Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42DA84EA47EF11EF8DA3CD75762E951A.roa
File: 42DA84EA47EF11EF8DA3CD75762E951A.roa (raw, json)
Hash identifier: 4nkNgvUr4c9Sg+JaWODXD2sEVDB8W25ZBQwMPenKj3Y=
Subject key identifier: B4:8A:A7:54:80:9D:C5:98:C0:03:BF:F3:94:F0:64:2B:E7:A1:58:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42DA84EA47EF11EF8DA3CD75762E951A.roa
Signing time: Mon 22 Jul 2024 05:57:22 +0000
ROA not before: Mon 22 Jul 2024 05:57:18 +0000
ROA not after: Wed 31 Jul 2024 05:57:18 +0000
asID: 137547
IP address blocks: 156.245.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40525 (0x9e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:57:18 2024 GMT
Not After : Jul 31 05:57:18 2024 GMT
Subject: CN=669df4c2-9253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:91:f6:76:4b:f6:48:e0:b3:d2:a8:f0:3e:
03:ac:82:4f:df:e7:d0:df:70:71:ce:ee:47:7d:b5:
39:4c:fe:4d:c3:9e:bc:6c:cb:72:fa:90:10:9a:95:
be:e4:af:e9:b1:2b:c2:3f:76:8e:7b:27:f7:c1:a4:
63:3d:49:0e:58:42:6c:36:b0:fe:e5:85:61:5e:86:
1d:a6:4e:94:01:95:b3:76:d1:cd:0b:3c:cc:7d:5c:
1f:fb:33:0b:00:74:9b:16:6b:29:a4:09:35:96:28:
be:55:ba:1b:c5:44:35:11:25:fe:65:a7:1b:8f:13:
9c:2f:5d:fa:af:13:69:d9:4a:8e:68:dc:1e:8d:14:
df:88:fa:1b:e9:89:29:3b:bb:e4:16:5d:84:0a:04:
3f:6d:58:ff:58:11:81:25:fb:1c:1d:69:23:e2:01:
83:c7:2e:bf:4d:3e:7d:88:9e:d9:fd:3e:8c:35:11:
f1:50:c9:59:07:5d:c8:67:46:81:40:48:1b:56:db:
91:0c:9e:62:33:8d:44:2d:53:9a:e0:c0:36:d2:18:
20:96:24:1d:4b:32:cb:4d:b4:14:33:93:c9:7a:e5:
9b:7c:83:50:94:23:85:cb:2e:e3:54:2e:fd:85:53:
a5:ec:4b:40:b2:dc:9d:99:bc:d7:5e:8a:83:7c:54:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:A7:54:80:9D:C5:98:C0:03:BF:F3:94:F0:64:2B:E7:A1:58:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42DA84EA47EF11EF8DA3CD75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
63:61:01:7c:5d:b6:30:fe:68:38:44:3d:05:98:db:fc:38:41:
a2:26:c1:e2:f4:0f:96:0a:07:66:2e:75:21:c1:f0:7e:71:7f:
02:7b:c7:57:b0:13:e8:94:06:40:16:ca:c3:cb:a5:52:64:72:
bc:b2:e9:f2:89:17:37:d4:f4:5d:18:4c:55:10:66:d3:8f:72:
d9:7a:c7:b4:35:e8:99:9b:1e:cb:51:cf:40:6d:e7:47:8c:83:
8e:69:dc:89:95:45:dc:65:aa:b6:89:e0:2b:4c:e9:49:22:46:
9c:78:d1:11:20:23:e9:77:50:d5:9c:6e:a5:ba:07:c5:34:09:
54:af:8e:ab:70:29:58:88:3d:98:ef:53:0e:0f:a9:4c:f2:df:
4e:fb:17:c8:15:c1:9b:02:10:a0:e0:a9:59:81:2c:f5:da:09:
db:ec:9d:6c:2e:a2:4e:be:78:5b:44:1b:9d:36:00:05:24:d9:
ec:8c:b7:cc:92:5c:ec:79:af:eb:c3:ed:71:90:bd:6b:75:db:
57:af:e3:9a:92:11:f5:6c:80:58:6d:1a:df:08:d2:bd:3e:8d:
9e:fa:e5:9f:87:b9:2c:e2:4b:4b:0d:51:36:30:ca:62:87:62:
dd:d1:e1:7e:ed:cb:ee:a9:a4:8c:77:68:b9:11:0f:7b:10:16:
54:0c:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org