Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A5A9703CD311EFB77AB76B762E951A.roa
File: 44A5A9703CD311EFB77AB76B762E951A.roa (raw, json)
Hash identifier: RMs89SVk2nJif3vdBxRXgTrzhHALH4SiMUxD5LPSrjs=
Subject key identifier: 99:7D:09:A1:5C:54:C3:CB:36:88:70:D4:93:52:09:33:75:90:21:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 997E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A5A9703CD311EFB77AB76B762E951A.roa
Signing time: Mon 08 Jul 2024 02:39:16 +0000
ROA not before: Mon 08 Jul 2024 02:39:13 +0000
ROA not after: Sat 10 Aug 2024 02:39:13 +0000
asID: 64267
IP address blocks: 156.248.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39294 (0x997e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:39:13 2024 GMT
Not After : Aug 10 02:39:13 2024 GMT
Subject: CN=668b5154-c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:2b:ec:72:f0:85:35:b1:c3:dd:7d:13:9e:
1d:b9:88:8f:88:8f:32:13:35:1e:20:cd:4e:62:30:
3c:3e:8b:71:0c:2e:e0:cd:a9:f6:8e:55:3a:c5:ce:
66:8c:83:30:a9:05:93:85:11:c1:81:94:0a:b8:0a:
8e:e1:f8:6c:12:81:62:a7:33:85:20:50:63:70:2d:
ac:b0:9e:0e:eb:15:b7:bc:eb:fb:bd:f4:27:8e:48:
58:13:df:4a:d4:ad:91:0c:8d:92:f7:9c:0e:73:11:
82:49:8f:96:99:8f:d3:89:9a:0a:38:34:7f:fe:60:
14:43:89:1b:fa:79:b6:8e:14:44:a8:bc:7c:e3:12:
c6:41:6e:e7:94:4c:da:b9:8b:67:e2:79:8f:5a:91:
09:43:85:96:0c:ad:1a:da:7a:b9:92:b4:da:0f:f5:
46:dd:fd:5c:91:55:f9:4d:7f:ed:6a:e5:32:ab:b3:
d2:93:45:b3:04:76:3d:ff:67:e7:4e:c6:1e:12:28:
9c:89:2c:97:47:81:b9:2e:71:3c:8c:78:22:d2:c7:
84:8b:da:22:60:eb:ed:a2:72:b0:6c:39:9e:92:da:
09:4f:7c:c6:5d:5c:a2:b4:d0:4f:ae:cf:c1:3d:c3:
40:d2:01:26:19:47:1b:70:83:d2:dd:fa:be:dd:f5:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:09:A1:5C:54:C3:CB:36:88:70:D4:93:52:09:33:75:90:21:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A5A9703CD311EFB77AB76B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.64.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b2:47:b7:c2:d1:96:f3:c8:3d:1c:67:23:91:2a:fb:4d:e3:
13:77:e8:1d:53:73:a3:09:93:63:1f:26:bb:a5:1a:2e:90:30:
44:f1:f4:eb:11:15:27:90:2b:f8:ef:b3:2a:58:a8:7e:36:4f:
11:08:7f:97:af:9d:d0:eb:85:7a:ff:00:a0:b6:f8:04:2d:6d:
11:75:99:8c:ee:1d:9f:d7:af:e1:42:dd:c1:1d:64:94:40:75:
9b:8b:fb:e2:f5:b0:9e:0b:8a:4a:66:21:df:b3:3b:3e:bb:fa:
d0:68:8b:b4:7a:95:db:5d:c6:1d:84:3e:f9:79:c8:dc:d7:f5:
8a:29:92:c3:e1:7b:3f:19:49:1c:71:a2:25:ae:7e:75:32:15:
7e:85:05:f0:4c:8b:87:50:19:45:17:a7:bb:ed:2a:d4:b9:06:
70:40:fb:94:99:3d:81:1b:45:95:bc:d2:5f:18:9c:2c:41:91:
09:c8:03:dd:ea:fd:30:5c:b6:4e:92:12:f4:ba:57:a7:c0:45:
14:33:fa:e8:ea:89:c3:11:a1:17:a5:d3:83:e0:8f:37:ae:48:
f3:63:db:8c:4b:94:b1:16:9f:66:bd:40:f2:8c:de:24:82:c9:
27:ed:88:b0:f2:83:7b:94:94:20:87:f0:bd:14:af:2e:66:05:
a5:4e:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:32 2024 by rpki-client on console-fra.rpki-client.org