Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4423C64645A511EF852A2D66762E951A.roa
File: 4423C64645A511EF852A2D66762E951A.roa (raw, json)
Hash identifier: 4IYI2CTLIeqLf5EZzOZ6GWZarNiWECDIW6Za30pOBZ0=
Subject key identifier: 71:B8:43:0A:5C:2D:17:51:C2:CD:1C:65:F4:99:44:85:3D:58:60:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4423C64645A511EF852A2D66762E951A.roa
Signing time: Fri 19 Jul 2024 08:02:39 +0000
ROA not before: Fri 19 Jul 2024 08:02:35 +0000
ROA not after: Mon 29 Jul 2024 08:02:35 +0000
asID: 142062
IP address blocks: 156.238.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40336 (0x9d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:02:35 2024 GMT
Not After : Jul 29 08:02:35 2024 GMT
Subject: CN=669a1d9f-b5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:b0:d6:38:1f:1a:f2:ae:b7:2a:00:a7:f2:
83:db:dd:30:58:82:81:d7:27:9e:2b:46:05:9c:d1:
e5:29:85:68:89:4f:61:95:77:0c:87:51:8a:16:8a:
b2:b5:6d:11:95:ab:e3:3e:69:07:11:4a:ee:41:b0:
ef:54:1f:7c:91:57:fe:d1:17:4d:7c:af:a9:dc:29:
8e:76:df:7a:59:84:7c:ee:10:51:6b:dd:dd:ca:2a:
a5:f3:78:25:3e:d0:43:b0:da:af:8c:c1:a5:8a:80:
57:30:46:49:07:d7:b1:8c:e9:d9:f1:77:28:52:ea:
09:26:f0:88:6d:af:3c:a9:7c:d3:d3:0b:6b:ba:b1:
4f:17:77:2a:8b:dd:7a:cc:15:7a:46:6f:fd:1e:c9:
5c:b0:86:05:29:c8:60:81:92:ab:72:03:9c:14:47:
22:0c:03:be:37:88:ea:6a:66:3f:5b:30:de:35:d2:
99:26:78:d9:68:b5:31:bf:c4:34:0f:38:4f:4a:1b:
55:35:a1:2b:9a:b6:73:86:35:7c:86:11:fb:7e:c9:
d4:40:be:6c:82:65:47:72:08:f5:29:3f:9b:6b:43:
8f:70:ce:21:10:ee:07:0d:bb:6e:2a:a5:87:d8:64:
f7:43:fd:a4:d6:2c:e3:3d:cf:6c:02:ef:d0:c5:cb:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:43:0A:5C:2D:17:51:C2:CD:1C:65:F4:99:44:85:3D:58:60:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4423C64645A511EF852A2D66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:bb:39:3a:a5:09:74:f7:1c:f2:b8:b1:64:5b:47:73:17:63:
2b:94:75:36:0e:1c:5b:01:e9:bd:11:d0:5f:17:c2:ed:df:f3:
f0:3f:b6:9e:42:0d:65:48:64:31:0d:22:1d:f3:ce:9d:3f:7e:
32:64:62:b0:19:7e:05:e8:da:2d:35:fa:49:f2:20:6a:19:bf:
e3:52:16:a6:0e:60:1f:41:ff:57:d6:41:eb:83:50:79:e8:8c:
48:d1:53:8a:c2:26:ef:42:c0:e7:0a:42:b2:a8:97:16:0c:52:
82:6e:f6:28:27:ab:90:8d:02:c3:74:26:b2:cb:f4:27:02:1b:
84:41:1f:7d:23:1a:9f:c3:54:a2:bf:5e:b7:f1:f5:7b:f1:db:
f1:97:34:e0:57:77:05:9a:5e:76:0a:cf:bc:0e:84:0a:2f:15:
b5:a0:2a:a7:6d:c5:e3:90:22:05:57:bb:70:44:8f:06:bc:26:
0a:29:f1:94:31:ae:54:e0:7f:39:4c:6c:c4:10:77:69:06:82:
ee:fb:5b:bd:f4:6c:ab:42:88:6d:51:49:6f:c8:53:ce:9f:c7:
6c:87:d7:7b:87:eb:89:0e:54:da:52:5e:8a:49:b6:20:40:76:
53:33:92:f2:3b:79:de:10:f3:b1:d2:4a:7d:4c:a4:9b:b7:74:
6b:19:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org