Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D94BD8418511EFA115178A762E951A.roa
File: 40D94BD8418511EFA115178A762E951A.roa (raw, json)
Hash identifier: ME5JRKMzWIE9yRR/t1+xq0r2ojtPNeKV6SdYZbS01QM=
Subject key identifier: E2:CA:4A:1D:B1:02:18:31:9F:EF:ED:8E:4F:5B:15:F5:E9:0E:5D:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D94BD8418511EFA115178A762E951A.roa
Signing time: Sun 14 Jul 2024 02:03:25 +0000
ROA not before: Sun 14 Jul 2024 02:03:21 +0000
ROA not after: Tue 13 Aug 2024 02:03:21 +0000
asID: 138915
IP address blocks: 156.244.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39977 (0x9c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:03:21 2024 GMT
Not After : Aug 13 02:03:21 2024 GMT
Subject: CN=669331ed-ff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:2f:25:1b:54:11:44:56:45:bd:12:6f:1e:
fd:f1:e0:bd:07:45:08:96:dc:76:fd:56:ea:0d:70:
43:46:03:de:42:d3:53:32:85:e7:fc:3c:1a:cc:7f:
12:dc:ff:a1:8b:76:d2:d5:c8:fc:fb:bf:5d:59:a2:
4e:30:ca:c3:6a:4d:96:a4:0c:06:a4:fb:74:30:3e:
9e:a9:50:a9:6d:52:c1:79:c8:4d:6e:06:12:bf:13:
41:9b:bc:c3:4e:94:09:ed:46:83:ac:c0:9b:b1:c2:
46:31:fb:b5:13:f8:4d:28:25:f4:b5:02:e9:8a:cf:
29:14:21:5b:85:93:ee:4f:31:43:69:3a:ca:f9:dc:
ff:c6:f2:cf:21:78:69:77:70:9c:ca:39:c6:3c:bb:
13:4d:0e:10:d0:a6:bb:c4:3e:c7:1c:e0:00:ee:62:
8c:2c:9c:6e:df:00:e1:83:7c:d3:c2:4d:62:c9:ad:
3b:51:d5:71:b3:9d:c4:47:50:59:a7:e7:b8:89:67:
76:8b:00:97:84:36:92:7e:27:b9:b4:db:0b:ed:ae:
05:06:bf:d0:8e:7f:0c:37:25:58:0e:7b:b1:d1:88:
45:4f:61:81:ce:8f:cd:b5:ef:9f:c9:d8:2f:b5:6e:
04:df:4a:fd:72:5d:3f:7f:6b:fd:a9:22:c3:bc:b1:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:4A:1D:B1:02:18:31:9F:EF:ED:8E:4F:5B:15:F5:E9:0E:5D:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D94BD8418511EFA115178A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:99:ae:8c:c4:82:db:b1:99:ae:fc:ea:e3:c0:87:b1:87:f5:
1b:a0:cd:3a:a0:7f:a3:8a:fb:3b:de:0b:54:63:8e:3b:6c:10:
89:6a:ff:58:67:84:09:f1:76:43:09:97:2f:eb:0c:84:d8:39:
69:22:f0:a3:f3:b5:cb:6b:e8:6b:39:63:74:d2:66:75:03:41:
b5:28:ab:c2:3a:64:36:8b:ff:b8:54:a5:97:a0:e6:c1:bd:20:
1d:64:c4:64:bd:1b:e7:38:ce:f5:cc:07:e0:a3:ac:a0:cb:1e:
3f:33:c6:26:77:39:0d:47:b6:32:fd:37:3c:d7:6e:f7:40:f0:
33:06:92:2a:67:2b:66:6f:80:72:7f:7d:7e:1b:b6:d8:1b:84:
d7:8a:5a:7b:24:1b:f2:8a:db:67:08:c4:04:50:13:d9:34:d1:
a6:99:b5:96:54:69:07:f8:44:37:7b:8f:0e:18:b3:4b:ab:44:
77:04:aa:ab:4f:5c:07:1d:35:13:86:8b:fd:f3:2d:dc:61:79:
7b:60:85:4f:84:c4:52:4d:fd:ec:68:91:78:fb:5c:70:e6:75:
43:d7:ca:c9:6e:6b:ef:ad:80:67:43:ee:d4:05:33:b5:8a:01:
2b:2f:b6:9e:f6:3d:f5:32:64:31:38:79:1a:10:f6:ea:dd:41:
7d:3f:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 07:40:39 2024 by rpki-client on console-fra.rpki-client.org