Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAD29244A7411EF8F92A196762E951A.roa
File: 1EAD29244A7411EF8F92A196762E951A.roa (raw, json)
Hash identifier: wDCnkxtntBcREmlI67jelU1TTlL6VUYepjKLuZXU1AU=
Subject key identifier: 6B:00:0B:12:C6:EA:62:44:21:0B:B4:0C:88:90:9A:EA:11:FD:02:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A049
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAD29244A7411EF8F92A196762E951A.roa
Signing time: Thu 25 Jul 2024 10:53:26 +0000
ROA not before: Thu 25 Jul 2024 10:53:23 +0000
ROA not after: Sun 04 Aug 2024 10:53:23 +0000
asID: 5065
IP address blocks: 156.255.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41033 (0xa049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:53:23 2024 GMT
Not After : Aug 4 10:53:23 2024 GMT
Subject: CN=66a22ea6-2b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:4e:06:7d:35:d5:59:ba:ac:7b:bd:d5:d8:
d2:7d:40:e1:49:0e:c9:29:c3:77:a8:94:2b:87:73:
00:d0:48:c4:a2:8b:e2:0a:17:cf:07:ea:19:3a:6a:
70:22:0f:2e:e2:69:a8:7a:e4:76:75:eb:c5:bf:96:
14:85:bc:bd:04:43:27:e7:95:2b:55:7a:ea:2f:91:
92:a4:12:fe:2e:3a:6c:1f:f2:21:1c:c8:40:43:5b:
66:6f:bd:13:df:2e:96:db:63:ef:33:90:10:3c:97:
df:e9:61:0e:7c:e1:79:4a:b8:ba:a0:6b:c6:ae:1a:
df:a3:80:bb:5d:12:64:84:5f:1d:6e:42:3c:ba:43:
69:a8:fd:d8:17:15:82:7f:e6:16:05:32:8b:5a:82:
4e:2f:48:15:b5:27:bf:13:7d:03:49:b3:b3:f2:f2:
a0:ee:43:6d:43:a1:12:9f:84:99:a9:82:71:38:56:
74:f6:2f:85:ce:19:56:cf:87:50:2e:60:2f:aa:b9:
25:72:57:f3:f0:ac:d2:10:85:12:c3:0a:a7:46:81:
6c:27:a1:f4:57:c1:8d:70:4a:9d:51:1c:02:10:2e:
9e:b4:6a:35:b7:31:80:b6:36:59:f4:2b:b1:67:f9:
d8:f0:ad:f0:67:5b:97:b7:0d:15:c0:59:7a:23:f6:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:00:0B:12:C6:EA:62:44:21:0B:B4:0C:88:90:9A:EA:11:FD:02:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAD29244A7411EF8F92A196762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
24:63:30:a1:2b:bb:7a:a1:9f:02:fe:59:1d:b6:ed:50:8a:b7:
45:f1:2f:22:ab:96:f8:5e:13:f2:83:b4:cf:49:8b:a0:4c:ad:
34:c6:96:2b:9a:e0:7c:f7:94:7b:60:df:49:43:87:bd:60:c2:
00:42:ac:ca:e6:13:6b:92:13:90:91:43:61:82:bb:47:5d:d9:
2a:29:8e:f3:30:83:1a:1b:26:de:70:1c:97:ef:7c:f2:09:30:
c7:10:57:80:ef:20:09:67:cb:1f:e1:ae:7c:1e:5f:d7:b3:2e:
e1:bc:ce:bb:60:49:05:49:28:85:30:9d:56:a8:5b:62:08:90:
a7:c4:f3:b2:f5:f2:f4:57:2c:2d:2d:d8:18:a9:30:2c:fc:30:
c7:51:d4:29:3b:28:3f:23:f6:c8:87:fc:ea:ff:6d:6d:39:1d:
f9:ae:60:25:78:60:e9:d2:dc:d6:42:d6:0e:4e:a4:e7:d3:02:
c7:8b:0a:6c:79:1c:c0:9f:81:89:30:e9:ff:41:1e:9e:32:0b:
72:58:8e:75:a1:02:71:29:1e:de:65:ea:67:b9:e1:16:fe:ce:
e6:91:39:26:cb:e3:87:8d:47:01:18:6c:ec:10:b3:05:3f:c3:
54:16:85:a9:db:90:85:ca:8b:ae:22:a1:d2:1a:69:b7:29:ef:
2e:e5:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:47 2024 by rpki-client on console-fra.rpki-client.org