Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E44B19C831911EF8E1DBBBD762E951A.roa
File: 4E44B19C831911EF8E1DBBBD762E951A.roa (raw, json)
Hash identifier: UbK8A9CjQm/hsXQ7Md3lGocQz0DhPMM97PZ9GEDYCas=
Subject key identifier: 9F:1E:93:34:E9:EA:8C:62:3E:5B:0C:0E:6B:02:DC:60:21:0A:F6:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BFC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E44B19C831911EF8E1DBBBD762E951A.roa
Signing time: Sat 05 Oct 2024 12:56:58 +0000
ROA not before: Sat 05 Oct 2024 12:56:54 +0000
ROA not after: Mon 14 Oct 2024 12:56:54 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49092 (0xbfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 5 12:56:54 2024 GMT
Not After : Oct 14 12:56:54 2024 GMT
Subject: CN=6701379a-b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:01:0b:4a:d4:4b:b6:ff:6e:e0:4f:9c:8b:ec:
b2:91:68:e8:88:2c:98:1c:c4:5a:ac:42:11:11:4e:
d0:08:bd:00:95:eb:a1:ca:b2:ec:7a:ac:6e:48:de:
e5:49:f5:e8:9b:61:2e:1f:a1:81:d3:70:e5:fa:89:
ed:ee:bd:c6:26:d0:17:4f:77:61:1b:5e:11:6b:a8:
53:e2:53:16:11:84:f6:67:55:47:5a:ba:19:a3:71:
81:da:a2:55:10:85:aa:63:bf:45:86:77:cd:37:e8:
b9:ab:96:e2:af:b1:79:e0:86:c6:e1:e4:96:84:2d:
35:28:e8:87:07:ef:f4:d1:b7:b7:7a:9f:a4:10:97:
0f:a0:0a:df:b8:5e:eb:34:86:b6:24:f9:98:73:9c:
d4:63:bd:4e:a9:95:01:a4:88:c9:a2:fe:6b:78:4d:
a8:67:99:9b:c2:11:0b:f4:1e:6a:38:2c:7e:1c:8b:
eb:4f:3f:80:24:df:4e:92:d3:a1:4e:ec:97:cd:84:
2a:1d:88:e5:32:d9:b4:6e:44:7f:46:37:d4:c2:9d:
a5:17:52:5c:a0:c6:53:0b:a9:da:e5:43:e0:9d:b2:
95:b4:01:f3:ad:42:e4:bb:5d:57:1c:b8:e3:27:cb:
bd:fe:b3:71:33:6e:26:58:c4:9d:e5:89:81:a2:40:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:93:34:E9:EA:8C:62:3E:5B:0C:0E:6B:02:DC:60:21:0A:F6:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E44B19C831911EF8E1DBBBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
02:06:f9:e8:06:17:58:42:de:c5:b5:a7:3e:41:72:93:58:7a:
38:6b:d5:71:21:c7:74:e4:12:e1:10:62:e5:7e:b9:d9:c6:d2:
0d:b8:ed:ad:7f:a8:f8:92:b3:03:a4:95:27:11:fe:f9:86:49:
7e:96:11:dd:aa:2d:75:6f:15:37:37:c7:82:83:d5:e6:53:ca:
ab:a8:6a:1d:9a:c4:8d:e4:1e:b2:f9:8a:c8:b0:1a:47:d1:47:
b9:e9:9d:72:08:08:71:c1:5b:f6:1a:5d:69:e3:63:2c:a0:d6:
79:ab:2e:be:aa:cf:39:1f:61:90:86:b9:cc:b9:c2:31:58:9a:
a0:0b:3f:a0:45:69:6f:65:2e:6f:5c:dc:45:42:6f:41:b6:27:
fa:8c:70:81:1f:72:6b:76:bb:20:c7:19:3e:36:d3:99:3b:76:
8c:cb:a8:bc:4e:2c:58:a0:f8:fb:d0:f0:39:f6:f6:85:b0:aa:
3a:27:8f:7f:b2:a9:9b:e5:b7:75:7f:3e:30:69:77:b9:12:54:
c1:5a:20:4a:11:2d:61:22:1f:d5:e6:49:89:0a:e3:85:0d:38:
c0:85:32:5f:0e:e7:b7:b8:fe:6f:62:40:52:64:fd:3d:2c:ca:
11:ae:1e:d8:2c:e8:44:e7:ff:f6:8a:4d:d4:91:bc:6a:2b:5c:
77:8f:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 20:38:00 2024 by rpki-client on console-ams.rpki-client.org