0c:1d:14:92:e6:
c2:5a:63:72:11:41:a4:c1:dc:17:b0:f1:12:76:78:
60:0d:bb:95:aa:c3:f1:78:2e:b0:61:9e:be:08:23:
cf:68:a9:d7:b1:17:e2:12:f5:2a:d0:c4:5e:e5:3c:
f4:1a:ef:91:cb:39:21:7f:2e:4e:fc:f3:99:5a:d1:
71:07:bd:61:3a:bb:41:f0:5b:3e:87:9f:aa:a5:db:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:56:34:D3:99:AF:DF:D6:83:F3:0B:78:74:4E:A1:B2:4E:3F:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1193A88C3E9C11EFBD5A2962762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:29:4c:b0:31:1d:ba:95:1f:18:a8:bc:7d:b6:78:3c:7f:37:
a6:92:6f:1f:80:03:1c:d6:ba:90:82:1f:94:7c:46:2c:cb:41:
9b:34:50:dc:30:fd:29:29:33:cb:fd:38:af:ce:69:90:10:38:
2d:e3:08:1a:1b:e1:22:6c:24:d9:08:43:1c:14:7e:74:6b:25:
07:c1:d0:55:07:4b:a0:0a:61:9d:b7:96:1e:cc:08:a9:8c:59:
60:9a:eb:cf:0f:77:4f:af:2e:d5:d8:c9:51:a7:63:19:9f:78:
1d:92:c3:4c:f8:66:68:2a:a7:c6:7b:87:02:be:63:85:03:78:
a3:9e:59:d9:b6:f3:94:d3:9a:5d:79:42:2b:7e:2c:44:a1:0b:
3a:30:26:a7:e9:43:c7:d9:7d:52:ae:2a:04:e4:1e:c0:86:b7:
a7:75:fe:05:3d:d2:59:b2:d1:77:5f:12:95:2b:98:91:3b:58:
ec:43:35:9e:a9:55:ab:ed:82:c6:ae:5d:0a:b8:4c:d1:4e:3a:
18:84:98:81:3a:a2:5a:84:69:c0:ae:70:a7:0f:51:63:5d:a8:
be:8a:d0:ec:64:11:a0:8e:f0:60:2a:f3:be:74:15:5d:75:f4:
3e:bb:ee:10:67:1a:42:7f:79:32:90:a8:02:4e:0e:98:1f:07:
5b:04:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org