Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F6454A3CE311EF87F8F75C762E951A.roa
File: 45F6454A3CE311EF87F8F75C762E951A.roa (raw, json)
Hash identifier: Cr6MFezkO+B64DDSpTuK9b78dq2jhs1SYiofDKDPaGM=
Subject key identifier: F8:0A:10:10:35:70:C0:A2:17:47:40:BB:AA:B8:D7:20:ED:E0:90:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9988
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F6454A3CE311EF87F8F75C762E951A.roa
Signing time: Mon 08 Jul 2024 04:33:50 +0000
ROA not before: Mon 08 Jul 2024 04:33:47 +0000
ROA not after: Tue 13 Aug 2024 04:33:47 +0000
asID: 138915
IP address blocks: 156.244.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39304 (0x9988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 04:33:47 2024 GMT
Not After : Aug 13 04:33:47 2024 GMT
Subject: CN=668b6c2e-5c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:24:f5:66:83:5d:68:40:c8:7d:18:8e:d5:
c4:86:c2:de:93:1e:c4:db:f9:2a:d5:0d:ec:f1:80:
4d:5e:f6:4e:75:ca:d6:1d:8d:ab:2f:f8:25:86:20:
e6:55:4b:59:b3:97:2b:98:dd:49:a5:fe:5f:23:e0:
f9:87:96:0c:a3:b7:e6:3b:c3:f6:f1:5d:d8:81:36:
ae:82:94:0e:da:fc:a5:65:5a:67:c3:f9:ac:66:15:
51:17:2d:50:b1:cb:3e:41:3a:23:69:be:6f:44:7b:
7e:31:cc:5e:f3:7a:8d:55:c0:58:65:9d:a8:b7:41:
dd:cf:c0:a9:3e:69:89:12:88:a2:c8:55:c3:e6:18:
eb:fb:9f:ff:d7:fe:32:06:f3:c5:b8:60:0a:cb:5e:
5b:6d:e1:17:64:e7:06:2e:29:d6:c9:4f:90:7a:63:
01:d6:b6:49:77:d9:df:b8:1a:de:cb:b4:13:89:23:
06:27:34:e5:67:c3:ca:4c:dd:4a:85:5e:0a:60:54:
27:40:3a:e7:dc:96:31:3f:03:cc:23:b2:70:7b:99:
03:75:90:64:ea:79:f8:e0:54:bb:c7:f1:26:a3:58:
af:2c:a1:d8:aa:09:5d:45:80:c5:fd:74:44:39:6d:
10:92:71:03:84:d7:a3:c8:5e:de:8b:d3:4e:dd:50:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:10:10:35:70:C0:A2:17:47:40:BB:AA:B8:D7:20:ED:E0:90:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F6454A3CE311EF87F8F75C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.4.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8a:0c:22:68:50:49:1b:4c:d0:ed:26:34:40:6d:9f:7a:96:
fe:23:84:dd:41:a1:c7:b7:93:a0:30:8a:f8:ae:b6:cd:b3:e4:
de:86:13:4f:6c:59:16:ab:48:9c:0a:b3:3d:15:47:30:45:c0:
38:03:69:e3:fb:b2:35:e2:ab:ed:8e:65:26:d7:f9:9b:30:36:
95:84:01:4f:bb:b5:7a:52:14:16:16:db:99:97:a3:95:b9:d6:
36:af:dd:c3:74:8c:55:26:5a:bf:62:9d:6d:7d:27:54:a7:c1:
60:98:14:9b:ee:cf:ef:dd:69:73:c6:35:43:e6:82:25:d1:d6:
4a:9d:39:d7:59:98:52:7a:9c:3c:4a:00:49:1f:f2:56:30:f2:
1e:a2:3d:e5:1a:52:a7:d8:4a:ab:9d:0a:39:cd:68:bf:de:5f:
50:09:c9:45:35:8c:b6:8d:6f:ad:fb:56:42:63:f9:90:e4:96:
39:d1:06:50:80:8d:fb:2b:9a:e1:d8:db:0e:66:60:54:7b:84:
7b:bf:fa:af:60:1f:27:f4:17:fa:05:07:31:56:4c:16:74:6c:
0b:48:c5:01:1c:2e:f1:08:1a:13:11:ab:3a:2a:8d:82:b0:66:
55:6b:fb:7f:7c:3e:be:9b:bb:56:8d:c6:40:32:15:17:0c:d8:
73:91:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 07:40:39 2024 by rpki-client on console-fra.rpki-client.org