Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48C20366338511EFBCD400BC762E951A.roa
File: 48C20366338511EFBCD400BC762E951A.roa (raw, json)
Hash identifier: 1dfGjiYuoKGgc2mkw9TYzIwwRKNulfhazK4oJ+C37xc=
Subject key identifier: 51:EC:D0:78:73:1E:EA:F5:54:80:8E:5E:51:D2:1E:45:00:EB:1C:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9539
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48C20366338511EFBCD400BC762E951A.roa
Signing time: Wed 26 Jun 2024 06:28:22 +0000
ROA not before: Wed 26 Jun 2024 06:28:18 +0000
ROA not after: Sun 28 Jul 2024 06:28:18 +0000
asID: 23470
IP address blocks: 156.225.70.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38201 (0x9539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 06:28:18 2024 GMT
Not After : Jul 28 06:28:18 2024 GMT
Subject: CN=667bb506-dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cb:54:95:d8:a9:47:ac:dd:f2:99:03:94:c0:
b9:8c:83:b1:99:76:10:17:18:e0:1b:9c:86:b2:f3:
2b:2c:1c:a8:68:9f:fc:d2:d1:aa:3e:44:67:da:39:
53:b6:64:12:05:d6:d7:dd:31:03:1b:ac:37:c0:48:
02:7f:68:56:6a:6d:15:f5:53:1a:f6:53:22:6e:f0:
2d:59:b7:c1:fd:89:93:bd:97:2f:e6:28:23:5b:7b:
2f:78:cc:00:ef:7a:d9:09:2e:81:d5:00:90:9e:48:
f6:c4:d0:98:26:f7:80:40:a3:c6:a5:85:14:e6:32:
f3:23:62:c3:66:60:1d:89:b6:37:b0:f6:e7:69:9f:
a2:93:25:9f:de:32:98:ae:b5:64:00:1f:a9:11:da:
41:35:05:af:fe:2d:2c:8c:3d:5f:9c:99:f9:a9:15:
08:1c:1b:d4:4f:c3:c9:03:8d:bb:72:0d:14:1c:08:
62:3e:cc:01:9f:42:84:ea:b3:20:88:3d:e9:8f:cc:
89:c1:71:97:ef:2b:c2:34:ad:9b:d3:20:81:e2:f9:
ea:ec:00:eb:40:d0:99:8d:7c:84:9b:7c:50:5d:c4:
e7:88:0d:aa:dd:8d:dd:f4:c6:2b:90:82:63:97:74:
ac:e0:45:50:b4:4d:ff:30:37:e8:d9:1e:8b:02:7e:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:D0:78:73:1E:EA:F5:54:80:8E:5E:51:D2:1E:45:00:EB:1C:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48C20366338511EFBCD400BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
70:fd:9d:fb:1b:9a:e9:20:db:a2:a8:c4:c8:ae:25:b5:b7:b4:
f3:2a:50:00:bc:8a:50:b9:96:09:3b:9d:ac:8e:1c:48:9b:ae:
c6:f6:66:01:f8:b7:ab:5f:bf:e2:97:86:50:aa:0f:be:4b:b4:
35:82:ad:2b:a3:50:bb:72:4b:e5:17:f2:11:f8:94:dd:a6:f7:
63:b5:90:9f:2a:bf:8b:c8:c4:f7:67:d6:ca:53:27:7b:76:49:
f9:9f:77:2c:a4:63:34:82:0a:e4:8a:be:c3:ac:fc:ab:eb:81:
8c:d5:9f:35:25:bc:14:dd:76:60:d2:0a:01:ff:ed:df:85:89:
59:83:e5:00:cd:c3:d8:0e:42:16:29:5f:d7:df:44:9f:c5:5a:
30:94:c6:f6:06:36:24:e4:f3:ee:3b:8e:79:0c:81:3e:ac:d8:
a5:41:86:db:d0:78:0f:5c:f9:8c:d7:c2:0e:4b:db:9b:a6:39:
9b:c8:63:36:0c:d2:0d:23:51:78:86:79:2e:91:c1:d2:dd:2d:
09:08:4b:93:6a:31:d0:07:a5:d0:21:32:5b:d2:53:45:08:14:
42:8c:b9:2b:c1:60:1f:96:e7:ec:4a:84:99:d9:b3:b3:51:53:
50:04:6a:ac:dc:87:22:cc:b5:04:6c:13:76:11:66:94:43:e1:
08:83:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 03:38:52 2024 by rpki-client on console-ams.rpki-client.org