Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD26A8E441011EFA5560AA1762E951A.roa
File: 2BD26A8E441011EFA5560AA1762E951A.roa (raw, json)
Hash identifier: 30sNDu9Ym0PlYXcct6dU5eTffkWGdhvMkALIj74lA20=
Subject key identifier: 3B:95:61:57:32:28:40:6C:34:71:41:CD:ED:68:4C:81:0E:EA:CD:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD26A8E441011EFA5560AA1762E951A.roa
Signing time: Wed 17 Jul 2024 07:42:52 +0000
ROA not before: Wed 17 Jul 2024 07:42:48 +0000
ROA not after: Sat 27 Jul 2024 07:42:48 +0000
asID: 22773
IP address blocks: 156.239.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40184 (0x9cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:42:48 2024 GMT
Not After : Jul 27 07:42:48 2024 GMT
Subject: CN=669775fc-e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:27:97:43:1e:03:0f:c1:9c:a6:41:12:76:
88:fa:27:3e:5a:4f:5d:bd:18:b0:59:a7:86:4e:02:
b5:21:ba:21:ed:c2:d8:2c:e7:20:7d:c6:8d:55:6e:
16:dd:e7:5a:73:47:d5:6b:79:ca:28:8a:1f:c1:09:
85:d1:09:91:e5:98:c5:dc:96:8a:10:29:68:7f:f1:
b6:16:10:30:de:c1:a1:a9:3d:b1:e1:72:8e:d7:7a:
cf:de:24:f6:10:93:c8:5c:76:c2:26:b0:b0:5f:e4:
ba:79:df:4d:14:9d:1c:9a:ed:03:27:54:8f:8e:d8:
45:fc:49:24:ca:f2:09:2a:c0:17:4a:00:dd:14:16:
9b:9a:67:db:a7:ed:49:04:36:29:7f:05:e5:3f:96:
2f:22:a0:81:d9:d7:a7:5b:a9:6b:ab:85:da:ee:6c:
aa:0e:e6:85:a3:ef:9d:fe:b8:cf:3e:9d:92:eb:49:
3b:b7:5e:8b:fd:8b:1b:54:27:95:84:63:1d:92:c5:
20:d0:86:e4:5f:26:b1:3f:d1:d2:26:60:15:54:99:
c5:d7:b9:14:c1:e8:73:4b:78:db:4b:ac:d0:b7:a6:
d1:0a:68:43:c3:88:d6:89:ad:1e:ca:3f:71:a9:91:
57:61:16:c8:72:f0:fd:c9:1b:8a:e4:23:00:30:18:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:61:57:32:28:40:6C:34:71:41:CD:ED:68:4C:81:0E:EA:CD:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD26A8E441011EFA5560AA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.128.0/20
Signature Algorithm: sha256WithRSAEncryption
22:99:d4:73:88:31:43:56:b2:63:f6:95:04:5f:eb:c0:fd:39:
9a:b8:38:41:7d:9f:27:72:5e:26:6c:cd:1f:27:e3:84:1b:d6:
ca:55:41:d2:b9:87:94:a2:f2:8b:19:0b:bd:4f:16:43:63:72:
76:40:6c:9a:de:db:5f:7c:c4:1e:19:2b:5e:93:5d:f7:5c:c8:
4d:6b:b4:b9:1b:4d:39:a7:20:98:f9:80:6a:71:64:19:6c:61:
ee:d3:03:b2:c7:aa:07:33:a8:a7:fd:ed:1b:a7:c6:cf:4a:bb:
a8:ed:41:0a:47:21:47:0b:d5:34:ed:3d:d9:60:58:b0:6d:b3:
f5:8e:18:67:c4:2d:a7:68:ff:6b:b5:41:13:cc:0d:44:d3:d1:
34:9e:3a:3d:e7:cb:9d:58:d1:57:e2:e1:2b:43:d4:e5:68:62:
62:33:b3:7e:e6:f9:da:1f:0d:11:02:b2:18:00:fd:45:92:79:
be:9b:4f:7f:1e:56:f0:36:bd:36:85:0b:19:8c:35:14:34:55:
6a:29:63:4a:dd:7a:63:55:9b:c3:33:cc:96:19:69:19:18:fd:
05:bf:70:bb:84:52:c7:13:f8:43:a1:22:75:1f:8f:3e:1c:dd:
d6:e3:eb:de:14:3d:7b:79:53:41:b8:9c:f6:9b:f3:15:65:5a:
5f:a6:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org