Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/376DAB5A4A6011EF86A04E8E762E951A.roa
File: 376DAB5A4A6011EF86A04E8E762E951A.roa (raw, json)
Hash identifier: vY5kBmbEsVjr/9POxuT1MkG3f8zE+LxQRUHC5a9rwdM=
Subject key identifier: EE:2D:64:D3:BC:BA:93:34:DE:7C:93:62:3C:69:D4:F0:0B:29:DB:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/376DAB5A4A6011EF86A04E8E762E951A.roa
Signing time: Thu 25 Jul 2024 08:30:58 +0000
ROA not before: Thu 25 Jul 2024 08:30:55 +0000
ROA not after: Sat 03 Aug 2024 08:30:55 +0000
asID: 22773
IP address blocks: 156.246.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40919 (0x9fd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:30:55 2024 GMT
Not After : Aug 3 08:30:55 2024 GMT
Subject: CN=66a20d42-5b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:9f:ac:67:e4:c4:ac:15:96:74:2c:f1:96:
b3:5f:c8:d3:2d:35:a8:89:6c:5b:c9:3b:4d:8e:f8:
55:67:dc:f3:57:e7:28:93:ec:a8:70:22:e4:cc:a5:
b4:f5:73:a4:e3:ca:72:88:b4:a5:ed:fd:83:e6:d2:
ce:3e:50:10:fe:67:20:65:52:1d:c5:53:e8:50:7c:
de:c7:66:c9:d7:54:8f:f7:d8:9f:ce:48:7b:86:8d:
96:b9:f8:b2:be:e8:68:ca:eb:3f:8f:2e:ea:3e:a7:
7b:e5:e8:e5:f7:1e:f8:4a:f5:f5:ce:af:4b:08:8f:
04:3d:07:71:2e:7e:64:a4:93:f2:83:7a:c2:62:83:
f8:0b:87:cf:0c:ae:94:f8:20:c9:1b:4a:8e:a7:c6:
f3:5d:cc:6e:12:37:a4:2a:ce:4d:ad:1a:58:c9:ea:
1b:0c:49:8f:45:b1:4e:39:b0:32:6b:06:43:64:c6:
e5:19:29:a7:ae:df:f3:31:f1:6b:57:02:c7:18:f5:
df:9c:69:6c:55:b8:31:c1:09:73:39:6d:c3:c7:a6:
20:1c:d1:74:8b:f5:db:d2:17:ac:37:ae:cc:63:d7:
b4:ac:bc:cb:82:31:5b:a9:3f:c0:b7:62:cd:db:c9:
8f:25:33:ed:72:95:99:e7:0a:7e:39:6d:34:ac:d8:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:64:D3:BC:BA:93:34:DE:7C:93:62:3C:69:D4:F0:0B:29:DB:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/376DAB5A4A6011EF86A04E8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
81:c7:8f:01:0e:03:55:5f:dd:3b:2d:46:9a:33:8b:eb:d7:8b:
d5:5c:cf:43:43:75:0b:59:77:3f:e4:e6:ac:9f:57:9d:f9:3e:
be:bb:56:b2:c3:e6:4e:f2:23:70:97:e8:5b:09:57:4b:7e:db:
12:53:e7:ea:78:37:7a:bc:cf:45:20:9d:30:53:fe:8c:39:58:
24:fa:9d:54:6c:96:62:11:ae:4c:e6:4c:f0:62:77:c1:aa:8b:
f9:b4:f1:60:71:40:cd:f0:77:cf:a8:0a:97:91:7d:fc:60:d0:
6e:98:c2:23:93:a2:a5:73:90:da:b2:dd:b8:a6:65:dd:e4:1b:
9b:44:2c:86:39:eb:23:5d:6f:37:cb:e6:1e:84:0a:ac:c8:95:
00:96:93:e0:77:53:68:3f:22:62:9b:df:a5:85:37:f9:c5:02:
4f:a5:71:24:a3:31:b6:66:f8:14:bb:6e:f8:88:cf:41:64:60:
63:8c:26:8b:e2:b9:21:19:99:dc:86:d6:d3:5f:cc:56:73:8c:
f5:b0:24:73:12:bd:81:2f:d2:35:48:cf:72:6c:b5:76:8b:06:
f8:14:9f:b0:96:35:da:21:4c:b5:03:df:13:f9:f6:89:41:b3:
97:8f:9b:44:ce:2d:7b:c9:a9:a8:5d:c7:16:b0:aa:be:84:bb:
ca:85:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org