Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A7460463A9411EFBC914CA7762E951A.roa
File: 2A7460463A9411EFBC914CA7762E951A.roa (raw, json)
Hash identifier: 4uy9qtyD3PiYYl4s7F9wzuOse3qnFpXarvJ3yDoIOS0=
Subject key identifier: D9:FC:13:03:74:69:5A:8E:2D:DD:98:2D:D2:1B:54:44:5D:03:FA:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9897
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A7460463A9411EFBC914CA7762E951A.roa
Signing time: Fri 05 Jul 2024 06:02:31 +0000
ROA not before: Fri 05 Jul 2024 06:02:28 +0000
ROA not after: Thu 01 Aug 2024 06:02:28 +0000
asID: 7018
IP address blocks: 156.238.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39063 (0x9897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:02:28 2024 GMT
Not After : Aug 1 06:02:28 2024 GMT
Subject: CN=66878c77-eb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:ad:de:bf:5a:c4:db:86:ca:28:5b:70:d0:
87:48:64:08:a0:ac:b2:e4:07:0a:b8:62:0b:e8:46:
47:61:df:47:0b:9b:ee:ae:fd:cc:d9:17:8b:6e:de:
0c:20:e0:af:0f:d0:e5:4c:02:4f:54:6d:8f:aa:90:
e5:95:9d:fe:54:5c:37:2f:82:37:60:31:d9:95:fa:
40:09:b9:14:3f:27:49:ea:b5:55:0f:b3:c0:fc:2c:
8e:de:50:8e:df:ee:bb:51:53:2d:bf:2c:c0:74:c4:
ae:82:67:58:b4:d3:e9:e0:be:a3:5b:dc:4e:e3:b4:
38:2a:26:0b:e0:6a:ff:ae:0d:a3:89:27:e6:f7:52:
bd:8c:30:4f:0c:48:9c:21:bf:2c:15:65:4c:9f:58:
8d:b9:3c:b8:f7:06:42:c2:8a:8f:67:cd:98:bd:95:
1c:23:a9:d1:a1:15:e3:d2:da:93:03:a3:d5:d4:c1:
49:bb:e2:5d:15:cc:47:eb:2f:dd:78:0e:32:0b:2f:
9b:e1:ba:27:ad:a7:f9:ee:95:8e:93:9a:6f:fe:37:
2c:89:fd:2c:d5:90:be:80:e9:21:85:36:e8:08:8b:
ed:e7:16:20:6b:dd:3e:44:53:8c:43:dc:2b:ba:af:
40:bc:68:ba:bf:8f:0d:22:d7:9c:56:21:6c:41:dc:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:13:03:74:69:5A:8E:2D:DD:98:2D:D2:1B:54:44:5D:03:FA:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A7460463A9411EFBC914CA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.126.0/23
Signature Algorithm: sha256WithRSAEncryption
27:4e:10:72:32:aa:46:90:b3:d0:b5:96:2d:d6:39:97:af:86:
28:37:e1:c2:eb:8d:31:e7:10:2c:07:ec:a8:95:da:e4:99:74:
98:8c:35:b4:e8:f2:25:03:5b:5d:82:24:86:a4:a4:aa:e3:9a:
a8:86:01:17:c6:7d:0e:04:b5:40:ec:68:be:a3:c2:b6:02:a6:
54:7c:4e:d2:26:7e:73:e8:28:12:3b:ea:e3:99:d9:98:4a:0d:
1d:b4:c6:30:18:ee:f0:67:0d:26:ae:96:33:f5:f6:a9:7c:28:
07:89:15:1f:d9:10:be:c1:67:33:67:94:12:39:d0:51:1e:92:
c5:45:f2:5e:e3:76:08:f6:98:c7:da:c5:e4:f5:7c:c8:b1:20:
95:ce:5a:b1:23:59:ff:fb:76:f8:77:1d:12:38:8d:bc:dd:4a:
7f:4e:79:ba:f6:2b:ee:9a:71:37:35:25:31:31:1a:8b:81:2d:
fa:51:c9:19:c0:27:3b:3b:57:2d:bd:2e:35:e0:61:fb:fb:48:
73:ca:97:07:f8:6a:d1:f4:df:bb:c5:40:d3:34:ed:41:4d:5e:
b3:8f:37:bf:cc:64:67:0d:4e:b2:a4:5a:9c:2d:c7:34:1b:69:
97:7a:0b:c3:e1:0f:92:0a:0b:a1:72:da:4e:35:d5:9a:d9:ed:
48:4c:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org