Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249FF7523CD311EFA17C6C69762E951A.roa
File: 249FF7523CD311EFA17C6C69762E951A.roa (raw, json)
Hash identifier: L5GJJ64u/Aw79GE5lgFuZJVJCKJUlVOTb7Mv3Stwn+A=
Subject key identifier: 88:83:39:5D:A5:A0:BB:5F:AD:24:B0:D6:4D:FD:C8:FD:45:92:AB:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 997C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249FF7523CD311EFA17C6C69762E951A.roa
Signing time: Mon 08 Jul 2024 02:38:22 +0000
ROA not before: Mon 08 Jul 2024 02:38:19 +0000
ROA not after: Sat 10 Aug 2024 02:38:19 +0000
asID: 64267
IP address blocks: 156.248.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39292 (0x997c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:38:19 2024 GMT
Not After : Aug 10 02:38:19 2024 GMT
Subject: CN=668b511e-8f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:70:fe:53:51:e5:dd:b6:b2:60:d4:09:0e:
38:0b:13:a9:a6:be:07:f3:d0:07:9f:4e:0e:52:55:
2f:2a:5f:4a:af:21:07:8f:a0:22:bb:a5:46:ba:c8:
96:f6:31:c6:7b:1c:00:5c:7f:f7:7a:a7:4f:ce:ad:
2f:f0:45:b9:f4:49:d0:a4:61:ef:a0:f8:93:08:f6:
e0:cf:83:3c:cd:b6:88:54:db:9a:1a:2c:ea:08:fa:
7d:37:a0:51:15:51:73:ac:8b:9e:fb:31:f4:1e:56:
bf:dc:ed:86:e2:5c:cd:6c:7a:6d:34:fb:6a:64:ea:
bc:9a:01:70:81:7e:bd:c7:cd:d0:6f:2a:37:fb:9d:
c4:65:35:47:38:ab:95:3e:3b:ba:f0:2f:cc:b9:37:
65:ea:41:08:bc:56:23:15:7f:c1:01:d5:ed:c0:c9:
1f:c5:53:3d:5c:45:b8:0d:4f:b6:fa:44:14:df:a0:
03:59:69:eb:8c:25:75:b8:7f:d4:58:ed:98:88:8d:
46:e0:55:41:27:13:38:c9:59:ca:36:9d:ec:0d:fc:
47:72:25:84:bb:6f:65:2d:a6:89:ef:46:ce:9b:c6:
af:6f:5b:af:e6:d5:29:1d:7e:4f:9c:db:ac:30:b2:
c8:e1:01:56:f4:53:95:e6:81:ed:80:a5:f0:1f:9e:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:39:5D:A5:A0:BB:5F:AD:24:B0:D6:4D:FD:C8:FD:45:92:AB:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249FF7523CD311EFA17C6C69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.65.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:04:87:d1:90:23:7a:00:cc:fe:22:f2:4a:99:aa:74:50:53:
4e:e1:4e:6d:6c:74:23:73:14:2c:67:d8:32:c0:81:45:a1:ca:
bd:84:a6:ab:48:58:64:15:87:49:04:f3:b1:44:d2:2a:fa:55:
d6:75:af:58:9e:04:52:6b:c3:eb:ff:8f:9f:7a:db:98:70:90:
ed:50:a0:14:be:78:4c:f3:50:dd:72:c2:cc:c9:84:dd:d7:70:
cf:e4:41:56:97:56:32:86:e1:22:28:b1:33:e2:29:55:da:0d:
2a:78:a1:59:50:4d:b3:bd:54:1c:0d:0d:4e:82:a5:95:39:d7:
87:d5:0a:dd:c2:7a:9a:65:77:38:6e:11:51:53:79:d6:62:2d:
3e:e6:46:0d:bb:b5:e7:62:45:1c:31:2e:36:3a:c6:72:2b:ed:
6a:5a:83:ae:d3:c9:02:2b:27:b9:d2:34:e6:a3:09:0e:1e:a1:
61:6a:04:7c:90:4d:2c:35:a5:34:ca:fe:a7:77:74:4a:99:50:
72:e2:83:08:c4:9c:48:ec:90:0f:70:56:53:a1:3c:54:0c:b8:
3c:53:8d:f3:0d:6f:5d:67:ea:bb:04:f4:5a:ce:99:67:58:07:
15:7e:ac:fd:c4:f7:0c:79:6a:d2:2c:3b:ef:d6:db:cf:ab:c2:
e5:e4:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:32 2024 by rpki-client on console-fra.rpki-client.org