Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CB694003E9311EF8083CEA2762E951A.roa
File: 4CB694003E9311EF8083CEA2762E951A.roa (raw, json)
Hash identifier: WwJNryFusZHg1XrABk1wLJKJ45E07Ve6SCdNp7dGV+E=
Subject key identifier: 84:05:E6:6C:DA:3F:0B:4C:A3:56:E2:FF:4C:64:EB:55:EF:06:49:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CB694003E9311EF8083CEA2762E951A.roa
Signing time: Wed 10 Jul 2024 08:06:24 +0000
ROA not before: Wed 10 Jul 2024 08:06:21 +0000
ROA not after: Sun 11 Aug 2024 08:06:21 +0000
asID: 141718
IP address blocks: 156.237.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39470 (0x9a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:06:21 2024 GMT
Not After : Aug 11 08:06:21 2024 GMT
Subject: CN=668e4100-f240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:8e:60:3a:3b:ac:7f:c1:a7:18:32:17:1e:
a0:db:28:b9:d3:7a:d4:7f:44:71:8f:6e:a9:e7:c0:
6c:72:a2:bf:7a:75:7e:37:c4:20:b4:8c:e4:8e:2c:
2f:43:7e:c5:3e:98:33:55:ae:6d:f9:4a:13:8d:54:
58:4f:4b:5c:53:d7:51:fe:8c:b4:cf:ee:fd:55:88:
7b:74:f5:79:8c:f7:58:9b:cc:c6:39:c3:c0:25:16:
eb:0f:19:f8:63:89:38:f8:35:27:6a:98:a1:d2:5a:
e4:69:da:05:1d:17:24:7d:52:f6:d0:5d:ed:98:6d:
27:82:9f:3d:9c:a5:fd:ef:97:6e:7d:42:42:92:d3:
cb:96:b8:e9:3e:52:77:ea:71:76:a7:49:ed:fd:05:
a2:71:14:ed:d4:10:ef:b4:2f:a1:5c:6d:7e:75:0d:
1a:18:9a:cb:cd:4e:18:84:28:1e:ab:43:66:b5:8c:
f8:75:4c:a6:b6:23:be:c1:ec:dd:da:d7:bf:dd:b9:
8d:80:96:29:2c:d2:dd:e5:ed:ee:f8:95:0c:29:06:
02:7f:78:8b:81:9b:e8:5c:b7:71:13:77:06:16:a2:
3b:c5:bd:40:31:77:d9:bf:97:64:ed:18:2f:b1:ea:
fd:b6:6c:73:59:93:d0:24:49:40:a4:63:fa:90:c2:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:05:E6:6C:DA:3F:0B:4C:A3:56:E2:FF:4C:64:EB:55:EF:06:49:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CB694003E9311EF8083CEA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:aa:f2:71:a4:ec:c9:94:fd:68:09:a6:99:40:49:f0:74:97:
57:14:76:4f:ea:44:c7:7e:6a:1e:bb:c7:f7:f2:d9:9e:7d:3a:
97:46:d5:37:7a:58:05:84:9b:9c:eb:42:5b:71:8c:64:83:f9:
bc:c8:d4:b3:6d:f7:f5:45:67:39:4d:72:14:87:16:8b:07:83:
d9:bb:ae:2d:2c:70:7f:12:91:ff:3a:c5:7c:20:b0:28:df:1a:
51:f0:ab:84:96:58:86:fd:fb:55:12:a7:e8:44:3b:ad:69:80:
3e:9c:bb:87:e7:f4:59:f7:4a:71:1e:56:6b:b5:d5:b7:74:79:
12:9b:ae:a7:65:9a:22:c2:a5:e3:e2:36:98:49:37:d0:92:43:
9b:83:08:98:87:9e:ea:de:ff:26:bb:d1:30:88:54:9e:bb:dc:
55:14:63:f5:d5:5d:c8:05:42:2b:44:5a:a1:8c:07:3e:e9:7f:
d8:f1:ab:65:bb:7a:c6:cc:bf:ad:8a:36:c2:16:14:7c:2d:f8:
9d:61:bb:00:bc:da:8b:b4:e2:50:f5:33:7f:9d:f7:d4:7f:28:
6a:f1:14:70:b1:16:1b:e6:13:5d:88:03:bd:ac:80:51:90:ab:
d2:5c:a5:78:55:9e:d9:cc:63:4e:da:5f:6e:87:3b:ca:6b:78:
92:13:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 10:00:56 2024 by rpki-client on console-ams.rpki-client.org