Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/408B0EA43F5B11EFA9C95E75762E951A.roa
File: 408B0EA43F5B11EFA9C95E75762E951A.roa (raw, json)
Hash identifier: uhvJOFv3UsYT7dRWWGyxAcMmFP5kCoDYFDJQpbYxbrI=
Subject key identifier: AE:EC:17:E8:A4:97:03:69:B1:2F:4E:15:B5:09:7A:01:CF:C4:95:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/408B0EA43F5B11EFA9C95E75762E951A.roa
Signing time: Thu 11 Jul 2024 07:57:43 +0000
ROA not before: Thu 11 Jul 2024 07:57:39 +0000
ROA not after: Wed 21 Aug 2024 07:57:39 +0000
asID: 63139
IP address blocks: 156.227.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39864 (0x9bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 07:57:39 2024 GMT
Not After : Aug 21 07:57:39 2024 GMT
Subject: CN=668f9077-20d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:78:79:ba:aa:55:14:1f:21:d7:77:17:3a:
66:ed:b6:d5:54:d8:f8:18:cf:a7:20:96:c2:81:08:
32:27:50:97:cc:25:3b:94:14:56:fd:51:ba:86:00:
61:dd:88:f2:ac:6a:67:76:0d:e8:98:9c:91:8c:a5:
21:a3:23:00:f4:ee:fe:e1:25:e9:ee:a6:8c:b5:eb:
79:75:0c:a9:87:45:4d:67:77:82:a9:09:1f:60:37:
3d:51:29:7e:ea:2a:4d:c0:1d:4f:0c:77:45:cc:f2:
6e:90:6e:68:c5:97:0d:d5:b9:0d:8c:b7:fc:07:fe:
63:51:5a:08:e1:fd:20:4e:56:b5:b3:39:20:00:5e:
d5:4d:1b:1c:59:cf:b5:78:44:ab:88:2c:85:19:9f:
f3:13:5e:41:1b:a1:4e:f0:87:09:1f:fd:61:1e:db:
04:e1:51:21:c5:35:e0:43:01:3a:d9:37:73:e8:1b:
6a:97:49:64:e6:cb:fc:27:44:f1:ef:cf:5f:90:7b:
31:c2:1c:bd:0a:d8:17:3c:2f:04:d8:74:b7:e1:db:
64:59:0f:fc:b9:7a:36:cf:b1:65:5f:bd:70:5e:89:
f2:21:81:a2:db:32:72:2a:c6:82:0a:57:36:a3:f5:
6d:81:09:65:c4:65:89:c8:47:01:66:20:a3:ce:05:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:17:E8:A4:97:03:69:B1:2F:4E:15:B5:09:7A:01:CF:C4:95:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/408B0EA43F5B11EFA9C95E75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.15.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d6:07:3c:38:08:22:0d:74:f9:5e:af:f2:d2:47:b5:82:74:
e0:1b:e8:ad:09:15:47:11:e5:e7:ae:ee:78:04:af:3a:1d:ef:
e3:6e:cf:ff:70:d2:48:7e:f3:84:2b:00:ff:7f:a0:30:16:c7:
44:08:27:a8:bb:07:bb:a6:a2:d3:9a:f9:3d:d1:db:dc:10:85:
2f:e0:08:00:40:ae:c5:0c:4f:c3:54:b3:b1:20:a9:22:95:c2:
a8:dc:2c:0e:c8:4a:b3:37:cf:51:83:2e:44:d6:b3:e3:03:f7:
f1:c7:6a:39:18:db:86:b3:04:f6:5b:4a:ef:91:87:e2:43:23:
ae:51:2b:60:68:05:43:d4:32:86:be:cd:16:b6:6b:a3:50:88:
06:c1:ea:4a:34:a5:85:02:58:9f:49:f2:46:11:47:36:98:c6:
ce:ef:84:20:e5:4c:61:77:ef:70:87:18:05:76:a0:52:10:61:
fb:9d:34:66:59:67:f8:16:9e:9c:19:0a:c5:58:1e:c9:43:7b:
52:67:46:16:77:e7:64:21:39:5c:77:c4:70:98:9b:57:6c:f5:
a1:bb:80:9b:ad:20:a4:bd:b8:ca:ca:d2:53:2d:36:35:52:3b:
1b:fe:2e:3a:d1:98:1f:92:7d:f8:96:95:a3:87:d5:10:f9:83:
f6:81:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:18 2024 by rpki-client on console-fra.rpki-client.org