Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290D7650440F11EFA9D0EE9B762E951A.roa
File: 290D7650440F11EFA9D0EE9B762E951A.roa (raw, json)
Hash identifier: ul+rJBIT/nG6/dqMRrUMX9MZ6IWoDbE9ou2tYDHm3JQ=
Subject key identifier: E0:77:34:22:8C:64:93:FD:AE:20:A9:83:24:A1:56:70:1E:8F:01:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290D7650440F11EFA9D0EE9B762E951A.roa
Signing time: Wed 17 Jul 2024 07:35:38 +0000
ROA not before: Wed 17 Jul 2024 07:35:34 +0000
ROA not after: Sat 27 Jul 2024 07:35:34 +0000
asID: 22773
IP address blocks: 156.249.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40168 (0x9ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:35:34 2024 GMT
Not After : Jul 27 07:35:34 2024 GMT
Subject: CN=6697744a-f9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:a6:2d:c8:9f:c0:df:5f:82:39:23:06:29:
20:9f:3a:e2:72:91:90:f6:db:c3:b1:e0:c1:cb:8f:
0a:05:cf:d7:b6:24:20:b0:2d:f8:43:a1:13:a0:09:
15:f5:2e:ea:ac:3f:7a:70:5f:bd:8c:5f:bf:f4:84:
de:3a:f5:77:13:4d:df:bb:9c:78:68:7c:e1:42:13:
d3:82:13:9d:24:d7:ae:79:a6:55:c1:90:ee:72:fc:
b2:71:0b:db:29:e3:af:aa:c6:c1:40:39:ed:4f:41:
0f:32:a0:b2:f8:2c:f0:14:72:c7:78:90:1c:7c:f8:
62:ea:1c:cd:dc:e8:ff:4e:5f:43:1b:22:e9:2d:1b:
7a:d5:71:6b:1c:7b:6c:cd:b0:af:9f:e6:71:bf:45:
fb:48:b3:e2:48:e1:0b:05:04:05:54:32:74:fe:c2:
9f:0e:5e:ff:79:0e:58:b5:3a:09:c1:e0:de:b5:46:
17:96:ae:75:b5:e7:71:f6:75:0b:af:6c:4d:75:25:
6d:d7:91:96:71:ba:2e:05:5a:c4:86:6b:dd:85:97:
49:e6:70:dc:ec:88:34:33:d8:02:84:b8:ab:a8:37:
98:06:6c:56:e6:0a:58:eb:ad:78:44:20:3b:8d:7c:
22:28:9c:08:0f:82:15:80:32:0a:d1:ec:33:9f:84:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:77:34:22:8C:64:93:FD:AE:20:A9:83:24:A1:56:70:1E:8F:01:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290D7650440F11EFA9D0EE9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:ec:9a:aa:0a:9a:e6:66:aa:82:1a:33:fa:f2:70:cb:90:de:
c5:95:a7:37:be:e1:84:d7:ee:87:c6:42:94:f8:0c:70:0d:75:
51:18:37:d0:11:a5:e9:95:7d:70:70:a3:e5:73:e9:21:5f:38:
1e:63:83:dc:1f:47:dd:9d:8b:5f:09:04:07:bf:4b:44:1c:d1:
b7:3b:d6:75:51:ed:ad:91:3f:2d:4d:b2:92:2e:81:cf:d7:91:
ce:bb:91:f6:b4:64:23:59:cf:8f:98:72:5d:b0:86:94:31:0c:
ca:c6:d3:5c:e2:aa:85:20:72:d5:fa:be:62:cc:84:c1:0c:c9:
a8:8a:8f:b7:c7:fe:18:82:0f:34:e5:b4:1a:52:f1:f7:90:cf:
d4:50:c6:35:e0:a0:ad:81:d0:7a:c5:52:60:2d:23:07:8d:e8:
3e:cd:01:b1:6c:cf:15:82:e6:39:14:0b:53:4a:d1:17:45:90:
12:2f:02:3f:b7:4e:e9:92:7e:7f:ab:4b:76:23:82:63:34:6b:
18:c6:2b:50:98:bc:a2:4f:0b:42:d7:a2:0b:6c:94:29:b6:48:
9e:df:74:cd:35:cf:d6:2e:a5:15:90:86:23:6f:33:84:99:68:
42:fb:f7:fb:9a:e2:8d:1c:73:6b:1f:07:15:e6:39:ef:ae:77:
3c:bf:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:26 2024 by rpki-client on console-ams.rpki-client.org