Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2230DC7644F211EFB4D5CEA2762E951A.roa
File: 2230DC7644F211EFB4D5CEA2762E951A.roa (raw, json)
Hash identifier: vnyJOv34SoBI3/jFYQId8Bf85MzhnYwka8qVI8H8bUE=
Subject key identifier: 5B:80:72:9C:96:BC:10:A6:CF:C3:EF:83:64:FE:D3:0C:E0:EE:74:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2230DC7644F211EFB4D5CEA2762E951A.roa
Signing time: Thu 18 Jul 2024 10:40:22 +0000
ROA not before: Thu 18 Jul 2024 10:40:18 +0000
ROA not after: Sat 27 Jul 2024 10:40:18 +0000
asID: 5065
IP address blocks: 156.235.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40297 (0x9d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 10:40:18 2024 GMT
Not After : Jul 27 10:40:18 2024 GMT
Subject: CN=6698f116-a84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:d0:c2:6b:48:c7:df:92:3b:13:54:90:a7:
cb:30:f0:fc:2d:9b:18:b7:45:1d:6b:23:b5:ec:f6:
4b:44:95:5c:47:7e:0b:03:b6:da:3a:74:2e:2a:b3:
55:d5:ae:cf:dc:9b:93:97:28:90:a8:c0:a4:3e:58:
c7:b0:35:4d:a9:be:42:62:07:f5:1f:fe:47:01:5e:
c0:bd:00:aa:ca:13:c1:14:36:ca:5f:cc:fe:23:b2:
2c:64:58:ce:0b:9b:bc:b7:0e:5a:8c:64:74:52:2d:
51:40:cc:db:30:a3:a3:0f:d5:51:d4:3a:41:70:7d:
81:79:48:19:52:b2:54:03:cd:c6:fb:28:bf:3a:60:
ac:4b:80:da:06:4b:9f:a5:5f:ae:ad:24:cd:1c:a9:
00:81:53:bf:11:8d:68:57:a0:20:b0:84:24:45:f5:
e2:c8:ee:2c:a3:d4:7b:8c:e8:f3:7d:f1:66:c8:ca:
ce:45:f2:42:84:cf:70:00:bf:5c:78:c2:8c:3e:59:
c1:59:b4:62:22:14:4d:6b:86:be:4e:14:a3:7c:52:
1d:86:44:81:5f:a2:a5:16:bc:b2:ea:71:e2:20:de:
4a:61:8b:f6:9f:0b:e3:cc:0e:52:f9:3f:9a:50:8d:
54:1e:8c:94:83:f2:87:ba:36:a9:c4:f2:9b:28:d1:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:72:9C:96:BC:10:A6:CF:C3:EF:83:64:FE:D3:0C:E0:EE:74:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2230DC7644F211EFB4D5CEA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c3:90:25:76:31:ae:70:23:7f:b1:a6:e8:32:91:ac:e7:35:
d7:6e:d6:e2:64:af:b3:d4:3d:77:25:79:7c:fe:43:6a:e7:fa:
b0:5e:7c:1f:e2:14:7a:c4:15:0e:ec:3c:f4:7f:77:93:3a:da:
0c:dc:08:57:15:74:b0:a9:8d:a7:f4:f9:d2:eb:57:3e:b2:00:
2e:73:aa:20:6e:70:d4:21:51:f6:4e:7c:7c:d6:aa:fe:da:c1:
a7:a3:2a:bf:75:62:8d:07:57:6b:ee:c7:2f:2d:10:f3:69:55:
3b:5e:c1:23:4d:ca:48:fa:5a:77:dd:2c:f1:d1:85:5f:d3:20:
6a:53:d2:df:8d:08:56:dd:da:00:80:ed:17:af:47:07:8c:b4:
10:2c:48:a4:03:7c:f4:0d:20:5e:12:62:83:53:0b:a3:32:f7:
cd:a3:7f:0d:13:13:0c:06:c0:39:e4:db:c1:3d:17:98:2a:8a:
2f:db:aa:67:07:34:38:75:55:8c:3f:4c:83:80:a7:1b:09:83:
b3:5d:b6:aa:83:8b:21:f0:34:42:9f:46:f0:8a:9d:5c:9c:28:
0a:b0:c3:44:7e:8a:c2:f0:bc:3f:cd:81:2c:a5:c5:20:d2:63:
5c:9b:94:67:a4:f1:29:12:d0:b8:bf:6d:f5:3c:03:97:28:51:
dd:e6:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org