Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18E91706435711EF89633AB4762E951A.roa
File: 18E91706435711EF89633AB4762E951A.roa (raw, json)
Hash identifier: /HJhzBAkny2vXpZuka4iar+jb9o88NiZiVBHGaOewZw=
Subject key identifier: 1E:A6:C0:CB:8F:50:FB:34:26:97:AD:CB:7B:5A:1D:2E:B3:17:A0:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18E91706435711EF89633AB4762E951A.roa
Signing time: Tue 16 Jul 2024 09:38:03 +0000
ROA not before: Tue 16 Jul 2024 09:38:00 +0000
ROA not after: Sat 10 Aug 2024 09:38:00 +0000
asID: 9009
IP address blocks: 156.248.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40099 (0x9ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:38:00 2024 GMT
Not After : Aug 10 09:38:00 2024 GMT
Subject: CN=66963f7b-e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:1d:63:26:23:ef:81:23:d1:14:d7:a9:79:
95:03:16:2d:59:49:a7:c1:9c:d6:9a:72:7a:84:14:
f8:f2:b0:a3:e3:f4:13:ee:71:3a:64:84:40:a0:31:
a9:64:35:54:64:1a:40:26:70:f3:22:b7:57:60:5f:
64:b7:38:9f:04:7f:2b:73:35:9e:b7:bf:e7:53:97:
1f:96:2b:d3:24:8c:9e:91:13:67:74:c4:e2:e2:a6:
7a:05:86:b0:34:3a:2a:51:dd:47:6f:20:84:03:34:
08:e8:0f:c0:95:28:c9:4e:33:59:fb:10:3e:13:a7:
71:9c:4a:ad:b9:b6:9c:6e:73:59:c4:62:f7:10:2b:
68:d7:3a:6e:95:ff:b8:d9:4d:9b:86:4f:ba:96:ba:
31:f4:54:0c:33:c6:37:9d:b0:92:05:14:6f:8e:de:
e2:de:2e:44:e3:40:67:0a:3b:19:87:63:47:57:55:
b3:41:90:16:c5:b2:bf:24:40:e5:8a:ac:89:0b:e0:
e2:c4:58:db:8f:3c:a5:39:9e:70:41:c0:35:cf:a2:
ee:c8:a4:f4:b1:da:52:a3:9f:0b:d2:06:b3:1c:cc:
1f:5c:e2:d1:23:90:df:17:12:f9:7b:5f:9b:03:b3:
5d:18:42:fb:c1:4b:17:07:e8:b7:7f:2f:69:02:53:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A6:C0:CB:8F:50:FB:34:26:97:AD:CB:7B:5A:1D:2E:B3:17:A0:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18E91706435711EF89633AB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.66.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:5d:39:f5:67:e4:a4:fa:93:c4:7a:02:22:e9:80:d0:5c:
8a:78:35:13:d4:66:a6:aa:78:47:46:83:98:ef:de:11:ac:64:
94:ab:81:a6:9f:74:f6:ee:cb:a8:c9:65:3a:9f:63:eb:b3:f0:
0c:18:d9:8f:ba:fb:ec:8a:9b:e7:aa:bb:c2:eb:9b:2d:4f:34:
5b:47:81:33:67:2c:4b:37:7d:0b:9f:7b:16:34:8d:9f:7a:ba:
02:72:4e:21:3f:d7:ea:ed:7a:6a:2b:a2:09:9f:00:7b:b9:bd:
ec:d3:a2:fa:aa:2c:04:bf:6a:52:81:42:43:9b:10:2f:74:91:
01:c9:81:d8:b9:50:2b:b6:0a:2a:f5:e1:93:57:3d:e4:52:40:
19:00:f1:33:a5:3f:b6:4d:b1:01:bd:f6:a3:4f:14:ce:c0:a9:
9c:38:ee:03:3f:9c:ff:b7:cb:28:db:47:80:62:a1:69:d4:67:
ed:05:e6:8e:c6:23:fc:32:90:f4:f6:7d:99:a6:ab:bb:9e:16:
3a:13:6d:fb:e0:e8:7a:57:df:10:0b:24:f9:a4:44:2c:44:36:
0a:95:ae:d5:87:b4:b2:19:ed:b5:33:52:d9:a1:71:73:31:0f:
45:f5:84:58:1a:25:74:4f:2f:c1:63:8e:6b:36:63:d1:d1:da:
67:6f:86:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:41:59 2024 by rpki-client on console-ams.rpki-client.org