Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16DACD3C4A6011EFB272378E762E951A.roa
File: 16DACD3C4A6011EFB272378E762E951A.roa (raw, json)
Hash identifier: shgw9XQWBWsUQXM1D6PDOqT7qRjbRo3Mur9sOLhqkoc=
Subject key identifier: 8E:E3:8B:51:40:CD:47:0C:03:4C:4A:2C:31:BA:D2:87:8A:E1:3D:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16DACD3C4A6011EFB272378E762E951A.roa
Signing time: Thu 25 Jul 2024 08:30:03 +0000
ROA not before: Thu 25 Jul 2024 08:30:00 +0000
ROA not after: Sat 03 Aug 2024 08:30:00 +0000
asID: 22773
IP address blocks: 156.246.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40917 (0x9fd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:30:00 2024 GMT
Not After : Aug 3 08:30:00 2024 GMT
Subject: CN=66a20d0b-e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:e9:b2:f8:27:ee:45:18:eb:ee:af:3f:7b:
60:6d:19:9e:b9:b0:95:a6:c3:0b:f1:02:7a:55:be:
e0:60:b1:6b:1c:0d:5f:85:af:33:48:c3:41:05:f9:
7e:f1:39:e5:12:36:60:74:19:23:9c:b5:41:c8:e5:
29:a4:b4:49:cb:67:35:70:53:35:bb:3a:0e:84:53:
ac:92:5d:e0:d3:d5:a5:13:df:fe:ab:a8:77:80:d9:
9a:b9:1c:83:e0:45:60:a1:9d:24:b7:f5:b1:75:26:
fa:c3:90:0b:01:95:53:f1:fe:e0:9e:47:fe:e6:6f:
98:72:5d:31:d8:48:9d:44:62:90:a5:05:ee:79:5f:
ec:65:cb:74:53:3d:25:17:3a:47:9e:55:6d:45:80:
db:29:47:70:e5:c2:f1:f9:99:8b:45:a0:9b:20:89:
0e:8b:b2:32:31:d3:59:68:e9:1a:c1:08:57:98:95:
c1:c8:c2:b5:d3:76:78:88:4c:de:92:18:35:4a:34:
80:ff:6c:64:3c:b1:47:57:41:f3:fc:96:5e:a8:eb:
d4:13:28:d4:ab:38:ea:30:4f:78:99:58:5f:dc:14:
1a:13:56:a7:c0:77:77:58:96:10:99:1d:c6:5b:4b:
f3:09:dd:ea:3c:ad:70:f6:8f:17:16:a7:20:55:09:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:8B:51:40:CD:47:0C:03:4C:4A:2C:31:BA:D2:87:8A:E1:3D:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16DACD3C4A6011EFB272378E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:73:15:25:b3:4f:b9:8a:36:dc:fd:c5:0f:54:f4:da:b3:96:
58:4d:e9:be:12:78:f2:f0:07:a1:e1:2a:62:a2:84:ff:ed:9e:
46:49:bf:c0:50:61:94:1c:79:51:a2:2c:2b:25:5a:1c:3d:4e:
3d:41:2d:c2:7d:94:84:60:0b:93:fe:d5:36:73:55:c8:d4:47:
94:9b:4f:a7:31:52:14:57:c2:60:59:ff:9f:06:28:71:e9:d2:
a8:2d:77:63:7c:7e:34:c7:58:b5:f0:e2:7c:25:d6:62:52:a1:
40:00:cb:f8:78:78:ad:7c:23:5a:34:dc:aa:bd:e2:4f:ab:2a:
82:c4:87:7d:3e:bb:f1:b4:4c:d2:a6:14:b5:83:d1:ee:75:98:
38:f4:91:3c:08:92:75:ff:b8:0b:ef:9d:23:30:39:ef:81:61:
b9:c1:b9:82:f6:10:f1:57:38:2a:d6:f1:68:ba:44:28:cd:f0:
99:d7:dc:0b:3e:cd:f0:ac:59:ea:45:81:8e:69:e7:c6:a5:0d:
7d:e6:45:96:94:4d:b8:65:eb:f7:dd:66:ca:03:23:0d:0f:3c:
e0:d3:3c:df:2f:86:49:57:2e:11:d7:1c:16:e5:48:38:9c:83:
d2:4f:94:84:d8:53:62:79:29:ea:75:1f:b3:c4:cc:0d:af:d7:
f8:2f:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org