Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1462763E02FF11EF926DDE50017001B1.roa
File: 1462763E02FF11EF926DDE50017001B1.roa (raw, json)
Hash identifier: BR9rbiaz2CvYU+4bahXl9z9ARYgLKFU4THBQOBiW9eQ=
Subject key identifier: 29:AF:D8:8D:81:FC:07:68:D7:D6:2C:7E:38:6D:8D:00:B8:98:D7:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8539
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1462763E02FF11EF926DDE50017001B1.roa
Signing time: Thu 25 Apr 2024 12:26:45 +0000
ROA not before: Thu 25 Apr 2024 12:26:42 +0000
ROA not after: Sun 05 May 2024 12:26:42 +0000
asID: 211392
IP address blocks: 156.239.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34105 (0x8539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 12:26:42 2024 GMT
Not After : May 5 12:26:42 2024 GMT
Subject: CN=662a4c05-5e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:15:52:37:8e:47:e7:41:5d:b7:1a:2e:f6:
d6:fc:b1:c9:cd:c0:c3:be:66:96:1e:85:de:d6:13:
99:cb:50:5f:91:70:e3:ba:45:f7:b7:38:25:e2:b6:
60:1f:48:00:c3:92:a3:94:00:67:5b:ed:b4:29:d2:
f0:ba:ca:84:b7:a5:ee:be:ad:12:06:f1:a0:ba:2c:
f2:5d:7b:ca:48:4f:53:28:52:9a:04:9c:f8:ea:b9:
65:32:6b:95:7e:14:59:81:73:54:e9:c4:df:5a:6b:
11:65:7d:76:c7:75:0e:4c:30:5a:5b:ba:31:40:fe:
37:05:72:a9:03:f3:a6:37:6c:6a:75:56:84:83:b5:
a3:c4:e5:b1:41:16:35:8c:f0:56:31:0d:76:0a:95:
5c:b4:4a:bd:96:2a:0b:c8:fb:42:b6:20:c5:16:dd:
d5:bd:be:ab:c4:76:88:43:98:3f:25:f4:f5:6a:cb:
7b:82:08:5e:dd:9b:37:17:e8:c9:13:62:56:e6:22:
e1:d2:f2:fe:97:c8:dc:9f:db:18:c4:2c:f1:51:7f:
fa:8d:79:de:6f:27:d4:f8:1c:ec:7d:59:19:63:e4:
be:fe:e4:01:fc:a0:eb:b3:b7:18:ce:40:60:41:2d:
14:32:72:e7:1d:96:00:61:50:2a:00:1f:62:52:e1:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:D8:8D:81:FC:07:68:D7:D6:2C:7E:38:6D:8D:00:B8:98:D7:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1462763E02FF11EF926DDE50017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:55:3c:77:05:87:24:78:5f:ca:74:24:eb:dd:dd:30:80:83:
02:1d:6d:5c:b7:b9:03:fe:80:12:a3:93:7c:26:85:f7:73:75:
7b:c6:36:bd:08:92:34:46:77:10:f7:4c:66:66:2b:d7:de:aa:
0b:67:5f:db:99:3c:a7:f6:35:37:3d:8c:3c:7f:e4:e1:9a:fc:
95:e7:f4:6e:a2:31:fc:d5:e1:bc:90:07:a0:b2:ef:2a:d6:49:
1a:4e:ab:28:9e:31:86:02:bd:bb:87:30:cc:2a:a3:29:72:12:
ff:0b:7c:13:ae:cd:b5:83:7b:6a:a2:fa:a5:c9:ac:60:a1:f3:
2a:8b:bb:8b:5b:b1:97:a2:99:e7:14:52:9f:58:89:ee:2f:e7:
00:12:e5:c4:39:98:a6:c4:09:3d:11:d6:25:81:69:cb:f6:bf:
2b:02:b5:67:c5:60:a5:21:40:36:68:1d:2c:a8:70:f5:f7:13:
f5:95:3a:ff:f9:86:66:bd:fb:84:ad:d8:60:b3:0f:1b:63:15:
c8:e9:1c:62:f7:d3:e3:be:ed:a2:bd:e7:b8:03:7f:53:e1:83:
35:a6:fd:5c:27:e2:90:9a:37:9e:1b:31:85:23:39:23:9f:c3:
e6:ca:6a:3d:97:81:fb:59:f3:6f:7a:ce:d5:e5:e8:55:b0:87:
ea:da:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org