Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D82B3E8499611EFB7DA2DAF762E951A.roa
File: 3D82B3E8499611EFB7DA2DAF762E951A.roa (raw, json)
Hash identifier: 3V+rK5dUFSwlr61/eGHNAQN+RR8Gwl1Mi63Vix9Sgi0=
Subject key identifier: 40:C1:17:24:20:DC:95:29:7A:80:D9:68:0A:1C:E1:F4:87:F8:6E:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D82B3E8499611EFB7DA2DAF762E951A.roa
Signing time: Wed 24 Jul 2024 08:25:10 +0000
ROA not before: Wed 24 Jul 2024 08:25:07 +0000
ROA not after: Fri 23 Aug 2024 08:25:07 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40723 (0x9f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:25:07 2024 GMT
Not After : Aug 23 08:25:07 2024 GMT
Subject: CN=66a0ba66-3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:a6:2f:12:3d:25:27:90:c6:4c:85:50:41:
85:32:6e:51:7e:45:2f:ad:cd:ab:92:8f:a7:5c:53:
a6:08:49:ef:96:c0:0d:bb:04:84:6e:4c:a7:ca:4b:
59:bc:6b:71:cf:4b:cc:cc:15:6d:62:a3:d4:79:fa:
8a:52:b5:a2:95:30:b1:e7:78:aa:51:27:95:f9:c5:
e0:c7:99:38:6a:5c:62:37:d9:e4:fe:17:e4:88:ae:
2b:56:bd:7d:41:0a:04:61:2e:73:a4:8b:3c:d1:85:
c5:7c:1d:13:82:f8:d8:9e:bc:7b:f4:29:95:dc:fd:
89:75:0f:86:f1:19:db:62:ed:c1:41:96:bc:9a:7a:
93:d1:60:b2:a9:2c:1d:42:19:af:80:28:00:d5:b8:
80:b6:28:26:f2:77:54:b1:cf:14:34:28:88:90:fe:
98:88:85:7a:d3:46:5b:9c:d2:1e:92:e6:69:06:35:
af:5c:aa:39:f3:27:67:8b:47:28:f2:ec:6b:23:65:
e6:f4:74:68:84:e5:05:92:80:d6:67:c4:b3:41:e0:
bb:af:9c:8d:f5:a8:85:a6:b5:d8:30:e7:01:9e:c3:
2b:9e:61:4b:04:12:56:bb:51:84:71:1d:0e:77:cb:
e4:f2:71:b9:46:f1:5e:8c:d6:58:a0:bf:82:f1:12:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:17:24:20:DC:95:29:7A:80:D9:68:0A:1C:E1:F4:87:F8:6E:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D82B3E8499611EFB7DA2DAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8b:53:46:e5:a7:e6:99:f1:d1:67:0b:42:6e:28:a5:57:ef:
fa:57:87:bb:42:25:4d:27:aa:c3:f6:8a:f6:54:fa:27:cd:b9:
ae:6d:b9:a8:86:2c:39:a2:42:1d:a7:93:cf:ed:94:17:c2:06:
4a:39:6a:69:77:15:5c:8b:99:b8:7e:0d:a7:f8:77:51:df:6c:
f5:f6:8f:c1:a1:83:06:67:91:9a:5f:b8:f1:be:44:3c:9c:23:
94:37:bc:07:69:22:02:0c:b4:72:e4:2b:b0:45:b1:ad:83:47:
71:07:df:06:d7:79:b1:c1:55:ca:f8:45:fd:ec:ea:20:ed:2e:
84:67:a6:db:0f:40:a2:9f:3c:85:d6:ad:b5:3f:fc:93:32:57:
ba:19:b4:08:03:27:98:91:83:89:54:89:1c:90:7f:01:36:21:
68:6a:27:8f:dd:3a:3a:af:92:85:ae:4c:09:b1:2a:b7:a5:c3:
2b:00:d4:36:5e:e1:03:06:34:37:a5:7a:0a:cd:3d:26:91:ad:
a7:3f:97:e3:cc:31:34:2a:98:04:92:9e:80:3c:08:95:8f:b6:
69:31:79:8a:56:47:6b:a4:b5:7d:6f:97:57:11:b2:de:56:49:
11:02:0f:80:cf:a2:8c:4d:01:73:67:cb:3b:e1:f8:c6:60:fd:
69:85:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org