Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/144B0C6E406811EFA32D7B8E762E951A.roa
File: 144B0C6E406811EFA32D7B8E762E951A.roa (raw, json)
Hash identifier: MgWCygpWwX8LRX6XqdjfP+bkXJN02SVf8N6lRlwS8QQ=
Subject key identifier: A2:39:05:FA:96:45:31:07:51:60:0B:48:78:42:99:6B:B8:3C:32:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/144B0C6E406811EFA32D7B8E762E951A.roa
Signing time: Fri 12 Jul 2024 16:02:03 +0000
ROA not before: Fri 12 Jul 2024 16:02:00 +0000
ROA not after: Tue 13 Aug 2024 16:02:00 +0000
asID: 138915
IP address blocks: 156.244.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39909 (0x9be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:02:00 2024 GMT
Not After : Aug 13 16:02:00 2024 GMT
Subject: CN=6691537b-ed38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:71:57:e8:3e:9d:ad:f4:ba:03:e2:35:20:
3f:45:ca:23:bf:ce:6a:7c:50:e5:10:e4:18:b0:b0:
ed:ae:fb:3a:d9:2e:20:86:cf:c1:44:b5:91:8a:54:
f7:1b:3b:fc:c8:6c:ef:d9:86:02:64:9f:8e:e9:ed:
56:7f:17:16:63:d2:0a:46:cc:98:6f:98:a9:7c:6d:
a0:8c:0c:ce:0d:36:fd:50:cd:c3:85:bf:5f:80:b2:
91:f8:e0:f0:f2:dd:52:a2:11:ce:00:1d:d6:7d:c9:
60:1e:a0:f4:3a:1f:9e:7a:b3:ae:0b:fc:bf:37:5d:
cf:f6:4f:16:6f:64:2e:f3:e0:6f:cf:3d:c4:b3:19:
82:83:9d:51:ba:78:27:af:0f:a3:59:69:70:31:a6:
36:13:14:24:ce:ed:07:47:6d:86:8e:d2:2d:a1:9f:
27:59:44:64:e8:e6:06:1a:64:3c:ea:c7:67:f6:66:
df:3e:64:d9:61:20:67:75:38:b4:85:a6:1f:07:6e:
f4:fe:03:f2:10:57:3b:df:ba:21:fe:0f:7c:d4:59:
0f:2c:a8:bc:61:44:f5:b8:cc:8a:0b:96:8f:52:66:
a9:cc:b6:07:01:3d:5f:26:74:6d:fd:f5:3c:ad:ed:
bd:c3:9a:57:f0:37:6b:f5:a9:bd:e6:4d:f9:b5:b9:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:05:FA:96:45:31:07:51:60:0B:48:78:42:99:6B:B8:3C:32:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/144B0C6E406811EFA32D7B8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.21.0/24
Signature Algorithm: sha256WithRSAEncryption
69:46:16:f3:e9:f4:28:88:fa:b8:e8:6c:0a:df:d7:03:f6:86:
f7:86:eb:fd:d8:c0:73:c1:d6:4f:5b:68:f0:d7:2b:28:9a:0b:
e4:15:73:77:19:d8:21:d9:99:c5:b1:be:69:bd:f5:f4:4a:54:
8d:0e:3c:d1:c0:0b:0e:d3:98:4c:50:8e:c6:ad:be:4a:9b:22:
51:c3:8a:c8:90:d2:7c:7e:f9:39:3a:fe:20:44:3a:b7:20:ab:
a2:3c:fa:84:b9:a0:ab:ac:84:37:16:a1:2a:4f:e1:e3:fa:8d:
ee:1e:87:bf:a6:83:e7:ac:2c:a0:69:46:aa:9a:bd:1a:b0:56:
bd:b7:7c:3a:c6:3f:39:54:04:3f:88:93:08:b8:b3:b6:1a:3a:
f5:5a:49:46:bb:09:4b:e6:7c:bd:26:a6:ca:e3:af:4a:da:4c:
16:f5:fe:a4:e1:32:1e:86:b3:06:8f:21:88:93:3d:32:e1:cd:
ae:0a:16:47:44:6b:21:50:9b:d4:ea:31:6c:5f:55:7a:d2:e3:
d8:8d:77:8c:22:6a:bf:b7:4b:db:23:69:90:5b:9b:81:4f:8a:
eb:47:aa:8d:c8:6d:5d:1a:32:8c:3d:b5:8d:62:0a:10:11:c7:
ab:d0:b7:ea:d1:4b:80:c1:ef:44:31:10:cb:ae:fa:a3:fe:7a:
14:04:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org