Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E88AA78441911EFBAECAA60762E951A.roa
File: 2E88AA78441911EFBAECAA60762E951A.roa (raw, json)
Hash identifier: jjNa3K8id+FTfrumK8H4VWJwMT2id8h86hjiRBuWuJE=
Subject key identifier: 95:CA:52:2A:EE:7F:64:DD:AB:FB:C6:5E:FA:50:86:34:83:FD:DD:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E88AA78441911EFBAECAA60762E951A.roa
Signing time: Wed 17 Jul 2024 08:47:22 +0000
ROA not before: Wed 17 Jul 2024 08:47:18 +0000
ROA not after: Sat 27 Jul 2024 08:47:18 +0000
asID: 7018
IP address blocks: 156.243.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40248 (0x9d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:47:18 2024 GMT
Not After : Jul 27 08:47:18 2024 GMT
Subject: CN=6697851a-44a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:d4:3c:2e:d2:31:60:78:80:5b:b8:eb:2b:
06:38:4d:0b:3b:cf:d6:0c:d7:5e:99:46:94:42:11:
0a:61:80:8e:cb:41:60:94:a1:89:6c:99:9f:5a:50:
10:4d:a9:9f:05:ec:98:83:c7:ba:8b:3e:22:6b:82:
8e:7e:ca:03:59:14:56:7a:a3:e1:53:55:20:a2:bb:
6a:03:56:37:21:f5:dd:08:e4:a8:66:a8:c9:8c:51:
84:5d:74:e5:11:76:36:cf:42:08:22:d4:13:65:bb:
53:04:d5:86:04:89:6a:19:21:d9:89:39:07:cd:96:
e3:89:f1:53:e7:61:dd:ab:88:1f:5e:89:1b:de:89:
d4:88:ce:fa:04:b0:b6:09:b5:00:02:28:c5:a7:f9:
05:cf:ec:fd:79:c6:89:65:09:a1:8b:24:bb:59:f0:
20:f1:df:ac:15:17:6c:63:68:74:aa:97:d7:45:65:
29:81:f8:52:8a:43:bb:a8:6c:26:05:7c:f0:2c:a1:
b0:da:e2:ed:5b:ac:d7:65:d9:40:87:f4:fc:f8:95:
80:b0:99:97:89:99:b4:d4:d7:2e:70:3c:2a:33:41:
2c:05:fd:82:e1:60:b0:44:14:30:7e:fb:b3:fc:ae:
38:4a:8e:33:cf:9a:98:ce:3a:ee:22:7f:ab:3a:64:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:52:2A:EE:7F:64:DD:AB:FB:C6:5E:FA:50:86:34:83:FD:DD:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E88AA78441911EFBAECAA60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:83:31:1c:0f:70:d5:8a:1e:ed:f5:13:21:52:fc:5f:a6:27:
26:5c:08:3c:d6:a8:1b:db:2a:09:f2:5d:41:28:95:bf:fc:7d:
73:c4:7e:83:65:8b:c5:ba:51:4f:1f:4c:44:94:f0:9e:b0:c0:
a5:5a:fd:0c:99:4a:18:e7:73:6f:1c:ca:4d:4f:ff:7a:1a:6f:
1d:4c:98:ea:06:05:0b:f6:45:11:52:e9:e7:e1:6d:dc:41:9a:
ad:31:e0:41:31:c9:74:5e:06:cc:54:d2:84:7e:02:b1:eb:04:
3b:97:2f:df:17:ff:06:fa:63:6c:38:ff:a6:52:cd:38:d8:4e:
d2:a1:53:f4:9b:96:26:c7:94:74:63:b0:c1:9a:1b:c1:3e:ce:
8f:d0:5c:ee:38:cc:b5:87:1c:9b:86:9d:b0:77:75:98:00:df:
9b:4c:52:10:25:22:70:87:e9:50:82:6d:96:a1:f5:72:e2:9b:
23:45:73:a8:b7:2c:a3:92:6a:33:0e:f3:b5:88:09:08:75:ce:
a4:74:1d:ea:cc:5a:51:d3:4f:f1:ef:ee:3d:dd:e9:f1:ef:c0:
26:35:ab:b3:2f:5c:03:16:96:1a:b3:a2:84:b4:80:81:b8:bb:
13:cc:06:43:bb:47:39:6a:f8:28:19:f8:b7:f8:37:0e:bb:13:
b5:78:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org