Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF427EC441711EFBD9C6156762E951A.roa
File: 3CF427EC441711EFBD9C6156762E951A.roa (raw, json)
Hash identifier: aUcDgf+4/3Z1Qdx5HPp2yEXBFjw7MCfvz2Rhd5BSi5U=
Subject key identifier: 9E:06:81:CF:06:10:D6:98:B1:23:20:80:37:A3:97:29:44:6D:E1:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF427EC441711EFBD9C6156762E951A.roa
Signing time: Wed 17 Jul 2024 08:33:27 +0000
ROA not before: Wed 17 Jul 2024 08:33:24 +0000
ROA not after: Sat 27 Jul 2024 08:33:24 +0000
asID: 5065
IP address blocks: 156.233.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40228 (0x9d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:33:24 2024 GMT
Not After : Jul 27 08:33:24 2024 GMT
Subject: CN=669781d7-0ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:e6:56:9d:21:ba:9b:4e:3e:6d:a6:fd:98:
04:68:8c:5c:7f:46:82:f3:1c:95:89:22:06:8a:6e:
4b:22:43:a6:33:4b:95:e3:29:0c:73:82:94:b2:55:
04:01:8f:7d:2c:32:ff:34:85:7f:e4:e9:41:3d:8c:
e9:c7:f0:c1:4d:18:81:c7:7c:87:fc:5c:07:50:54:
55:e9:f2:05:d5:7a:fd:74:83:d9:1e:f9:fe:5c:71:
2f:e8:db:e1:b1:05:a5:6e:3b:2c:49:15:5d:be:7d:
32:55:22:a8:a3:15:b2:a1:47:a9:58:d9:00:c1:4d:
91:1b:a5:de:9d:5d:b1:3b:c2:15:7b:51:74:7b:08:
5c:82:12:36:85:78:f0:30:ac:46:34:ee:fd:54:14:
6d:47:8e:b7:cd:49:08:90:09:95:98:65:03:2d:cc:
d7:32:12:cd:31:f2:72:c4:36:97:c7:30:67:ae:d2:
f4:71:1f:7d:40:0e:31:eb:58:f9:bf:79:c7:2b:3e:
58:d6:8a:a8:37:4c:ef:ae:57:33:ee:a3:e7:3b:7e:
a7:45:af:e6:a6:67:af:0e:4b:1a:24:f1:da:da:fb:
7d:34:65:60:46:21:1e:96:ef:53:16:e9:68:dd:3d:
4c:33:40:fd:b6:91:22:5d:9d:10:b0:01:29:f4:7e:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:81:CF:06:10:D6:98:B1:23:20:80:37:A3:97:29:44:6D:E1:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF427EC441711EFBD9C6156762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a3:03:1d:eb:e8:ca:02:98:2f:2f:c7:f9:46:23:1f:cf:4f:
90:e6:20:e4:78:0d:cc:a7:9e:9e:6d:75:a0:d4:21:49:d8:a2:
3a:7a:84:94:5b:80:d4:37:a9:e5:d1:f2:78:3d:dc:2b:43:39:
b0:fc:06:88:00:9b:62:f2:9b:c2:ba:2c:ff:e6:69:50:7e:b6:
eb:8a:30:47:5f:69:82:65:46:5a:b0:af:39:bd:de:33:2a:b2:
51:e2:44:31:47:24:1b:ed:29:cf:fa:5a:3f:0c:1f:f8:2b:c5:
f4:de:51:85:ae:3e:4e:8f:cb:bd:cc:e6:71:51:8b:60:fc:b8:
99:e0:76:43:ae:fd:99:67:64:6e:c9:8a:d9:17:be:1e:db:23:
50:5e:00:df:2b:35:9f:5c:62:2b:e1:19:9e:a1:46:99:d2:f8:
1d:0e:1a:98:60:9a:84:7c:94:b4:44:fa:e1:79:e7:aa:d1:9b:
ad:ef:6f:68:38:e0:1f:6e:8c:9c:18:2b:2b:26:13:7f:c3:66:
b1:3d:bd:a7:7c:2f:ac:28:64:33:f4:f8:cb:66:27:69:06:17:
d6:98:4b:57:b2:e4:84:71:a4:f8:d0:de:14:4e:c2:92:d5:26:
9c:9b:b5:04:fb:4a:f9:f4:bc:80:77:e7:ef:c6:9f:94:b2:9f:
0f:e1:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org