Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F11ECC02F911EF9D405E22017001B1.roa
File: 45F11ECC02F911EF9D405E22017001B1.roa (raw, json)
Hash identifier: 4i5AnMGXCHiYgT95xWg1pjUeqAKwID85Rs/GKLZe9Bs=
Subject key identifier: 78:F6:58:02:0F:93:AB:1A:D2:14:F5:BB:50:11:9C:DD:43:9F:37:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 851D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F11ECC02F911EF9D405E22017001B1.roa
Signing time: Thu 25 Apr 2024 11:45:11 +0000
ROA not before: Thu 25 Apr 2024 11:45:08 +0000
ROA not after: Sun 05 May 2024 11:45:08 +0000
asID: 39600
IP address blocks: 156.255.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34077 (0x851d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:45:08 2024 GMT
Not After : May 5 11:45:08 2024 GMT
Subject: CN=662a4247-8f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:b0:95:61:01:ed:c8:21:be:2d:6e:39:81:
a5:c8:9e:fa:c7:91:31:7d:83:fd:54:4d:16:a1:8a:
99:3b:1b:9c:df:8d:bc:85:74:c9:8c:0a:53:8b:0a:
e3:a7:77:5d:01:ac:85:a6:81:fb:fa:14:56:02:91:
11:f7:40:eb:4b:e6:be:5e:6f:c4:b6:af:79:de:d3:
00:85:3b:73:60:a5:3a:55:c2:f4:4d:df:4a:e6:84:
6d:a3:3d:d8:96:eb:c5:f6:e6:a6:af:10:8b:cf:cf:
ad:39:a4:c5:61:8e:9d:1f:e6:42:71:7f:05:13:37:
9e:c9:17:c0:fb:81:d8:64:e0:c5:5b:44:ce:9c:43:
43:77:8f:f4:ff:b5:fc:75:08:b1:4e:74:a8:7b:55:
a1:66:44:73:99:45:bb:f9:1a:b1:c9:31:a2:52:de:
8b:43:ae:36:46:13:80:18:6c:f8:13:0f:77:4f:a2:
44:b2:ae:96:6f:4b:5a:e9:a3:f5:1d:5f:99:16:dd:
e0:23:5a:79:8b:62:c2:bb:17:03:b0:a2:ce:8a:50:
c0:9e:e1:0e:23:70:c2:ca:06:00:00:cd:d8:96:ab:
7e:2c:07:2c:f6:e3:8e:0a:43:ab:4e:3d:dd:63:1d:
93:d9:e4:95:a2:c1:95:59:a1:5e:52:45:41:f4:b5:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:58:02:0F:93:AB:1A:D2:14:F5:BB:50:11:9C:DD:43:9F:37:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F11ECC02F911EF9D405E22017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.72.0/21
Signature Algorithm: sha256WithRSAEncryption
79:85:a6:bc:15:94:15:3f:47:94:3f:6e:88:3e:75:93:5b:fc:
5b:0a:b2:84:74:27:16:66:e9:ff:c4:38:21:de:95:63:51:d2:
70:d2:8b:a1:9b:e9:bb:55:ea:77:a7:4d:43:db:55:46:3b:57:
3b:c8:4f:6d:76:dd:80:ca:05:d7:36:b2:53:2a:24:c4:3b:2e:
13:c8:91:c7:ea:4a:ed:11:2d:2c:92:e0:70:1c:3c:8c:18:6a:
5c:ea:85:a5:3d:94:47:05:e3:a7:6b:cf:41:a7:9e:8f:91:2e:
62:f3:0b:29:cc:96:77:30:ee:ad:f1:9d:e2:2b:fc:d6:c1:58:
fb:fb:e1:f2:c4:23:ff:b1:95:00:05:70:81:2f:22:12:66:32:
93:c4:a7:fa:6c:b9:f7:e2:8a:3c:b3:d6:05:dc:49:31:75:0a:
77:29:e5:33:95:8a:75:c5:88:6c:50:a9:de:a5:27:e7:fb:4b:
9f:a5:55:cc:af:4a:c1:6d:ce:49:27:3d:72:b9:11:a3:34:8e:
81:5a:86:30:6a:80:b2:0c:7f:5a:43:ad:24:b8:cb:cb:45:b1:
7d:83:e1:00:38:96:f7:a1:f4:6a:28:0a:a1:68:1a:09:d3:bd:
18:37:2a:fa:26:5f:73:19:c3:12:01:34:50:9f:f7:90:7f:16:
ae:94:30:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org