Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CF5EA9C377411EFB4FCBF82762E951A.roa
File: 2CF5EA9C377411EFB4FCBF82762E951A.roa (raw, json)
Hash identifier: t7PhAOAem8J7VDm/H7GUjb2QbzQm7ZiCz02DEmThA/M=
Subject key identifier: FF:33:03:F3:5C:79:FB:07:3A:5E:4F:44:42:35:81:52:B1:4A:6C:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 96DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CF5EA9C377411EFB4FCBF82762E951A.roa
Signing time: Mon 01 Jul 2024 06:35:58 +0000
ROA not before: Mon 01 Jul 2024 06:35:55 +0000
ROA not after: Fri 02 Aug 2024 06:35:55 +0000
asID: 269070
IP address blocks: 156.249.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38618 (0x96da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 06:35:55 2024 GMT
Not After : Aug 2 06:35:55 2024 GMT
Subject: CN=66824e4e-0636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:e9:3d:05:72:e3:ba:4a:e5:fa:21:a7:34:
38:79:73:4c:ec:a3:39:63:b8:e9:0c:d9:83:5f:6b:
ab:9d:12:4e:56:e6:44:cd:5c:00:ce:a7:16:be:54:
9f:55:b2:26:49:af:3b:8c:77:58:09:97:50:34:cf:
a4:9f:7a:0e:ce:97:b7:a6:6e:e2:8a:93:9f:87:83:
b3:c0:49:9a:c8:41:9f:1e:34:e9:e6:b1:49:66:b7:
77:7d:a1:91:22:21:65:3b:91:ef:7b:68:56:28:0e:
1c:ef:9b:36:fc:a8:bb:e5:1c:35:7e:2c:97:70:be:
68:ea:9e:be:c9:f2:46:a2:06:43:ec:28:e5:01:f3:
d2:8d:db:ae:59:31:cb:48:5f:4a:56:98:d4:d2:ed:
a4:59:88:a3:67:00:0a:93:f0:b3:66:98:79:bf:10:
1d:d2:dd:fd:fd:20:53:0e:11:4d:e8:2a:ee:b7:54:
91:1c:93:8c:c2:51:87:e1:00:79:23:bc:68:94:b7:
ad:29:50:38:38:1d:b5:c8:71:9e:28:b1:c1:da:d1:
27:be:39:14:26:e2:4a:0c:52:ac:43:cc:cb:9b:ac:
7b:f5:f1:35:34:00:25:0b:53:08:3a:a9:02:2a:5f:
44:4a:70:a3:41:9b:b5:0e:17:3d:01:f7:8c:57:08:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:03:F3:5C:79:FB:07:3A:5E:4F:44:42:35:81:52:B1:4A:6C:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CF5EA9C377411EFB4FCBF82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.67.0/24
Signature Algorithm: sha256WithRSAEncryption
63:21:9d:0e:47:1a:6b:0e:5b:91:39:72:e4:80:d3:00:87:00:
32:b8:4a:70:2e:7b:08:8f:e0:fa:15:28:5c:1a:64:40:90:5b:
14:07:c3:03:05:9a:04:83:03:d1:4b:b2:b4:2b:36:7d:f0:c7:
81:11:d3:be:24:c2:3e:ce:e8:69:f2:a0:81:ea:6a:43:16:b7:
80:06:4c:6a:c8:b4:7f:95:e0:1c:24:32:f6:06:84:de:0d:4c:
78:bb:56:e5:33:66:61:c2:64:bd:88:e0:94:e8:7e:c1:e3:ef:
30:07:76:96:a8:4c:aa:7a:5f:9e:cc:c1:dc:7d:d1:97:80:f6:
f8:d1:1f:94:6a:59:8b:cd:7e:e5:2c:24:f0:1b:f1:47:2e:99:
26:24:2b:f1:22:3c:4b:ab:ed:03:00:c9:9c:f2:6f:e4:c5:35:
4e:df:c2:3f:12:77:5c:2e:20:ac:b0:8f:4d:a2:5a:f1:a2:07:
eb:76:b8:f7:13:30:70:3b:27:03:eb:70:de:14:90:cc:3c:1b:
bf:74:d4:26:48:5b:20:73:ad:99:63:01:cb:93:87:5f:09:4f:
39:83:30:84:b9:ee:53:6f:24:c4:a6:05:97:9d:38:44:6e:ec:
d0:42:02:e3:22:ec:ad:03:6b:ba:a7:78:db:b2:16:b2:0c:d0:
3c:70:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 10:00:17 2024 by rpki-client on console-ams.rpki-client.org