Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4052563A4811EE89F44E104AD9E6FC.roa
File: 4A4052563A4811EE89F44E104AD9E6FC.roa (raw, json)
Hash identifier: JW89Tt46xyeV5fwpsAR3zohbZ4rYyO6+d0y3KIt1E/I=
Subject key identifier: 5E:36:77:83:9E:4A:59:ED:3E:C1:07:10:0F:59:F4:C3:B4:7F:2E:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 351E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4052563A4811EE89F44E104AD9E6FC.roa
Signing time: Mon 14 Aug 2023 02:14:25 +0000
ROA not before: Mon 14 Aug 2023 02:14:22 +0000
ROA not after: Sat 13 Jan 2024 02:14:22 +0000
asID: 139057
IP address blocks: 156.225.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13598 (0x351e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 02:14:22 2023 GMT
Not After : Jan 13 02:14:22 2024 GMT
Subject: CN=64d98e01-f253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:d3:fc:87:ad:55:47:c9:7c:89:25:8a:7f:
d0:d4:5d:9c:7f:ac:0f:af:b8:47:5f:58:f0:b1:c6:
e8:18:02:3e:ba:02:5e:ff:08:6a:e1:12:e4:cc:70:
70:6c:72:13:30:7b:44:7e:7a:f3:a5:9f:c3:9e:49:
fb:98:06:96:5e:8f:e2:fe:46:fa:cd:fe:fc:f4:9d:
d5:ef:86:fe:32:1f:4e:6d:ea:50:d9:27:74:04:7a:
3a:9f:45:f4:d9:11:15:83:4a:36:8f:78:fb:8a:53:
c8:d5:77:16:64:56:b8:fb:1f:12:71:e7:fd:1a:11:
b3:fa:a6:e1:bd:fa:da:5a:c4:76:b1:34:40:25:49:
2f:dc:2c:af:e9:05:8c:8b:15:ba:3e:50:ca:3c:ec:
f9:0c:53:b4:40:d4:8d:0a:23:d9:c0:74:be:84:51:
59:56:78:f3:dc:d1:f1:b6:be:4a:5d:2e:18:85:e1:
7d:11:96:22:4c:86:61:7f:1f:e7:94:e2:ca:6d:4c:
20:7b:6c:4d:3b:78:73:c4:30:58:b4:b9:77:f9:4a:
40:c5:18:97:d2:58:49:5d:cd:55:87:42:68:c0:65:
63:da:0a:1a:7b:86:54:aa:d4:f8:ef:39:5d:2d:52:
df:1a:90:35:ba:6a:5f:1e:58:39:7d:9c:12:5b:54:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:77:83:9E:4A:59:ED:3E:C1:07:10:0F:59:F4:C3:B4:7F:2E:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4052563A4811EE89F44E104AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.106.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d1:56:d3:2a:08:95:8a:b9:10:41:27:47:8a:76:16:82:76:
a3:f4:54:d2:2f:68:6f:cf:77:c6:cb:21:cb:93:2e:f4:2c:c3:
61:52:1d:83:e3:24:a9:01:80:51:73:7d:38:a5:22:40:00:a4:
52:fa:b0:e4:a1:13:26:d6:29:22:6a:84:3c:04:fd:f8:c0:24:
2e:46:5b:87:61:bc:f8:0b:ed:ed:05:a0:6e:47:d7:42:4a:f4:
80:77:18:fb:39:32:d8:c4:d9:dc:c7:9b:ab:6a:80:33:df:a3:
01:6e:9d:6f:b1:6c:ca:2a:ff:6d:88:66:f2:01:94:ee:44:4e:
05:28:26:9a:bd:bd:cd:9c:a5:56:52:00:7c:13:30:07:4e:3f:
c8:80:8e:35:e5:3f:6b:69:b6:04:20:0b:a4:8a:8e:e4:32:4c:
a5:da:38:e7:5f:6d:56:d3:56:54:f9:88:c6:c1:ff:48:9a:5f:
b7:b9:37:84:a8:4d:7b:c0:a0:43:1f:37:91:4b:17:6b:0c:b4:
63:5d:c9:b1:c3:61:40:64:9b:b3:3e:17:30:68:22:fc:68:ee:
69:85:37:ca:2a:4f:93:98:cf:ba:56:ed:25:25:27:34:45:bf:
9b:38:fd:51:88:e9:bd:cf:bf:51:ba:d1:52:47:cb:c2:1f:70:
7f:69:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:49:51 2024 by rpki-client on console-fra.rpki-client.org