Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42F0562C47D511EFAD6C1045762E951A.roa
File: 42F0562C47D511EFAD6C1045762E951A.roa (raw, json)
Hash identifier: dACxzLgjt4LrJFFe+RRkGyZ4hvrRBOcZlsDtCXrEGR4=
Subject key identifier: BB:88:4E:54:57:5C:C7:2E:A0:68:26:BF:F6:10:F5:54:68:1E:52:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42F0562C47D511EFAD6C1045762E951A.roa
Signing time: Mon 22 Jul 2024 02:51:15 +0000
ROA not before: Mon 22 Jul 2024 02:51:12 +0000
ROA not after: Fri 23 Aug 2024 02:51:12 +0000
asID: 44559
IP address blocks: 156.246.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40405 (0x9dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:51:12 2024 GMT
Not After : Aug 23 02:51:12 2024 GMT
Subject: CN=669dc923-adbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:ea:e3:35:3b:8b:03:43:8a:a7:8e:13:86:
42:3a:cf:7e:d8:d0:d0:7b:77:12:22:73:c6:14:a5:
4e:4c:ee:4d:d0:55:9f:c8:14:7c:ba:d0:0c:5d:0c:
11:89:3b:33:01:57:0a:5a:e3:ee:33:0b:18:ae:09:
8a:19:5f:da:f5:f1:3f:f5:75:e6:4f:04:9e:5c:43:
26:16:8d:2e:58:4c:1b:e0:09:22:ee:a5:46:bd:e0:
18:a2:ec:d9:aa:d0:58:ef:37:ee:94:cb:35:4c:e5:
fc:68:69:75:e0:10:f2:61:38:bb:03:65:cd:c1:c1:
83:69:65:e3:16:8e:a9:80:9e:5d:36:9e:b2:04:6d:
f4:81:f1:b8:d3:5c:86:6f:b4:ae:fc:db:01:61:28:
e7:a4:eb:62:23:5d:92:32:d6:23:3c:ed:c2:80:c2:
94:18:c9:b0:76:b7:9f:5e:25:08:25:3d:0a:d1:d9:
b4:5a:a4:e8:b6:12:a8:33:4b:62:38:a7:1b:52:17:
40:16:f4:14:24:09:b5:77:02:6a:d4:ae:f2:b3:92:
6b:d1:d6:fd:75:96:0c:78:ce:47:28:2a:89:a7:f1:
62:25:25:c8:04:e6:9a:5f:0d:60:35:b2:15:f2:47:
05:fc:bc:7c:a3:df:0f:f7:98:2b:9d:56:34:8e:4e:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:4E:54:57:5C:C7:2E:A0:68:26:BF:F6:10:F5:54:68:1E:52:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42F0562C47D511EFAD6C1045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:77:d6:49:80:1a:0a:f6:94:0e:f0:67:a8:5e:7f:dd:61:1f:
5e:01:88:6d:a2:ea:04:5b:32:1e:73:71:f0:1b:15:79:04:72:
f3:fd:aa:f1:57:8f:f1:c9:03:b2:65:f7:a3:37:3d:2d:fc:ce:
3b:e9:cc:b9:6f:5f:68:e3:17:eb:8e:d6:04:5c:3b:a3:21:b9:
dc:2b:4d:45:2c:c9:fa:9f:0a:7c:ce:5c:29:12:f2:61:68:24:
24:20:4f:ab:e1:e9:f2:ba:83:4d:a0:d6:0d:7b:39:29:ea:8d:
95:6a:41:78:7f:e9:da:c5:f4:91:56:90:e4:e1:85:9f:6c:95:
5f:04:11:49:21:3e:6b:8b:e0:93:4b:2e:fa:4f:1f:4d:7e:24:
ad:9d:50:61:90:c7:38:42:ea:c5:6b:2d:30:46:65:49:91:1d:
f5:88:60:cb:91:69:58:cf:92:59:22:bb:82:a9:6f:f2:d6:d2:
02:ca:48:5c:36:49:93:36:d6:5a:ad:3b:9a:74:06:2b:96:0b:
39:e5:d6:49:4e:9b:19:53:21:9c:ca:61:b6:b2:d0:ef:11:98:
df:a2:d1:77:44:f2:89:14:c5:83:d9:80:79:0c:9f:8d:20:8f:
29:9b:75:a0:ad:7c:d5:6a:66:79:5a:9d:60:e6:b4:6c:dd:aa:
4a:10:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org