Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E5C67E27F0E11EF9838E84C762E951A.roa
File: 4E5C67E27F0E11EF9838E84C762E951A.roa (raw, json)
Hash identifier: b5+ULusVUcL+9wUBi1K7vDL0uGtz1W81IzShkCNoK44=
Subject key identifier: C3:46:B3:E2:63:B1:99:E4:9A:FC:C6:AC:B1:8E:F2:0E:6B:58:34:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E5C67E27F0E11EF9838E84C762E951A.roa
Signing time: Mon 30 Sep 2024 09:28:09 +0000
ROA not before: Mon 30 Sep 2024 09:28:06 +0000
ROA not after: Thu 21 Nov 2024 09:28:06 +0000
asID: 63139
IP address blocks: 156.229.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48571 (0xbdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:28:06 2024 GMT
Not After : Nov 21 09:28:06 2024 GMT
Subject: CN=66fa6f29-633c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:28:86:cf:95:86:ee:a1:13:8b:9b:9c:d2:
2b:97:c6:3c:c0:97:0a:ca:c8:23:ba:c7:49:55:ad:
0c:b1:30:cb:ed:ca:c4:af:c0:a8:e4:f7:78:da:e5:
28:fb:20:e6:58:66:58:03:49:aa:ca:fc:5d:0d:c8:
41:67:00:42:20:c5:1b:89:b3:d2:d2:1d:ae:ad:18:
9b:e0:2c:09:bb:3d:24:d4:3a:e7:7d:cb:52:7a:11:
86:a4:71:7b:e9:ce:76:55:52:6e:f4:5a:08:a8:71:
de:b6:00:ca:5f:cb:24:dc:31:97:23:26:3d:c6:ea:
72:60:29:9e:14:4d:2d:31:34:b6:38:c1:44:a7:83:
fe:f3:e4:e5:fd:c2:11:e9:bb:69:75:65:86:c5:85:
1b:a8:79:0d:b5:a5:51:7b:5c:b7:fd:d4:b0:03:e8:
b0:bb:21:00:ff:3e:9c:a6:e1:74:8c:3f:26:75:38:
d6:ef:84:5b:31:07:d5:bb:4a:6f:4e:d1:0d:32:c1:
b8:e9:2f:1a:7b:75:0a:22:b0:81:2a:96:76:ff:8a:
8a:03:82:42:82:b5:39:58:5d:28:be:35:6a:b0:07:
a9:37:72:70:ee:30:5a:78:3f:78:60:9d:69:3b:bf:
bd:d2:55:62:91:aa:cf:a1:45:bb:b2:38:0a:0e:54:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:B3:E2:63:B1:99:E4:9A:FC:C6:AC:B1:8E:F2:0E:6B:58:34:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E5C67E27F0E11EF9838E84C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.51.0/24
Signature Algorithm: sha256WithRSAEncryption
54:07:85:5d:78:40:35:7c:2c:39:6a:d5:52:09:23:bd:22:ab:
07:aa:95:ac:6c:87:57:b8:81:57:7d:98:ac:7a:22:71:b1:92:
45:95:6a:37:18:14:2a:07:a4:44:a8:75:54:72:c2:1c:8f:4b:
cb:d9:67:b5:2d:e2:22:13:06:a5:29:7b:8a:95:81:15:a0:ed:
53:ff:be:f5:48:b4:66:1c:68:87:4e:0d:61:4b:7a:34:03:4f:
c2:cd:1b:a7:c1:30:62:59:a5:e8:82:43:80:4c:85:aa:9d:13:
da:5a:b4:33:a6:15:44:dc:35:0c:a1:a7:a0:ca:f9:2c:6a:35:
69:38:bf:89:d2:03:64:f1:7d:3b:5e:9f:b4:29:7d:3a:c6:4d:
e4:89:5d:c9:a7:8f:6a:d6:40:f5:05:de:49:9e:f2:da:c3:f4:
0c:c8:a8:32:9a:97:ed:f9:1f:fc:1b:7b:a9:3f:77:2c:d8:1b:
67:b8:c9:5a:d0:ca:6d:27:f5:46:71:43:fe:e7:fb:be:b3:c3:
c6:16:b3:7b:e3:18:20:52:43:8b:f6:68:8e:6d:ea:92:17:7b:
94:84:26:ad:5a:32:4b:f5:4a:e9:a2:e3:17:c8:8b:f0:ec:c6:
cf:63:ee:09:3c:76:4b:42:d7:96:24:32:f2:b6:89:ac:12:3d:
76:d2:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:28 2024 by rpki-client on console-fra.rpki-client.org