Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/450656FC353111EF89743699762E951A.roa
File: 450656FC353111EF89743699762E951A.roa (raw, json)
Hash identifier: KglHJbLi4y17jw3/GiRYIiskR+IrnR2JjAXhcELhvqM=
Subject key identifier: BC:65:8A:1E:E6:EE:44:58:AF:7D:5A:5D:F5:51:6E:D1:E8:54:FE:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 95DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/450656FC353111EF89743699762E951A.roa
Signing time: Fri 28 Jun 2024 09:32:00 +0000
ROA not before: Fri 28 Jun 2024 09:31:56 +0000
ROA not after: Tue 27 Aug 2024 09:31:56 +0000
asID: 399077
IP address blocks: 156.240.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38363 (0x95db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 09:31:56 2024 GMT
Not After : Aug 27 09:31:56 2024 GMT
Subject: CN=667e8310-18a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:eb:38:4b:cc:c5:65:a0:f8:67:08:4b:d2:
d2:23:23:14:a3:be:7e:5f:00:fe:bd:80:fd:95:38:
35:57:9e:ed:99:84:37:e1:64:97:37:ec:6f:21:93:
e4:bb:9e:92:91:63:3f:c0:13:f3:27:83:47:36:5e:
c1:60:30:89:43:e2:4a:9f:0c:54:8b:df:e8:02:a1:
ae:4a:c1:05:87:2f:73:8d:2a:b8:9f:6d:b2:ad:29:
d2:87:56:e9:3d:cc:cf:fa:be:7a:21:d8:43:a0:ea:
39:5c:d6:93:0b:c6:7a:9f:b5:ab:09:ff:87:cf:a8:
13:de:5d:c5:fd:e2:d0:b2:94:68:cc:95:85:72:c2:
3b:3d:db:18:d7:5e:eb:79:c9:67:e3:b9:a8:e0:97:
76:58:fc:2b:14:19:62:94:28:78:b1:a5:b2:25:fe:
25:26:7b:7e:46:df:87:b1:37:fb:d0:24:f4:bf:eb:
52:b0:78:24:af:aa:50:12:42:da:ab:0f:b5:a9:dd:
1a:7a:bc:7f:2e:c9:8d:0f:27:03:89:d5:93:f6:62:
27:30:fd:5e:28:06:ec:50:f9:af:61:b1:88:54:1b:
db:cc:de:c2:0b:b2:08:79:b4:41:03:30:ba:f2:62:
0b:f2:6e:1e:cb:a6:0e:5b:37:1b:44:0a:40:a4:39:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:8A:1E:E6:EE:44:58:AF:7D:5A:5D:F5:51:6E:D1:E8:54:FE:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/450656FC353111EF89743699762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.244.0/24
Signature Algorithm: sha256WithRSAEncryption
88:37:e8:af:a0:f0:80:f0:91:11:af:0b:29:ac:8e:01:fc:be:
17:71:8f:24:ef:9f:2a:51:cf:46:90:26:7d:d1:7d:f1:21:86:
90:12:64:eb:a1:82:24:cd:ab:5e:12:d5:bf:11:00:08:0f:2f:
c7:06:db:f2:b6:67:e0:23:20:26:f4:52:c0:5a:d1:5f:10:3a:
40:d0:00:13:f6:37:ed:1d:db:d6:1a:d4:c3:70:b8:5d:9e:b6:
fb:e8:2d:9e:c9:e7:4f:29:eb:65:a3:c7:8f:a7:78:a2:fb:24:
01:b8:b2:2d:d4:49:f4:5d:6d:23:12:73:1d:6a:5f:a3:28:1f:
fb:78:5b:08:6a:b3:3d:91:cb:4e:45:ad:b6:b8:86:09:9d:f0:
3a:34:d8:df:99:4f:65:61:c6:2c:ac:b9:3a:44:bd:15:61:8d:
07:03:35:36:f1:0a:c2:88:22:e6:c0:52:16:69:1f:6f:45:3d:
d4:12:31:4c:e5:4e:f1:91:2b:dd:7d:94:ca:9c:ea:9f:0e:d6:
a3:20:bf:97:d7:90:71:4f:c5:0e:bd:00:5c:1d:30:b5:0d:7c:
22:d8:2b:17:90:6d:e8:98:ea:eb:6f:24:d9:85:36:80:ac:a9:
a7:62:21:58:8d:b9:5c:0c:76:79:70:72:2d:9e:99:24:8c:d7:
95:0f:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 11:52:35 2024 by rpki-client on console-fra.rpki-client.org