Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D3CC5284A6111EF9EE41C97762E951A.roa
File: 4D3CC5284A6111EF9EE41C97762E951A.roa (raw, json)
Hash identifier: 83KyZIMlqCoe7Vvs1+PWkfthVWrjRGo7O7P/uh5RucE=
Subject key identifier: 7E:35:56:83:56:3F:9D:58:FD:A8:4F:A8:34:53:1E:89:A6:54:2B:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D3CC5284A6111EF9EE41C97762E951A.roa
Signing time: Thu 25 Jul 2024 08:38:44 +0000
ROA not before: Thu 25 Jul 2024 08:38:41 +0000
ROA not after: Sat 03 Aug 2024 08:38:41 +0000
asID: 22773
IP address blocks: 156.237.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40937 (0x9fe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:38:41 2024 GMT
Not After : Aug 3 08:38:41 2024 GMT
Subject: CN=66a20f14-d760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:01:13:15:9d:9a:c5:15:96:ac:b5:ff:9b:
4d:3f:81:b8:44:6f:ac:33:89:80:8f:0d:9e:d7:5b:
ba:4b:50:a7:8c:6c:24:1a:24:e9:e0:ee:23:d4:67:
b8:45:5c:f6:07:c2:d6:8c:13:39:df:44:ba:8f:97:
d1:0e:4a:1d:65:22:c0:23:56:55:72:9e:d9:49:11:
d4:52:2e:f9:be:d0:42:85:b2:07:44:17:ad:d5:65:
54:f5:85:e2:b4:65:95:06:8b:b2:61:ce:9b:20:66:
84:72:e4:32:5a:1d:b7:ec:0a:38:14:70:31:8d:b3:
7c:b0:2e:15:1a:75:83:1c:80:4c:47:17:ea:3f:94:
8f:3f:6d:0d:d1:85:9e:11:d2:d4:3d:da:85:61:a2:
00:d4:75:5f:eb:d1:ef:b4:25:a6:60:09:ab:00:39:
4a:57:a2:1b:64:9c:cc:de:2f:f0:22:ce:53:aa:81:
77:13:c6:41:d7:ab:63:56:48:9a:58:a5:47:62:3a:
1f:32:81:2a:80:9f:9b:8a:14:c4:1b:90:02:f3:e9:
89:09:f7:82:d4:c5:6c:9b:ae:01:82:4a:f9:80:85:
55:0f:63:5d:bb:15:75:89:0d:ca:a1:19:64:03:d4:
31:6e:8c:46:1c:ca:98:29:bd:e1:51:87:19:17:f8:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:56:83:56:3F:9D:58:FD:A8:4F:A8:34:53:1E:89:A6:54:2B:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D3CC5284A6111EF9EE41C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.8.0/21
Signature Algorithm: sha256WithRSAEncryption
99:ac:85:b0:ab:e3:0e:ba:47:14:a6:ae:b2:51:f0:4e:ab:35:
32:d5:5b:7b:53:3e:9c:c7:d1:a7:06:8d:88:ea:f7:4e:bb:99:
6e:80:12:fb:12:88:84:2c:e7:3b:d5:24:3c:4f:f3:1c:62:45:
93:80:67:94:76:df:56:e5:1d:7a:71:fe:3d:86:8f:b9:9c:4b:
54:20:2d:8b:42:36:8f:fd:64:06:3d:15:cd:95:b1:7e:35:e7:
03:8b:d7:65:b0:06:1c:8e:a4:63:a0:2b:f9:26:ec:52:19:5f:
f1:ee:89:6d:d0:a9:e5:df:af:85:8b:4d:48:54:ab:a8:27:37:
af:a1:0c:46:08:d8:09:32:7f:e1:fe:ad:30:22:98:f8:04:9d:
e1:38:cd:f4:09:92:d6:0e:0a:f6:8e:90:49:ec:2f:6e:4c:44:
47:51:34:7e:ad:41:49:9b:28:25:ea:b0:5b:8b:05:a3:e9:64:
5f:55:bc:55:d5:a6:70:16:05:50:9a:df:ce:cf:b6:ad:ec:d2:
0d:7f:e1:e4:4e:99:02:1f:95:45:02:1e:82:e8:5b:19:8e:96:
bd:35:45:54:14:2c:20:8a:17:92:3d:9a:81:69:54:77:59:cd:
93:ef:ee:6c:32:93:52:87:00:d0:ef:9c:54:67:b6:7e:cd:ff:
29:e6:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org