Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41B7A7AE499411EF982635A1762E951A.roa
File: 41B7A7AE499411EF982635A1762E951A.roa (raw, json)
Hash identifier: Sjya1LdsLxHHlvSmQtOCLz/TiOXraMrd1M6PSPP9z8g=
Subject key identifier: 32:BE:EC:14:43:AE:50:AC:2B:62:1D:81:B3:3D:60:92:B5:53:24:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41B7A7AE499411EF982635A1762E951A.roa
Signing time: Wed 24 Jul 2024 08:10:58 +0000
ROA not before: Wed 24 Jul 2024 08:10:55 +0000
ROA not after: Fri 23 Aug 2024 08:10:55 +0000
asID: 202656
IP address blocks: 156.246.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40691 (0x9ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:10:55 2024 GMT
Not After : Aug 23 08:10:55 2024 GMT
Subject: CN=66a0b712-0b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:83:2c:a3:41:5b:f3:42:bf:a7:c7:f0:90:
fb:61:b9:66:6c:89:8b:f2:35:ad:d4:cc:f7:55:22:
bb:32:9a:ea:db:1d:d7:03:7a:7f:16:4c:ef:27:e9:
af:73:80:41:80:72:8a:02:f4:6e:02:db:84:d7:f5:
d5:f1:0a:8a:d8:53:e9:1d:f0:c7:ef:02:0b:dc:33:
4c:63:37:67:9f:21:a3:eb:29:bb:6a:b4:d4:e2:b8:
2a:6f:1d:c9:89:18:1d:2a:28:7c:f5:6a:c2:d6:44:
af:ef:53:0c:7c:4e:b2:04:29:cf:c9:93:3a:1e:2c:
77:ff:b7:d7:04:4c:cd:9c:25:06:9e:4a:4d:c4:51:
89:b5:14:80:d3:20:dc:ba:60:94:68:3a:0f:f7:66:
2c:6a:ce:69:d6:bd:8c:0b:58:d0:9f:cd:54:c7:a2:
02:0d:d9:c9:47:2c:8d:2f:19:00:e3:fc:54:7d:32:
01:58:d1:32:4e:2c:9f:c6:a7:2c:95:8d:33:a9:cf:
13:54:1c:67:38:1c:ad:6f:97:cf:55:19:26:78:08:
c2:c9:49:a6:af:97:0e:e6:51:dc:27:0d:9e:7f:10:
1c:38:92:30:bc:5b:a1:34:32:3b:40:eb:ef:21:f4:
6b:d6:32:99:98:66:4d:b4:50:ba:9d:d1:97:1e:9a:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:EC:14:43:AE:50:AC:2B:62:1D:81:B3:3D:60:92:B5:53:24:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41B7A7AE499411EF982635A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.178.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e8:ae:65:3e:fe:48:e6:57:1f:5b:82:0d:4a:fa:34:1b:08:
f2:9e:71:6f:92:5f:54:67:e1:b0:c3:3f:24:c7:4a:ff:d1:df:
f1:9f:85:b9:4d:41:e5:b0:2e:12:81:77:ee:61:1f:be:1a:45:
88:fa:2a:26:01:1c:88:62:c4:e6:24:83:1c:d6:de:9c:da:39:
1d:7c:29:07:e5:81:5f:48:cf:f3:f5:46:ab:1f:b6:18:21:2a:
6d:98:23:6e:e9:28:2b:23:70:f4:b4:89:49:4a:2a:29:75:bf:
63:6f:cf:37:c5:96:69:c1:f2:15:b7:86:03:5d:46:e4:43:d1:
80:a9:b5:02:24:d4:14:69:08:9d:2e:28:0b:7e:a8:65:7a:07:
e2:99:95:96:63:d2:ae:64:2f:0d:48:65:b0:03:d6:7d:3c:46:
61:35:93:46:e2:f3:f8:56:52:34:7f:cd:04:4e:05:26:0d:85:
34:3d:32:28:2c:ef:b8:d3:d8:33:80:a9:dc:a9:e0:5a:5f:0d:
db:4e:59:02:74:d1:5e:23:ff:61:00:19:44:71:b0:f1:75:a5:
ab:db:af:46:30:32:7e:87:1f:f5:40:2b:0b:01:4c:0c:7b:5c:
79:2e:b4:08:39:1c:05:87:7c:11:fc:98:c3:ac:5f:87:75:c3:
78:00:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org