Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D6C6B2406811EFB0D9AD8E762E951A.roa
File: 34D6C6B2406811EFB0D9AD8E762E951A.roa (raw, json)
Hash identifier: iXRuEpxruw8PKv1Wn0IGwMDVxhW8iJNTj03FHK2x1oQ=
Subject key identifier: 4C:88:0D:04:D0:EA:45:A4:66:04:5D:52:54:39:8B:E8:2A:E3:D1:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D6C6B2406811EFB0D9AD8E762E951A.roa
Signing time: Fri 12 Jul 2024 16:02:58 +0000
ROA not before: Fri 12 Jul 2024 16:02:54 +0000
ROA not after: Tue 13 Aug 2024 16:02:54 +0000
asID: 138915
IP address blocks: 156.244.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39911 (0x9be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:02:54 2024 GMT
Not After : Aug 13 16:02:54 2024 GMT
Subject: CN=669153b2-0b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:a4:a3:03:5a:e8:e8:64:51:9d:d8:92:cc:
20:4c:1c:ce:ea:0d:47:9a:60:94:01:bc:be:da:51:
f1:8e:87:9c:fc:f0:8e:40:d0:ac:c7:35:80:47:84:
b1:3f:f0:1a:ef:ed:a3:4f:15:c9:45:65:8b:25:d1:
42:4e:8e:57:ad:cd:42:f3:2a:ca:26:88:82:2a:29:
d4:e5:38:7b:90:20:cd:b3:2b:b5:9a:37:4f:57:bd:
9b:72:11:da:25:26:51:60:ba:c6:a0:9f:bd:ce:43:
d9:42:37:57:a4:11:44:18:7c:ce:d0:5e:c9:36:54:
a1:19:ac:14:0d:9b:bc:df:15:9c:d0:0b:94:86:a2:
ee:9e:7a:eb:ee:5c:aa:d8:b1:c3:86:6b:1d:11:d3:
5a:cc:86:95:0f:82:d5:46:4c:45:ed:f2:b4:9e:aa:
2a:f3:bc:1e:3b:19:7c:7b:60:16:f1:c3:37:66:2c:
89:ea:2c:54:1c:06:98:df:28:ee:d9:e8:7c:be:40:
97:a0:e5:27:62:02:c0:79:64:98:06:05:d8:56:bd:
4b:6b:c3:8a:f6:2a:41:3d:a2:63:4d:be:26:10:c0:
45:85:ae:72:2b:5d:65:54:8f:2d:38:74:0e:2c:55:
8b:ac:d8:81:9b:b2:bf:ee:6c:97:62:04:30:df:6e:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:88:0D:04:D0:EA:45:A4:66:04:5D:52:54:39:8B:E8:2A:E3:D1:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D6C6B2406811EFB0D9AD8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8e:50:33:42:c3:b6:e4:51:4f:9e:e0:1a:4b:2e:93:37:cb:
a0:da:01:b2:50:ea:3c:08:8c:43:1f:87:10:c5:67:5f:55:d5:
5e:68:d1:e6:45:2d:53:e6:13:ca:e3:89:d1:59:7b:01:e9:ae:
f1:be:d6:70:1b:e8:9e:7f:f3:e5:4a:26:08:ad:7b:84:58:93:
f0:45:99:df:7b:db:c5:10:7c:43:e1:60:83:26:7b:c7:99:f1:
ee:a0:ec:52:a3:a4:40:3b:b7:f7:cc:c8:a3:1d:c9:bc:9c:0c:
ef:6f:68:6c:3c:10:42:79:10:9a:ce:b1:c6:ff:61:59:0b:5a:
ab:dc:03:8f:93:09:ea:f4:b3:fb:32:06:47:80:b4:d3:26:34:
b4:98:78:e6:43:96:6f:eb:91:23:c5:99:9e:53:8a:0f:d5:a6:
ca:9f:0c:98:04:31:80:c3:c9:b3:33:4a:29:5a:69:a1:d4:aa:
58:4c:a7:c5:89:e0:fd:67:d1:fb:1f:76:ae:f9:14:e3:2a:8d:
70:df:2c:88:cd:39:22:4e:e6:55:9c:12:61:fa:12:29:7a:35:
c1:51:57:c4:98:b2:84:ce:43:88:e2:db:3e:e4:0d:4c:44:96:
ea:a1:f0:d1:31:f9:b8:1e:52:a2:65:6b:f2:ba:ee:f1:42:42:
a5:ae:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org