Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FBBF5C048C911EFB19BFEBB762E951A.roa
File: 3FBBF5C048C911EFB19BFEBB762E951A.roa (raw, json)
Hash identifier: n1tNzqoIsE+4AW/jGa2DlZcz6548wZXc+OC8ZwvlapU=
Subject key identifier: FB:97:57:8D:BE:4F:E8:21:04:07:4A:3F:9D:2F:9B:33:BA:71:19:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FBBF5C048C911EFB19BFEBB762E951A.roa
Signing time: Tue 23 Jul 2024 07:57:47 +0000
ROA not before: Fri 26 Jul 2024 07:57:43 +0000
ROA not after: Fri 23 Aug 2024 07:57:43 +0000
asID: 202656
IP address blocks: 156.246.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40582 (0x9e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:57:43 2024 GMT
Not After : Aug 23 07:57:43 2024 GMT
Subject: CN=669f627b-9952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:cd:a4:16:24:ec:cf:3a:24:b3:9e:5f:d3:
8c:b1:74:d8:b6:58:a8:b2:07:97:b1:fd:2a:09:60:
ef:c1:7f:08:7b:9c:1a:45:e5:22:8f:7c:10:8a:ac:
55:62:55:a1:27:be:a4:db:08:a3:da:4a:a0:2c:04:
01:23:4b:22:53:48:18:e6:f5:7a:90:35:8f:f5:a9:
d5:8a:22:c0:b3:bf:7b:b3:bb:fa:1e:ea:c4:27:64:
e3:f5:2b:90:73:b2:48:41:ed:da:6f:ea:e1:51:8e:
ad:29:5f:af:21:a1:20:8d:8b:ce:01:ca:dc:97:ee:
0d:1f:54:ba:8f:1f:12:8c:d9:92:0b:06:fe:4e:68:
a7:ca:2c:87:5c:b9:d0:c3:34:18:1c:93:c6:97:41:
67:fd:9e:b7:68:fe:6d:38:e7:4d:4e:d2:87:f4:44:
6a:be:a4:a9:be:75:1f:5a:52:f7:0b:89:66:55:ee:
44:f9:8a:d9:a7:47:91:fe:3c:65:60:d9:99:44:ee:
d9:35:dc:80:ae:82:bf:bd:8c:03:59:96:32:86:f6:
01:f5:be:93:f9:6c:80:12:96:25:1e:f9:9b:07:af:
6d:99:f5:ff:5f:7b:37:a9:e9:b4:56:6f:b3:bb:49:
ca:3d:a3:c7:85:5a:01:f0:36:8b:cb:59:03:eb:7b:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:57:8D:BE:4F:E8:21:04:07:4A:3F:9D:2F:9B:33:BA:71:19:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FBBF5C048C911EFB19BFEBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0b:86:3e:2f:30:8b:aa:93:a6:f4:0e:9f:bc:da:13:cd:7f:
22:c9:76:6e:d3:23:1c:fe:7d:63:7c:7c:7b:83:cf:1e:ca:a0:
68:43:b9:cb:c0:9e:13:3e:64:97:93:f3:14:83:87:94:4d:6e:
3f:6d:44:6b:a7:06:7e:81:88:61:91:5c:72:66:2d:e1:93:8e:
0b:af:5c:1a:16:95:84:96:6e:0f:c4:58:bb:a9:62:76:a5:47:
d4:4a:23:7f:6e:ae:8c:1e:db:ed:d8:67:1b:4f:f0:82:07:7f:
a0:43:53:50:56:dd:ed:03:25:24:19:42:c2:87:cd:f1:ba:5a:
b6:16:8b:3a:55:f2:d9:b9:e7:ab:9b:18:0f:ec:a5:80:58:e4:
85:f8:31:76:4b:3d:3c:a6:d7:78:9e:3b:2f:5f:01:b9:4b:04:
1b:5e:84:19:a2:b2:b8:89:97:30:ac:94:52:f8:35:45:a7:89:
53:32:a4:56:1d:9c:80:59:92:2b:e0:b8:9e:c9:9e:49:06:d4:
d4:8c:8c:07:9b:a4:c0:4b:fc:20:81:8d:9b:71:a3:01:12:a5:
b6:14:e8:65:f4:b1:e2:10:7c:7b:3f:6e:f4:84:30:c0:46:97:
99:e1:42:39:41:33:c6:4e:2b:3c:28:87:41:17:d4:3b:f1:1a:
4f:64:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org