Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2693726C4A5411EFB3687ABC762E951A.roa
File: 2693726C4A5411EFB3687ABC762E951A.roa (raw, json)
Hash identifier: aF4XHg7WVNQ5Z43uF6hgRxBYeUxMFymIwSkzs60g8n0=
Subject key identifier: 40:1B:82:B0:26:F5:C6:C8:08:A1:A8:6A:D2:59:A5:38:BB:E4:1A:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2693726C4A5411EFB3687ABC762E951A.roa
Signing time: Thu 25 Jul 2024 07:04:36 +0000
ROA not before: Thu 25 Jul 2024 07:04:32 +0000
ROA not after: Fri 16 Aug 2024 07:04:32 +0000
asID: 142062
IP address blocks: 156.238.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40847 (0x9f8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:04:32 2024 GMT
Not After : Aug 16 07:04:32 2024 GMT
Subject: CN=66a1f904-5cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b5:16:68:74:6b:7e:b4:44:b0:18:2d:ab:34:
31:52:5d:05:81:28:89:a5:39:7d:62:bf:fb:04:fe:
20:1c:04:ec:c0:76:13:b2:4b:e2:4c:56:11:79:01:
20:1b:85:bd:ec:07:d6:79:db:cb:5f:9b:d4:1d:4c:
56:c9:1b:7c:67:6a:cc:3c:44:8c:2f:26:3e:1e:43:
cc:07:16:4a:36:8f:9b:26:1c:b1:c8:b5:37:50:33:
70:de:77:e1:c5:9c:66:8c:ae:18:0b:3c:a1:9c:7e:
7c:ee:a0:4c:9e:bb:26:1b:b3:9a:4d:d9:9c:84:9f:
46:cb:3f:ba:d5:af:a1:cc:01:9d:fe:b7:dd:e9:7a:
21:1d:8e:68:2c:a2:a3:f9:12:9b:29:d4:93:1a:58:
04:aa:79:34:fc:4f:f6:07:a7:0f:55:6d:11:52:c5:
23:4a:ed:a9:13:8c:07:e9:41:77:0e:07:0f:ff:8e:
c6:20:1f:93:09:db:b8:0c:e0:d7:31:82:3b:4e:cb:
2a:93:23:be:22:de:e6:ef:a3:06:5b:31:83:dc:37:
91:0f:6c:32:37:c7:fa:b0:75:bb:0c:cb:1d:91:78:
41:62:77:9b:7e:3a:d2:6f:9f:8b:83:e9:a8:a2:4d:
54:a2:4d:cd:07:77:3b:bf:78:8b:d9:7e:84:e2:80:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:82:B0:26:F5:C6:C8:08:A1:A8:6A:D2:59:A5:38:BB:E4:1A:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2693726C4A5411EFB3687ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:38:23:c4:c2:47:61:af:22:05:8f:63:83:1f:d9:e1:93:47:
99:cc:5f:b6:07:d2:22:27:09:ac:db:58:2e:87:84:88:13:51:
0e:a9:39:f8:b3:c0:35:8b:f9:74:94:dc:fa:b5:92:d6:4c:04:
2a:41:6a:17:36:fd:b8:05:99:5a:d3:7e:d0:3c:c5:85:eb:67:
c5:96:4a:be:79:1b:e5:91:13:79:c6:20:f9:7e:fa:01:ee:a7:
1e:03:0a:69:cf:9c:4e:7d:2b:6e:69:e7:3b:b3:bb:76:17:9b:
2a:92:17:8a:a2:bc:ac:2a:5f:2f:b3:91:e7:b4:95:9b:5c:5a:
a7:91:15:0c:9c:e4:d5:a7:4b:89:bc:07:07:66:dc:79:0e:b3:
80:2c:db:76:e0:2b:c5:b2:79:55:50:5f:80:26:91:d8:1c:00:
a1:33:c5:1f:8d:32:3f:5b:61:34:38:d3:e7:2e:73:50:8f:cd:
21:4b:88:fa:d7:22:c4:da:34:59:90:1a:c0:c0:72:ba:6d:a2:
8a:ad:18:56:c1:8b:fd:f3:9b:97:7b:77:01:28:41:b6:3e:b9:
e4:5b:7c:af:4a:df:d6:f0:d8:59:27:ed:03:2a:c6:cf:80:40:
f3:2c:3d:57:30:cd:bd:97:3d:be:b1:59:db:cc:3e:8b:8e:e3:
e2:25:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 08:28:58 2024 by rpki-client on console-fra.rpki-client.org