Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/396923E4404211EFA4DB9E92762E951A.roa
File: 396923E4404211EFA4DB9E92762E951A.roa (raw, json)
Hash identifier: EtAwD5BduvIghFI/v4cQbAQngovWgAspXs18D1LzHqo=
Subject key identifier: BE:82:BF:8F:B8:5E:F6:5C:D9:26:19:54:0B:9E:90:27:EC:40:CD:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/396923E4404211EFA4DB9E92762E951A.roa
Signing time: Fri 12 Jul 2024 11:31:05 +0000
ROA not before: Fri 12 Jul 2024 11:31:01 +0000
ROA not after: Tue 13 Aug 2024 11:31:01 +0000
asID: 138915
IP address blocks: 156.244.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39907 (0x9be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:31:01 2024 GMT
Not After : Aug 13 11:31:01 2024 GMT
Subject: CN=669113f9-af56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:ce:78:e2:21:d7:2c:89:da:e1:b9:dc:1f:
fa:1a:70:fd:c2:2a:4a:23:61:ab:2e:49:69:b1:7f:
2a:98:5c:04:9a:e4:b1:fc:45:aa:7e:b3:cd:48:ce:
65:5d:68:a1:da:58:0d:96:a3:a6:65:0e:89:d9:c1:
18:a9:29:98:d2:cb:27:cf:fa:41:24:76:be:b6:91:
2c:19:65:61:78:d5:5c:10:c0:86:d1:e7:4e:3d:97:
e3:4f:35:cc:88:0f:02:87:06:0c:5c:08:55:e6:60:
cd:dc:6e:c5:fd:eb:02:65:29:b7:1e:66:8a:a9:23:
5d:a8:e3:74:31:d5:14:22:bf:a9:96:6e:95:ad:ea:
e3:08:c3:0f:b5:9b:e5:6e:11:7e:f0:6d:ba:76:0e:
08:56:8a:d5:55:2b:d7:92:a4:c6:fb:e1:91:14:b0:
7d:e1:44:c4:b6:d5:bd:e1:f6:f9:a5:54:68:c5:34:
c7:02:7e:23:e9:35:f7:c4:5a:0e:a9:94:06:26:e2:
5d:c0:78:e6:61:c7:ca:f8:6f:bf:fe:17:51:eb:5d:
b5:26:df:37:53:c4:d8:e4:15:0e:e8:50:2f:da:2f:
6c:44:89:6d:b9:40:66:f9:91:af:0d:5f:02:38:29:
78:17:d9:fc:4b:2a:0f:37:08:ab:34:56:34:94:29:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:BF:8F:B8:5E:F6:5C:D9:26:19:54:0B:9E:90:27:EC:40:CD:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/396923E4404211EFA4DB9E92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cd:ee:29:b9:9f:d6:42:8e:a3:1f:b4:b8:8a:c9:8d:d0:a3:
4b:f0:f3:a9:a0:78:72:5c:22:d3:c1:af:e4:b5:0c:ab:e8:ae:
e8:92:c0:89:8e:1a:af:ce:ea:d6:3d:c4:4a:99:15:25:c4:a0:
6a:c4:e2:fe:ab:53:2d:2f:5e:f4:5b:3e:48:25:93:f3:73:d8:
6b:dd:0b:28:ff:4e:69:41:14:e1:cb:93:ab:39:8b:2d:52:a4:
a6:eb:34:17:36:4e:d9:1d:36:a5:d2:c5:1b:6f:95:65:66:1d:
19:0c:c4:d1:23:ca:0d:39:a7:e5:d9:43:32:fa:96:e3:c5:41:
29:41:20:86:e5:d3:52:ee:95:ec:10:28:1e:71:57:87:05:33:
74:d1:50:e3:9d:92:c4:72:98:25:11:16:1e:ae:0c:74:85:5c:
a8:6b:27:6c:39:ff:73:36:3f:c7:b1:79:80:96:1a:99:67:23:
a5:02:ba:67:ff:a7:b1:41:d1:27:21:19:ce:d3:b2:20:89:cc:
c3:fd:fc:22:b0:0a:d7:93:4b:4a:49:48:59:2e:5b:c1:87:61:
83:18:94:44:aa:02:a2:ff:78:b9:75:5c:af:3f:59:36:73:42:
33:3b:4c:30:74:31:5f:a5:9d:16:79:6e:2c:1a:81:33:30:7a:
50:9e:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org