Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35599A664A6211EFBA9B4F9C762E951A.roa
File: 35599A664A6211EFBA9B4F9C762E951A.roa (raw, json)
Hash identifier: 9rHA/CXWQwto5aha6wBP/0daQpDMgmyztMjM8uZIsKU=
Subject key identifier: 47:5C:02:26:D0:90:FD:33:C3:57:09:84:34:BF:98:E8:A3:5D:30:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35599A664A6211EFBA9B4F9C762E951A.roa
Signing time: Thu 25 Jul 2024 08:45:13 +0000
ROA not before: Thu 25 Jul 2024 08:45:10 +0000
ROA not after: Sat 03 Aug 2024 08:45:10 +0000
asID: 22773
IP address blocks: 156.229.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40951 (0x9ff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:45:10 2024 GMT
Not After : Aug 3 08:45:10 2024 GMT
Subject: CN=66a21099-f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:ac:ab:09:ff:e1:ec:51:8b:04:1f:49:b8:
e6:ff:55:b0:fd:28:e7:66:19:9b:19:2e:a9:53:07:
ad:77:ef:18:84:f3:ea:e2:22:7f:82:0e:4b:b5:c5:
af:29:9b:72:de:7c:75:2e:41:fe:34:4d:8f:3b:59:
20:d0:df:e9:a7:b0:33:f4:f4:df:9b:1f:5c:51:80:
ef:ff:03:27:9f:b6:be:62:a3:dd:1f:91:ce:35:ab:
0c:55:10:70:e9:ef:2f:cc:5e:17:fb:23:2a:ec:b4:
f3:10:3a:fa:5f:8e:24:21:f8:45:0a:28:7a:31:72:
17:1a:12:b6:df:87:66:9d:81:9a:bd:c2:d6:c7:9f:
9c:76:8d:6f:df:00:bb:a9:85:67:1d:59:00:2a:64:
5a:e5:08:8b:28:c0:dd:ba:b5:81:17:3f:e2:25:6a:
d0:23:2f:34:95:d6:97:ab:ce:e6:e8:29:6c:a5:08:
09:cc:96:b1:70:eb:8a:4d:2f:2d:31:f1:91:7b:7a:
2e:d0:31:0d:7c:6f:45:2c:9d:7a:3d:ac:3c:9e:14:
13:40:b9:38:5c:15:fb:4f:b0:c1:21:8f:80:8d:51:
91:73:8a:40:9a:5f:25:b6:af:25:c1:60:ea:35:b5:
9b:08:37:44:ae:34:2c:c8:ed:ce:4f:9b:8a:9d:25:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5C:02:26:D0:90:FD:33:C3:57:09:84:34:BF:98:E8:A3:5D:30:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35599A664A6211EFBA9B4F9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b2:ab:c2:27:4b:d1:bd:4e:2a:9e:3c:b2:5d:5e:78:e8:66:
f7:b0:fb:3f:55:90:ff:8a:7e:94:83:17:9a:60:63:46:ed:2f:
07:d3:b4:1c:30:9a:9a:b8:d8:3d:e6:27:b7:42:f1:4f:66:71:
44:4a:2b:a8:f0:fc:24:83:3e:75:5c:37:26:a0:6a:35:5e:e2:
af:62:54:cb:2e:55:53:8e:62:a6:3f:6b:90:c2:62:31:ef:9e:
8b:cb:52:88:09:3c:8e:ba:a6:00:be:ac:47:a6:84:84:4c:90:
27:1b:ba:0d:fe:a0:7c:14:1e:2c:d8:2c:7a:c4:35:f3:e0:2f:
1b:08:ca:e0:5d:23:b9:13:bd:f5:84:42:98:0b:75:a3:04:87:
a6:9d:9c:f8:4e:d6:d6:7b:36:30:bf:e7:a4:f6:94:b0:2a:9f:
ed:42:d2:cd:83:5f:9d:4d:74:84:f8:24:6c:b4:65:e9:b0:e0:
9a:31:a6:ad:ce:f2:a6:2d:81:ef:cd:33:7e:67:2d:6b:e2:d4:
d4:9d:3c:1e:fd:05:7e:07:83:f1:92:61:6f:99:ab:93:bd:ab:
ab:db:ee:0e:5d:82:59:66:91:b2:6b:a8:57:0a:c4:fe:f9:4d:
5d:17:1a:59:26:73:5d:86:8b:e9:39:09:2a:86:19:28:71:68:
62:9e:4e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org