Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4018DE5444F311EF90F772AB762E951A.roa
File: 4018DE5444F311EF90F772AB762E951A.roa (raw, json)
Hash identifier: 6uNKXIoLr4AYfo3wPhMZPkK+8qVEdeJVBk0xomuCSVM=
Subject key identifier: 65:3F:33:5E:F8:ED:37:15:B3:6B:BD:46:D1:70:62:A4:74:AC:7F:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4018DE5444F311EF90F772AB762E951A.roa
Signing time: Thu 18 Jul 2024 10:48:22 +0000
ROA not before: Thu 18 Jul 2024 10:48:18 +0000
ROA not after: Sat 27 Jul 2024 10:48:18 +0000
asID: 5065
IP address blocks: 156.246.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40305 (0x9d71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 10:48:18 2024 GMT
Not After : Jul 27 10:48:18 2024 GMT
Subject: CN=6698f2f5-c309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:e3:0f:90:7b:32:ac:f9:72:d3:5b:ac:6e:
ad:71:43:69:54:5a:ca:8b:9e:7a:d7:50:e3:4c:fe:
a0:f6:20:21:8c:78:e0:ed:7c:a7:4f:9a:d4:c2:e7:
f3:b1:ad:49:82:6d:a1:1a:53:fe:4e:bd:6a:cd:71:
a5:59:5c:05:ed:3c:eb:6d:64:05:95:4f:a4:a9:6b:
c4:31:a4:62:12:8b:6e:0e:63:af:8d:5b:cf:ed:2c:
c7:42:ed:bf:73:63:87:c5:ad:11:56:14:de:c7:d0:
44:ba:6c:ee:d4:f8:50:44:e7:7f:eb:36:bc:27:72:
c0:7a:c6:61:c3:c6:8a:44:73:b9:80:64:97:c0:35:
d9:3a:79:7c:32:46:82:49:46:bb:74:bd:fc:31:41:
68:3f:e0:34:04:3d:5e:fd:e5:f7:d7:24:cf:37:28:
82:6e:15:45:a1:9a:58:11:7e:dc:80:d3:8d:6e:cc:
21:64:a8:5a:4e:38:75:25:5d:29:f5:b3:9b:b7:96:
c6:76:18:bc:9c:6f:35:d8:d2:a6:6b:5c:17:bd:57:
24:16:86:ef:75:16:88:ca:c6:40:5b:48:52:93:ca:
60:01:c4:ad:10:25:24:78:45:45:ef:0d:9f:3b:b5:
27:e3:ea:3e:e5:d9:cc:bf:47:cd:bd:65:08:59:e4:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:33:5E:F8:ED:37:15:B3:6B:BD:46:D1:70:62:A4:74:AC:7F:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4018DE5444F311EF90F772AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c7:08:5a:16:a3:46:6a:f3:dc:fd:8c:2a:9b:39:18:a6:18:
02:fe:8a:73:3d:67:b6:85:1a:47:f8:9c:23:60:34:46:3a:16:
11:63:a3:49:fe:26:da:81:56:24:98:1d:57:6c:77:50:86:44:
ad:c1:de:b3:20:fe:71:38:65:5e:ea:fd:7b:5d:8d:4f:da:77:
52:57:e3:cc:6b:83:7e:c8:8b:46:5c:25:de:9b:37:04:bc:12:
c3:45:6a:8e:4f:15:96:69:d7:a1:bf:24:ef:67:35:6b:e3:c6:
2e:87:df:07:a0:2a:2d:6f:f6:b7:fe:f5:9f:4f:ca:3f:04:85:
0a:b3:b6:08:6d:44:48:81:34:2e:2c:9d:d3:ec:10:1f:72:12:
fe:89:7c:5c:5b:1f:57:3a:e4:49:cd:c8:66:ce:15:1a:e1:6d:
0d:69:98:59:bb:f8:cb:e0:e8:34:56:33:2e:c9:4b:f2:c5:7b:
14:4d:5a:ad:15:0c:bd:8d:c2:55:af:bd:29:b7:4b:1e:90:34:
9d:40:f6:3d:b0:1e:1e:2a:32:11:22:fe:40:a1:e8:9d:b2:2e:
68:4a:62:84:13:6d:24:bf:8e:61:a7:7b:b9:fa:48:24:c9:68:
18:22:a0:b1:cf:ad:0e:5a:9f:a1:04:c8:ba:3a:f4:2e:d3:43:
2f:f0:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org