Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EAF2FF440FE11EFA58E188D762E951A.roa
File: 2EAF2FF440FE11EFA58E188D762E951A.roa (raw, json)
Hash identifier: PIiEVXuhrWsh+1FYjkYpPjmZK4FR8m42u/immJHnQ7g=
Subject key identifier: 58:CD:4F:A4:BC:C9:0E:4E:E6:AF:BC:A6:B4:C8:D8:D3:5E:CC:64:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EAF2FF440FE11EFA58E188D762E951A.roa
Signing time: Sat 13 Jul 2024 09:56:32 +0000
ROA not before: Sat 13 Jul 2024 09:56:29 +0000
ROA not after: Tue 13 Aug 2024 09:56:29 +0000
asID: 138915
IP address blocks: 156.244.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39960 (0x9c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 09:56:29 2024 GMT
Not After : Aug 13 09:56:29 2024 GMT
Subject: CN=66924f50-529c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:ca:2a:c2:de:81:8b:0c:64:4a:7b:47:93:
fa:93:39:a4:ae:31:64:3a:1f:57:19:c2:e6:42:04:
06:1b:84:9d:15:85:81:01:fb:8d:f6:b6:ef:0e:82:
2b:00:1f:78:4e:33:7f:73:5e:ac:f8:23:41:56:35:
5b:c6:85:50:03:9f:15:78:db:19:35:09:49:57:41:
7e:b7:38:46:e9:07:a6:1a:38:68:4e:f0:23:49:2d:
a1:c0:0d:2e:be:c6:d9:a3:a1:bc:bc:e3:e1:4d:53:
33:09:dd:c0:08:20:d9:bf:e7:7d:d0:f5:a9:99:fc:
a9:45:43:a1:ca:15:16:dd:34:6d:ed:f2:3e:34:cf:
9f:84:9a:ca:ad:ff:f6:33:67:56:76:54:2f:35:6e:
25:2d:b1:39:92:cc:d2:86:c9:ba:de:21:2e:5a:e4:
a9:e8:35:43:8b:de:32:79:05:43:73:76:f6:15:33:
31:0c:d7:91:4e:64:dd:9c:e8:51:65:0e:c9:3a:01:
62:44:e2:12:94:c1:3d:14:5d:57:55:b4:8e:d3:d0:
84:f1:a5:e4:3d:3f:fa:18:8e:a7:be:9c:7f:8c:67:
e0:0d:fe:8f:ca:4a:b6:c9:52:dc:2d:7b:67:7d:4a:
14:93:15:61:60:8b:d6:46:3d:40:04:ba:42:f9:df:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:4F:A4:BC:C9:0E:4E:E6:AF:BC:A6:B4:C8:D8:D3:5E:CC:64:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EAF2FF440FE11EFA58E188D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:26:09:6c:7e:d2:54:78:e6:58:1a:b9:08:6f:39:ba:25:a1:
52:5e:0b:87:94:cb:f1:f0:a0:b9:e0:b8:d0:5e:51:af:25:54:
29:05:73:99:af:fc:d2:c7:fa:23:07:e2:f4:aa:19:dc:70:b5:
44:76:14:40:29:76:99:64:d5:cd:96:a9:9a:54:cb:97:75:1a:
eb:65:10:ee:29:70:41:cb:04:21:00:5a:f1:5f:9c:21:7e:cf:
9d:a3:79:4b:ee:83:94:48:74:47:dc:5f:ab:ff:0e:2c:3d:23:
21:47:8b:af:ed:57:9c:c9:41:d1:9c:e8:5e:f6:94:39:07:51:
fc:11:f3:d7:f8:b3:05:2b:f0:d3:18:1e:fa:b9:eb:76:18:e6:
c8:de:37:45:27:85:bb:ac:11:66:18:c9:46:f7:15:e1:a0:c9:
90:66:38:f8:1e:20:ba:3e:d0:d3:85:75:be:26:8c:51:2c:39:
00:9e:66:a7:94:d8:09:26:f1:23:8a:63:6b:4a:98:f0:f7:23:
a6:fb:bd:b4:76:4e:4f:fc:03:b4:1a:75:f9:ca:03:d4:66:6a:
eb:e5:bf:84:8b:0d:15:31:48:cc:37:f9:ba:b5:33:3a:c3:09:
fa:e6:ef:e0:85:50:d7:ec:dc:a8:d6:c7:b8:d2:52:e0:84:31:
52:60:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org