Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1468A45A4A6211EFB3C9EE9B762E951A.roa
File: 1468A45A4A6211EFB3C9EE9B762E951A.roa (raw, json)
Hash identifier: biBE3W44gD27cUijNX8y5bclk9mlG/oOVFzuPm3RL+I=
Subject key identifier: 47:4B:A6:22:C7:5D:35:57:EC:3C:94:CB:76:94:A5:4C:54:49:6E:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1468A45A4A6211EFB3C9EE9B762E951A.roa
Signing time: Thu 25 Jul 2024 08:44:18 +0000
ROA not before: Thu 25 Jul 2024 08:44:15 +0000
ROA not after: Sat 03 Aug 2024 08:44:15 +0000
asID: 22773
IP address blocks: 156.229.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40949 (0x9ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:44:15 2024 GMT
Not After : Aug 3 08:44:15 2024 GMT
Subject: CN=66a21062-13e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:d0:a8:64:f4:42:99:0c:af:88:cf:5e:37:
77:f4:d1:bb:20:22:dc:d5:f9:25:ed:f4:2d:2b:c1:
fb:c7:c9:f8:d8:2c:3d:0b:24:dd:7b:64:82:a8:1e:
90:59:51:3e:05:3f:fd:e2:95:90:45:8e:40:bd:4c:
ac:4d:82:cb:71:aa:12:bc:76:9a:67:de:51:b0:4d:
a7:32:2a:03:00:8c:80:c0:29:7b:cb:ec:d7:23:73:
60:9c:11:90:d7:1a:00:cd:d9:33:79:83:3b:bb:5a:
f9:28:1d:7d:67:17:92:0e:58:c4:9a:41:e8:4a:1a:
ff:c9:2b:e4:a9:ef:da:07:7d:10:fc:3a:92:93:c3:
b2:7d:c1:2a:1d:84:44:a2:2b:3a:61:8c:94:84:c8:
1a:e9:d6:76:41:ce:7f:55:e3:b7:e7:29:17:ce:b6:
f0:e9:6a:01:e9:11:d7:26:4a:fa:d9:0a:d1:0f:92:
fc:02:30:c1:02:a3:4d:1b:f8:c3:e1:67:48:fe:ae:
7c:de:43:f2:8b:66:2e:4e:d7:49:13:67:4a:2d:6f:
55:d8:21:7b:79:dc:46:c5:ae:73:e6:a9:f1:e7:9d:
0d:3a:c7:c0:56:cf:33:0b:1e:44:44:41:ff:45:9a:
c0:be:a0:2b:5a:ab:31:7d:b3:e7:dc:be:ba:98:04:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:A6:22:C7:5D:35:57:EC:3C:94:CB:76:94:A5:4C:54:49:6E:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1468A45A4A6211EFB3C9EE9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.4.0/22
Signature Algorithm: sha256WithRSAEncryption
39:e9:3e:2d:79:07:29:e1:2c:bc:f3:34:31:d9:e4:a9:75:fc:
c2:f7:7b:43:5a:1c:1d:f5:bc:3f:a2:46:44:cf:08:52:f2:d7:
ed:5d:d2:b7:fe:f2:40:25:d1:f5:c2:ab:3f:8d:6d:8c:a9:fe:
eb:80:1b:7a:91:86:99:24:6c:59:0b:a0:21:84:70:14:44:72:
75:c4:86:c1:f4:b1:05:60:55:5b:6b:83:90:44:79:de:9c:1b:
9f:0d:64:49:ab:7c:79:2b:a6:1e:5a:f1:17:af:2c:e9:be:8c:
e5:75:1b:a2:20:65:96:f7:d9:80:a0:5c:26:6c:a1:23:70:1b:
b4:45:a7:09:7f:d8:2f:8b:0f:ef:24:46:99:c6:79:7c:f3:4a:
32:f5:3e:69:a9:0a:84:23:13:c5:fc:4b:64:0e:b1:ca:8d:1b:
b4:e9:a0:a3:37:51:fd:33:1b:da:e0:37:6b:b6:38:a4:c3:a9:
38:a3:13:94:1a:7b:62:ae:c0:4a:df:f6:7c:8d:26:71:2d:eb:
5b:86:0b:36:57:88:92:a7:01:77:fe:4d:5c:06:8a:77:1c:64:
80:27:aa:1d:cc:2f:6f:f8:9d:2b:0a:e8:65:3f:27:3c:4b:40:
97:b3:0a:a5:83:0a:00:a6:f6:6a:a3:de:2b:03:f2:8d:c3:8e:
4f:10:dd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org