Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DA77624DAB611EEB60D4E8C775412E6.roa
File: 2DA77624DAB611EEB60D4E8C775412E6.roa (raw, json)
Hash identifier: 41IcX3W0vgY4x4kDFev4TPuPm07jarbi+xXMT4Z+g1s=
Subject key identifier: 80:62:94:CC:AC:9C:20:00:1D:B6:25:BC:DD:74:19:9C:76:A3:04:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7B54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DA77624DAB611EEB60D4E8C775412E6.roa
Signing time: Tue 05 Mar 2024 06:04:08 +0000
ROA not before: Tue 05 Mar 2024 06:04:05 +0000
ROA not after: Thu 21 Mar 2024 06:04:05 +0000
asID: 142286
IP address blocks: 156.253.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31572 (0x7b54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 06:04:05 2024 GMT
Not After : Mar 21 06:04:05 2024 GMT
Subject: CN=65e6b5d8-b82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:49:7f:f2:b4:b0:5b:30:b7:d8:de:29:c8:
5e:73:e6:66:b3:24:3b:ed:88:5f:e5:5e:ff:50:26:
a3:94:1f:82:34:20:60:b2:5f:82:c1:97:6f:e8:81:
b6:48:06:a6:cd:3b:09:b0:59:ed:9f:70:84:4d:7f:
f7:9c:14:07:ff:44:bf:8b:a7:8b:f2:1d:d3:99:ca:
d3:2a:be:42:5c:5c:b1:93:af:2c:a3:1b:83:3d:a9:
79:21:a7:b0:9e:f5:4f:7c:54:ab:49:9d:fc:0d:dc:
f4:1b:32:b3:53:a5:3f:2f:40:64:16:f6:11:36:60:
36:ac:c4:ae:b9:f8:a7:e5:c4:e8:4f:07:29:26:15:
72:2a:07:a3:e0:f0:24:97:e6:a3:fb:d9:68:ea:83:
a7:7b:b1:d8:7e:52:a1:60:84:98:4a:c8:7a:ad:12:
a1:47:03:7e:d0:6d:08:38:82:91:48:54:ca:24:23:
0f:37:c0:e7:98:3b:3c:e1:d5:a4:ed:83:24:c3:e0:
38:e5:5c:74:a9:b2:ab:b1:3b:be:97:49:c6:51:25:
5a:39:8b:c2:00:13:71:3d:5b:d3:76:eb:ed:ef:f2:
dd:52:2f:30:49:d6:13:f1:70:45:d9:57:41:e7:de:
f5:d0:bf:74:ec:ee:1c:fa:4b:38:59:79:ae:4b:1d:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:94:CC:AC:9C:20:00:1D:B6:25:BC:DD:74:19:9C:76:A3:04:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DA77624DAB611EEB60D4E8C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:31:53:67:dd:5f:fe:e6:eb:8f:36:ef:83:53:86:0c:a2:c6:
06:cc:4e:58:bc:36:bc:49:bc:9c:03:4d:54:49:e8:a1:ed:8e:
13:7e:7f:a1:f1:d9:38:60:9b:ba:dc:4f:d7:5d:17:1f:a3:ed:
73:1b:f7:82:8b:03:e5:26:bb:23:94:2f:37:d0:74:cc:49:ee:
2b:c0:21:8f:69:75:f2:7f:76:18:76:5e:84:6e:61:89:1c:6a:
df:65:38:34:d9:7e:b3:9f:a9:e9:15:06:20:48:d4:52:e3:40:
d3:54:97:9e:7b:62:fe:12:72:9c:f3:e1:92:3b:91:98:74:81:
4d:57:1d:0e:d0:67:43:13:05:1b:d7:ef:ff:97:70:75:23:4b:
f1:6d:07:a0:d7:bc:36:e9:87:cb:db:12:b9:98:bc:57:31:9e:
86:89:80:9f:d1:63:17:fc:8c:85:ea:86:b6:49:fe:f6:46:fe:
b7:cd:6e:f5:a6:28:96:91:4a:0a:bd:85:49:42:0e:a9:f3:d5:
2b:26:1d:32:c5:2e:4d:eb:69:97:b9:ae:23:36:34:17:90:c7:
7f:2c:d0:a7:04:3d:51:5f:49:65:2d:4c:54:84:db:51:40:16:
40:2c:0c:06:b0:d1:b2:fe:9e:5b:03:6f:f5:4c:12:fb:b5:e8:
ef:74:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 18:22:40 2024 by rpki-client on console-ams.rpki-client.org