Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43E96C02429511EF86702148762E951A.roa
File: 43E96C02429511EF86702148762E951A.roa (raw, json)
Hash identifier: mV+HprtllM/OA1CmpTh89YvCeiPwZKgP1GMzUGb3Qc4=
Subject key identifier: 96:7E:9B:17:55:DB:A1:99:DF:68:89:AC:03:23:C6:A4:E9:6F:1B:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43E96C02429511EF86702148762E951A.roa
Signing time: Mon 15 Jul 2024 10:30:33 +0000
ROA not before: Mon 15 Jul 2024 10:30:30 +0000
ROA not after: Sun 01 Sep 2024 10:30:30 +0000
asID: 149440
IP address blocks: 156.236.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40084 (0x9c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 10:30:30 2024 GMT
Not After : Sep 1 10:30:30 2024 GMT
Subject: CN=6694fa49-5c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:8f:f4:8e:f7:4f:cb:e6:6c:49:12:f3:39:
6d:ae:89:9b:42:3d:61:d2:f6:81:1f:f3:d8:3d:49:
b3:a0:35:db:fc:d8:70:1f:fb:67:17:b2:2b:ae:c0:
d5:05:03:3a:74:08:53:52:65:c7:96:a5:ab:62:44:
3b:bb:d3:bb:b8:e6:e5:4f:58:1d:69:37:d6:37:e8:
6f:c9:22:07:be:16:b1:d3:3b:72:14:63:ef:db:bf:
01:dc:9a:bf:26:5e:66:e5:95:fb:77:cf:d3:b1:82:
4d:3b:0b:0f:0c:7e:6f:d5:35:84:f8:87:33:57:0c:
41:ec:e4:e8:3b:78:3e:fa:40:71:ab:10:0b:ce:d7:
aa:4b:c7:72:68:65:0a:0d:09:3e:19:d1:2a:db:45:
db:0e:d9:6a:6a:d5:a6:04:11:6f:c8:f5:7f:6d:04:
63:cb:a9:5d:a5:8a:01:6f:aa:22:bd:d6:48:48:88:
3c:a4:a7:ed:61:54:8b:8b:03:f5:c3:89:78:05:67:
60:cd:98:10:c2:38:fb:db:ba:5c:ba:f7:42:70:77:
b1:a0:f9:ab:1e:e5:a7:3b:9c:7d:e5:16:2e:31:f6:
71:d5:be:7e:4f:8a:1f:59:ed:ae:82:f1:8f:7e:1a:
70:69:42:50:44:75:16:3b:e3:dd:a2:38:e7:ea:ce:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:9B:17:55:DB:A1:99:DF:68:89:AC:03:23:C6:A4:E9:6F:1B:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43E96C02429511EF86702148762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2d:e6:a9:d1:a4:fd:58:f1:7e:50:7c:68:d5:ec:b6:fc:1b:
10:85:0f:b1:85:9c:02:75:1a:c6:8e:c8:2d:c7:1d:0c:1d:93:
19:4e:57:96:63:dd:20:f6:92:99:73:cd:4e:fb:82:a9:d3:47:
46:12:0f:96:69:25:78:6a:93:d0:69:12:cb:fd:88:42:3a:34:
38:42:ba:5d:02:80:2f:8a:5a:95:9b:bc:96:4a:cd:53:7a:a5:
94:e6:cc:51:d3:2b:83:cd:63:23:97:7d:d0:59:3d:c0:b3:03:
02:7a:db:4e:d9:4e:4b:c7:19:95:dd:b7:02:25:06:12:fa:11:
f4:f4:3e:59:58:37:82:6f:94:f6:42:f8:71:ec:27:15:b3:0b:
5e:22:01:2e:7e:99:05:c8:a4:da:69:db:7c:47:11:9d:45:be:
b3:7d:b6:93:72:6b:a4:9a:76:4f:db:e7:7e:5f:50:3e:48:34:
a5:5a:bd:50:9a:7c:c9:78:ed:a5:49:a9:17:14:e3:0d:4a:f1:
8b:e3:d3:18:c8:e8:17:9c:0c:bf:36:dd:58:89:3e:6b:17:39:
3c:d3:c4:38:63:e5:7e:7a:b2:1e:f3:6b:cc:b8:8d:c5:8d:00:
29:d6:6b:b5:f4:47:96:db:74:38:61:bb:c6:b1:82:15:22:5c:
b0:dd:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 16:12:17 2024 by rpki-client on console-ams.rpki-client.org