Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/370E1C303A9311EF860F34A2762E951A.roa
File: 370E1C303A9311EF860F34A2762E951A.roa (raw, json)
Hash identifier: MBXfCpo5mBHdlq9ML8AIPsQQdb67FaTxm3G1UiVPp7A=
Subject key identifier: 37:AC:7E:80:DC:7F:A6:C3:04:11:1A:3C:F4:D0:AC:48:44:03:E6:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9887
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/370E1C303A9311EF860F34A2762E951A.roa
Signing time: Fri 05 Jul 2024 05:55:43 +0000
ROA not before: Fri 05 Jul 2024 05:55:40 +0000
ROA not after: Thu 01 Aug 2024 05:55:40 +0000
asID: 39600
IP address blocks: 156.255.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39047 (0x9887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 05:55:40 2024 GMT
Not After : Aug 1 05:55:40 2024 GMT
Subject: CN=66878adf-b37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:a0:c3:45:e9:6a:db:97:86:ce:97:4a:16:
ae:5c:d0:1a:c6:7e:94:03:c9:56:6e:f2:59:77:f1:
e1:7b:f4:54:fa:f6:e6:f9:b0:a2:f4:90:4a:cf:fc:
73:5c:22:63:42:01:5c:51:4c:b1:19:9a:c7:ce:fc:
9f:9f:8b:14:51:d5:94:db:e8:df:ac:37:84:36:0e:
03:ae:e4:88:72:4b:7e:98:97:ae:cb:41:44:3c:77:
89:e2:8f:1e:ea:a5:68:e7:dc:ec:3f:29:67:25:58:
25:7f:55:7e:a9:de:16:c3:d2:5d:69:b3:3d:3e:8b:
dd:68:42:8b:6a:c6:f4:27:6b:a1:1a:45:02:fc:55:
ed:06:b3:32:62:20:dd:ab:cc:7a:9d:0a:5f:27:c7:
73:f4:d3:e7:34:98:29:1d:77:b3:c3:a4:18:b2:55:
5d:49:43:e3:db:4a:88:98:c0:8e:b7:63:d1:e9:ef:
bd:20:28:2c:29:d9:45:b3:68:ee:8e:79:fa:c7:fa:
f6:40:bb:93:29:7c:cb:10:bc:95:1a:30:7a:34:11:
73:4c:a0:b2:a3:06:e4:de:02:5d:57:5b:92:b3:ab:
f4:78:5f:86:db:14:f4:2a:f1:ed:55:b9:62:b8:2c:
0e:f9:fb:47:9b:fc:0a:cc:7b:c6:09:3e:13:48:2f:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:7E:80:DC:7F:A6:C3:04:11:1A:3C:F4:D0:AC:48:44:03:E6:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/370E1C303A9311EF860F34A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.80.0/22
Signature Algorithm: sha256WithRSAEncryption
67:ee:8d:0a:49:b9:d3:4c:36:12:87:2d:e1:1a:55:2c:e6:ec:
d9:09:69:f5:8d:63:4d:1d:63:7d:c3:72:44:07:d2:31:d5:06:
70:fc:4e:79:db:9e:7a:9d:13:7c:01:63:61:04:c0:73:27:94:
a6:6b:cb:d0:e8:76:fa:a5:83:74:88:29:b5:6c:3f:4c:ea:f2:
f4:cf:eb:7b:00:fe:bf:0a:33:61:eb:5f:ef:06:4c:1b:0b:ba:
74:6d:e6:28:0e:11:7a:73:0a:96:6d:07:0c:d4:34:51:7e:c7:
9e:a7:69:69:c6:ac:9d:93:95:86:77:aa:03:92:b8:c8:bd:b0:
9b:d7:e8:fa:4a:de:a7:ef:d9:a8:68:9d:57:81:ca:68:e7:84:
5c:5e:e6:13:ea:90:f3:dd:46:77:25:0b:45:87:4a:3f:17:75:
4d:d9:eb:bc:a2:f2:9b:98:90:cd:44:c7:e4:25:e0:5c:fb:ab:
9d:0e:87:ae:72:5c:3c:6d:2b:63:61:07:15:01:9e:a6:98:47:
93:9c:c0:52:c2:92:72:8f:57:74:0b:90:d6:9f:09:0b:2b:7c:
20:80:54:00:a7:1b:6a:dc:86:80:0c:28:62:2d:77:83:66:95:
f6:88:2c:f2:b5:61:ab:d2:6d:1c:b2:51:0b:bd:7d:8d:0a:c7:
3f:f2:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:32 2024 by rpki-client on console-fra.rpki-client.org