Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51E75A38F0BC11EEABBF5051775412E6.roa
File: 51E75A38F0BC11EEABBF5051775412E6.roa (raw, json)
Hash identifier: bLdTbARtA1gcGW31wlTPqhPkbIiLJIPe9htNbPut1KU=
Subject key identifier: F4:98:31:4C:19:54:7C:32:95:D2:D8:D6:0A:7D:46:B5:B5:E7:C7:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8130
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51E75A38F0BC11EEABBF5051775412E6.roa
Signing time: Tue 02 Apr 2024 06:43:31 +0000
ROA not before: Tue 02 Apr 2024 06:43:28 +0000
ROA not after: Mon 29 Apr 2024 06:43:28 +0000
asID: 139646
IP address blocks: 156.246.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33072 (0x8130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 06:43:28 2024 GMT
Not After : Apr 29 06:43:28 2024 GMT
Subject: CN=660ba913-3f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:86:a0:5b:1f:50:d7:78:bc:3f:fa:c0:c6:
28:50:93:ba:f1:5d:e7:b3:1f:ba:54:30:2f:8f:e1:
fc:41:7a:ca:b2:ec:cc:43:55:d6:aa:d6:bd:3e:a6:
74:8a:b2:09:b2:5f:cf:d1:a3:75:99:46:83:70:92:
ec:df:77:30:9e:dc:5f:9c:82:64:9f:77:ad:73:e8:
ec:0b:a9:3c:7f:87:f6:c1:c5:41:18:db:d7:c6:f4:
2b:9e:7b:a8:53:ac:70:43:16:24:c2:00:e8:f4:54:
4c:19:c8:54:fb:05:c3:9e:41:ca:a1:86:15:06:51:
3d:15:3f:9d:3d:e0:9f:d4:34:9f:67:83:e0:88:a0:
a9:0f:5c:55:36:3c:07:cf:c4:f4:c2:35:ad:66:b2:
1a:23:f5:5c:fe:92:a1:74:f2:9f:74:89:44:db:2d:
53:77:db:7c:f2:1b:d5:17:80:2b:3f:1b:32:06:d5:
58:49:11:dd:b5:1b:88:3d:a3:ee:16:4c:83:8b:2b:
3f:7a:62:48:2f:4a:18:0d:6c:9f:96:ef:ff:43:95:
56:ba:a6:9e:92:67:94:27:22:09:76:c1:4e:59:98:
1e:9d:7f:fa:c5:0d:77:fb:4d:78:3f:82:1e:19:c0:
d1:79:cc:c9:13:8c:f9:52:c2:c8:00:ad:44:5a:a3:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:31:4C:19:54:7C:32:95:D2:D8:D6:0A:7D:46:B5:B5:E7:C7:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51E75A38F0BC11EEABBF5051775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.14.0/23
Signature Algorithm: sha256WithRSAEncryption
05:25:9c:06:98:11:8d:05:25:f9:ae:e7:bd:36:fe:06:94:30:
e7:a3:e3:74:ff:20:7e:4a:cd:11:3d:b8:f8:01:fb:cf:d4:87:
2e:10:9e:7d:5f:d8:08:11:26:45:7d:b2:a4:1a:dc:78:7e:2d:
45:7f:76:f5:0d:7c:db:cc:8d:51:6c:92:67:55:27:a9:fc:e1:
69:36:ce:8b:3d:5c:b8:9a:d5:62:0e:9f:b3:a9:9c:84:eb:1f:
b3:3f:76:b8:37:f0:e9:c0:91:a0:f1:7f:14:4e:d1:cd:db:a0:
7c:4e:61:b3:0f:2b:fb:ba:e9:62:08:b3:ac:7d:f5:d3:7d:6d:
5b:42:58:84:93:cf:2e:a2:7b:c1:bd:3c:dd:c9:10:b2:5f:6f:
ca:43:31:b4:26:93:5b:d0:77:1c:de:88:b6:73:c0:f5:22:9f:
04:f6:00:47:14:f4:45:32:1d:07:e9:a5:5e:b0:32:7a:63:5c:
ea:73:d1:63:33:6b:fb:bc:8a:ad:9f:68:7a:ac:19:51:07:07:
6b:c0:d0:08:31:e6:2c:12:7c:99:fb:6e:20:fe:76:cb:ce:0c:
c6:86:b5:f9:28:88:35:ae:19:55:0d:cf:9d:e4:08:1b:7d:d5:
6f:65:53:0a:b1:af:10:f4:43:4e:bd:23:45:5a:81:0a:2f:3c:
cf:86:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:06:49 2024 by rpki-client on console-fra.rpki-client.org