Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49FD08247F0D11EF99766846762E951A.roa
File: 49FD08247F0D11EF99766846762E951A.roa (raw, json)
Hash identifier: Z8qdH8ogXgnsAEU6OzDb/LJbePev5KArdrXBZsXPJxk=
Subject key identifier: CA:3A:27:32:D2:C2:B5:95:CC:2E:E7:C9:F6:76:9F:9C:56:1A:6F:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49FD08247F0D11EF99766846762E951A.roa
Signing time: Mon 30 Sep 2024 09:20:52 +0000
ROA not before: Mon 30 Sep 2024 09:20:49 +0000
ROA not after: Thu 21 Nov 2024 09:20:49 +0000
asID: 138915
IP address blocks: 156.227.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48557 (0xbdad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:20:49 2024 GMT
Not After : Nov 21 09:20:49 2024 GMT
Subject: CN=66fa6d74-7001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:7a:ba:7c:f8:e3:62:e6:26:50:16:16:c8:
75:6c:df:70:0c:3a:37:a8:9d:f8:43:a8:c7:f2:1a:
38:66:3c:04:b8:20:12:c6:c2:b2:4e:6b:20:3d:19:
a3:35:db:ed:dc:46:ba:f0:5c:28:8a:e4:1d:72:0d:
89:f2:9d:35:fe:f7:9d:9c:c1:eb:de:1b:45:0b:85:
18:79:d9:f7:4c:17:aa:b4:c5:64:43:b9:02:7f:29:
64:21:f4:12:57:19:e7:ae:df:ad:80:10:a9:9f:ac:
38:ed:a3:76:14:81:a9:5f:a5:4f:ec:8e:46:ae:17:
5a:e2:f7:d8:d7:e2:07:af:30:a7:6a:fd:bc:76:d6:
55:a7:df:28:02:e6:6a:81:0a:93:28:22:1d:a5:8a:
e4:82:25:74:54:3f:88:a6:0e:a4:36:f8:44:b8:28:
cd:02:7b:3b:a5:22:ad:1d:e7:03:53:5f:99:a1:47:
7e:f2:b4:84:97:7b:09:19:fa:8b:d1:f0:88:31:63:
f9:5e:7f:6e:3d:bc:f5:6e:f6:e6:39:c0:85:d0:59:
32:66:51:84:d8:7f:d9:82:ae:01:5b:5a:37:fb:ae:
26:bd:c1:63:92:91:84:7a:35:33:eb:47:08:9f:48:
9e:43:a3:64:95:bd:3b:eb:a9:ec:86:42:df:67:c5:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:27:32:D2:C2:B5:95:CC:2E:E7:C9:F6:76:9F:9C:56:1A:6F:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49FD08247F0D11EF99766846762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d0:8e:c8:4d:a1:ef:27:58:27:cb:9a:9e:db:71:9a:fc:16:
04:ed:22:e7:c9:a3:35:a7:88:ef:4a:6e:9b:eb:05:a0:a3:f7:
24:4a:5d:9a:ae:1d:52:76:a5:55:30:ce:0b:c7:a9:2d:aa:0e:
ec:1f:25:55:df:55:29:bd:0f:42:4b:d3:fb:59:d5:7d:e1:bf:
ba:fe:0b:ef:1a:c8:c2:bc:71:60:cc:f7:3e:e2:c4:80:ad:61:
c2:fc:4b:f9:05:7d:e3:ce:8a:6c:84:45:9c:db:e9:21:50:dc:
20:d6:13:dc:87:d3:ad:d0:6a:43:5e:33:98:a7:78:a8:fd:e5:
01:ea:9b:01:6f:d2:c0:ea:77:d7:87:a0:e0:69:76:4d:2b:d6:
56:46:4a:c6:02:39:6b:50:d6:d7:a2:30:83:7a:d4:5e:89:2a:
34:d7:74:2a:e7:3a:d8:c4:a4:d5:0b:e2:79:81:9b:7b:f6:57:
03:0c:a8:ea:70:19:4d:e0:86:39:6d:8c:c0:95:50:f6:95:a2:
9f:ff:f4:12:09:25:b3:29:2c:28:c4:45:b9:65:b2:b9:43:66:
9b:15:7c:18:99:bc:86:54:8b:32:6e:08:81:45:ec:56:85:4d:
3c:81:b5:d3:6d:40:45:d4:e1:46:7a:94:b6:d9:c1:30:ae:e0:
84:e2:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org