Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA5ECC647EE11EFB3888070762E951A.roa
File: 2FA5ECC647EE11EFB3888070762E951A.roa (raw, json)
Hash identifier: wPZogyjozieGOd3CRSNdo4/Vb7W4uJNW4LVqqnMs+Yc=
Subject key identifier: 18:F9:1D:60:13:15:01:BA:2B:06:6E:1B:54:2E:CA:48:84:A8:22:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA5ECC647EE11EFB3888070762E951A.roa
Signing time: Mon 22 Jul 2024 05:49:40 +0000
ROA not before: Mon 22 Jul 2024 05:49:36 +0000
ROA not after: Wed 31 Jul 2024 05:49:36 +0000
asID: 137547
IP address blocks: 156.245.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40515 (0x9e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:49:36 2024 GMT
Not After : Jul 31 05:49:36 2024 GMT
Subject: CN=669df2f4-5db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:ef:ee:55:f9:57:10:e9:b8:61:12:82:bb:
a4:7c:dd:27:67:99:3a:74:68:fe:0e:bd:28:96:23:
c2:3d:71:ee:9f:6b:54:a1:2b:77:5e:23:f8:a5:e1:
4e:ac:2e:f8:24:aa:c3:28:d3:80:8d:8a:20:35:c3:
24:81:18:ea:12:7f:45:95:ac:76:26:0f:09:b0:08:
8c:21:26:93:03:1a:fb:03:ce:83:60:d8:b4:04:57:
ee:0c:fc:ee:6a:a9:b1:34:36:de:55:f0:b6:0e:e7:
c7:97:d5:29:4e:f0:d3:a9:6d:85:57:d7:1a:b0:32:
cc:71:3d:fb:9b:43:1b:9e:67:e4:f8:f6:a1:0a:0f:
90:4a:28:90:d2:67:98:25:93:91:7a:2e:8e:9d:80:
5e:15:fe:61:bd:bd:80:0e:1d:76:56:8c:8a:7f:41:
ff:ff:2d:12:66:1c:16:c1:13:85:c9:21:f4:bc:02:
e1:76:aa:7e:82:9c:c5:f6:66:37:a2:73:38:49:29:
03:39:c4:5d:77:31:7f:1c:f6:85:5e:d2:d6:ab:46:
79:02:45:3e:0f:d0:3c:49:96:43:f5:29:74:6b:28:
18:d0:ec:32:73:d4:96:6b:85:54:0f:e5:4f:23:ea:
81:33:18:e9:d8:46:bf:97:17:40:39:a7:27:4d:33:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:1D:60:13:15:01:BA:2B:06:6E:1B:54:2E:CA:48:84:A8:22:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA5ECC647EE11EFB3888070762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:6b:f6:1c:c9:78:7b:6d:aa:36:cd:0b:66:f8:f8:43:a4:b8:
55:47:48:df:be:b6:ac:aa:b4:79:5a:fd:f2:bb:88:ed:87:f2:
59:46:ba:3e:52:0b:5e:e8:9a:85:95:61:68:92:56:8b:ee:78:
4d:be:58:d8:1f:72:0b:cb:36:ed:bb:ed:22:0a:72:1d:4c:14:
b7:87:ed:69:27:d2:bd:8d:31:de:db:da:75:8f:d5:12:9b:32:
11:a9:96:d2:c8:91:26:4d:7f:10:f3:4a:ed:2f:07:9d:da:d0:
2d:33:d5:88:a2:89:66:5a:93:42:24:af:b3:c1:9a:06:94:67:
04:47:02:1e:d9:f3:f2:3d:7c:b8:87:6a:75:49:95:dd:39:88:
de:2e:02:78:a3:5c:d9:fb:b9:72:f5:a2:70:6e:12:e1:41:98:
ed:f7:d1:97:48:6b:5e:b7:1e:50:10:60:21:26:2c:a8:f7:3e:
13:86:8a:66:f7:eb:88:e3:9c:1c:92:f0:4a:fc:ac:f2:3f:1e:
c5:67:82:b2:d4:6f:37:88:1c:07:d1:6a:b9:08:20:04:dd:d0:
2e:71:58:43:94:f9:23:96:3d:7c:b6:5c:8f:91:fa:59:ea:6a:
f6:a2:55:b1:9e:02:e4:6a:6d:85:7f:c9:53:be:e6:67:14:1c:
75:2d:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org