Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30B48BAA47D411EFA0E897BD762E951A.roa
File: 30B48BAA47D411EFA0E897BD762E951A.roa (raw, json)
Hash identifier: hVU+ldzsY3uATWU38er4d49MlbbEUB0Y76y5RmJWOQM=
Subject key identifier: 42:6D:F4:31:C7:97:65:E9:CD:51:DA:40:10:DE:7E:D8:07:00:FE:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30B48BAA47D411EFA0E897BD762E951A.roa
Signing time: Mon 22 Jul 2024 02:43:35 +0000
ROA not before: Mon 22 Jul 2024 02:43:32 +0000
ROA not after: Fri 23 Aug 2024 02:43:32 +0000
asID: 44559
IP address blocks: 156.246.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40387 (0x9dc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:43:32 2024 GMT
Not After : Aug 23 02:43:32 2024 GMT
Subject: CN=669dc757-bcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:25:14:e2:1e:fd:55:7f:26:51:7c:65:52:
ac:34:8c:7c:b4:12:ec:9f:97:70:51:3f:41:49:9f:
d5:07:5e:f5:f1:fd:02:22:2b:64:91:04:f0:61:b4:
57:f2:a0:3c:34:fe:61:b5:fd:6f:2d:fa:0c:7c:8f:
d3:77:5d:c9:4e:37:c2:b8:be:98:1f:46:ac:e1:fc:
49:d4:eb:d2:fe:fb:95:e1:fc:b2:6d:5d:11:bb:e7:
05:00:79:0b:e5:6f:63:71:0c:0b:96:25:49:1e:82:
14:fa:d3:14:cc:c3:50:2d:d0:3d:be:59:ef:7a:06:
69:17:41:d7:28:a8:88:76:f6:e4:a3:7e:31:63:b1:
46:aa:64:72:5d:bc:fb:94:5c:90:79:33:a9:90:23:
b4:ea:75:0c:b4:e6:47:53:6c:86:ac:de:d6:80:e1:
a1:a2:82:dc:ef:a6:be:53:b5:91:42:b2:af:e4:32:
17:31:7d:1d:9c:4d:54:53:e9:ce:90:5d:b1:bc:00:
11:a6:8f:99:ec:bd:2e:55:dd:7c:11:d6:ab:3b:3d:
9b:05:f9:a5:ff:c5:b3:7b:c2:8c:4c:ae:73:1d:eb:
de:a7:8e:82:f1:f9:64:21:5c:68:ea:e4:64:42:ed:
e2:16:a6:dd:8e:d1:a0:e3:33:16:d7:e4:03:86:4c:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:F4:31:C7:97:65:E9:CD:51:DA:40:10:DE:7E:D8:07:00:FE:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30B48BAA47D411EFA0E897BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.253.0/24
Signature Algorithm: sha256WithRSAEncryption
72:29:b2:7e:9b:d9:02:8d:e9:56:9e:8b:33:3a:5f:59:e9:34:
04:d6:7f:d7:b8:7b:59:82:fa:0f:74:07:ff:1d:93:fd:d3:37:
ce:d0:65:a3:ed:e2:44:e6:e6:22:24:5e:14:3d:fe:27:ad:d2:
2e:ce:96:fd:08:ef:fd:be:dc:13:ef:5b:b0:c7:63:d1:aa:ad:
81:c1:d0:cc:66:5f:f6:15:19:69:77:97:67:fc:e9:1e:aa:1f:
e7:95:dc:f8:2b:03:db:75:a5:ac:4b:c1:05:82:b5:f5:7e:32:
94:57:b1:4c:83:f1:bb:3f:cb:8c:20:57:80:54:92:6f:06:16:
d4:32:63:8d:8b:f8:04:15:7f:68:1a:ff:e9:c4:96:ae:bd:84:
de:5e:7d:3a:d8:73:d6:ff:46:28:98:1d:aa:55:fd:06:dc:b6:
09:10:a5:d2:82:c8:9e:f5:96:df:12:02:9d:b4:aa:d0:04:88:
67:19:14:09:6b:c6:f6:65:00:24:f2:49:a7:76:1d:ef:2b:fa:
ed:c7:37:96:2e:59:5b:53:c4:c2:67:8c:fd:fb:75:7f:f1:a5:
6a:f5:ce:49:35:e2:09:27:be:1e:cc:36:a6:e3:ae:21:5f:14:
41:13:44:52:0c:e8:98:c3:46:a0:a1:51:92:7c:95:71:b6:d1:
cf:f8:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 07:13:26 2024 by rpki-client on console-ams.rpki-client.org