Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495DF83E384911EFA86BECAD762E951A.roa
File: 495DF83E384911EFA86BECAD762E951A.roa (raw, json)
Hash identifier: HsHxEzhOHbeKD79ZOhmN+vARhdQ0v4Y6jDjf1ZRMwWw=
Subject key identifier: 99:96:D8:5B:6F:5B:AF:76:47:35:93:84:28:5C:26:8E:8F:DE:96:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 976D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495DF83E384911EFA86BECAD762E951A.roa
Signing time: Tue 02 Jul 2024 08:01:29 +0000
ROA not before: Tue 02 Jul 2024 08:01:24 +0000
ROA not after: Sun 04 Aug 2024 08:01:24 +0000
asID: 142062
IP address blocks: 156.239.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38765 (0x976d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 08:01:24 2024 GMT
Not After : Aug 4 08:01:24 2024 GMT
Subject: CN=6683b3d9-32cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:e6:06:ac:bb:22:96:ad:05:13:74:a8:ce:
42:bd:d0:78:87:45:49:05:dd:c3:97:ca:34:6e:8b:
ce:6a:e9:fb:ee:5c:15:cd:e5:0a:eb:a1:06:87:d8:
d5:04:2e:06:f6:70:4f:94:df:c7:03:59:71:8c:95:
4b:41:f5:ad:69:2d:ef:e5:3e:eb:5e:70:62:65:59:
a8:09:7f:ea:81:ab:52:3a:ca:d8:30:dc:b4:5f:49:
b6:c2:d0:5b:c8:8d:43:18:a2:80:65:41:d4:96:e8:
b0:cd:0b:63:e1:5a:50:72:58:d9:c9:85:f9:6b:5a:
cb:d2:91:bc:13:78:ef:bc:19:41:85:8b:6f:a5:b8:
ee:32:9f:9d:68:19:8b:e1:5f:26:f2:f2:d7:33:ed:
e8:24:fd:df:75:17:7b:0e:d5:a0:06:55:cb:56:7b:
41:19:6d:bd:93:5f:e7:be:94:18:93:41:c1:85:9e:
7c:56:c3:ef:9a:0a:f0:1a:b4:05:d2:47:e5:0a:9c:
33:76:0e:73:fc:a0:ad:11:f9:bf:c2:33:8d:6d:77:
4c:58:cc:dd:63:46:c0:30:5f:57:3b:2a:b3:fa:71:
b8:63:44:73:61:a8:97:4f:f0:54:6b:54:bc:86:4b:
7f:a4:8d:3b:31:b8:fa:cd:82:80:c9:85:06:51:8b:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:D8:5B:6F:5B:AF:76:47:35:93:84:28:5C:26:8E:8F:DE:96:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495DF83E384911EFA86BECAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:1e:55:cd:a2:42:e7:f4:00:68:18:4e:2b:4d:ec:b1:5a:c3:
a7:62:78:5d:5e:79:32:b6:50:22:c7:1d:6c:ca:1a:3c:26:15:
f4:85:32:32:03:9c:59:48:09:5f:28:f1:b6:3f:09:cd:ee:f7:
1d:76:5b:db:80:3c:db:9c:f1:fa:b5:04:76:ca:46:ea:3f:d5:
84:f4:cf:c6:b6:fb:71:65:0b:dc:75:72:32:ae:55:67:7a:a4:
ba:b0:7a:d6:4b:ab:3b:ed:f2:c3:b9:f0:ae:88:35:93:b5:db:
c8:c9:94:0b:99:1f:9d:20:15:91:e1:c3:c1:c6:e1:43:47:40:
4e:fb:3c:bd:4e:95:fc:55:e7:04:16:db:51:c6:05:d7:8a:82:
20:df:36:69:93:a8:94:ea:90:7e:23:75:c2:f7:c3:67:38:00:
01:dc:f0:78:10:e6:70:80:56:30:27:b8:81:21:62:4c:fe:12:
05:4f:d5:aa:43:67:4d:02:fa:dd:34:8b:06:43:05:aa:2d:d2:
89:25:e6:14:8c:a9:75:25:20:a1:d9:69:88:08:2f:23:fa:12:
84:e0:f7:d6:8a:68:ee:97:2c:91:f6:3c:77:40:c4:32:92:46:
c9:6c:ce:f6:53:cd:a0:88:23:02:6b:32:a7:d3:4f:4f:13:7a:
c2:df:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:47 2024 by rpki-client on console-fra.rpki-client.org