Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B5A518EF8611ED904995534AD9E6FC.roa
File: 54B5A518EF8611ED904995534AD9E6FC.roa (raw, json)
Hash identifier: fc9HtoNo8veO+mYkYx8+p7CI49tUTWNSKmLfDf5y3fA=
Subject key identifier: 07:40:74:27:D6:0B:9D:FB:4B:A3:B8:FF:6C:72:61:DE:73:25:86:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2031
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B5A518EF8611ED904995534AD9E6FC.roa
Signing time: Wed 10 May 2023 22:59:34 +0000
ROA not before: Thu 11 May 2023 22:59:30 +0000
ROA not after: Sat 30 Dec 2023 22:59:30 +0000
asID: 139057
IP address blocks: 156.246.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8241 (0x2031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 22:59:30 2023 GMT
Not After : Dec 30 22:59:30 2023 GMT
Subject: CN=645c21d6-ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:ec:ba:7a:d9:5d:b2:a6:78:bf:bc:a4:67:
d1:da:bd:37:93:75:f5:c9:57:d2:5c:c5:9c:b1:13:
21:79:26:b3:45:a5:5e:9c:0f:03:91:d0:26:73:16:
83:15:c9:55:62:27:6e:24:7f:65:1a:b1:86:2a:c4:
59:b7:c0:bd:cd:44:d3:eb:29:e6:90:6e:d6:b2:79:
b8:0c:06:9c:d4:8f:ea:f0:b3:91:cd:27:f8:ce:b9:
cf:3b:f2:34:76:2f:9b:b1:e4:86:7c:9a:8b:0f:9f:
33:01:34:3b:d2:d0:b6:7b:76:f3:37:15:c6:db:39:
f8:50:1e:f4:51:e3:63:32:57:03:21:6d:13:df:e0:
c4:e7:24:a3:2b:0d:5a:98:7f:6b:5d:e1:84:01:e1:
95:a3:bb:be:a6:36:d3:b8:06:cb:a2:f6:d3:79:6a:
46:2c:91:43:31:f6:ed:1f:24:63:74:32:67:1c:1e:
1b:b8:38:7c:26:26:e1:c2:aa:07:cd:bf:cd:ce:9a:
2c:94:38:a3:3e:d1:23:4f:1e:11:6d:02:a8:4f:1a:
2b:b0:50:ca:69:8d:cf:70:76:f6:70:78:81:fc:fc:
41:d4:2e:c2:44:cc:90:bf:b5:05:9a:6f:57:f6:4c:
4e:8d:cf:c9:d7:07:62:22:50:07:26:7d:85:b4:c0:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:74:27:D6:0B:9D:FB:4B:A3:B8:FF:6C:72:61:DE:73:25:86:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B5A518EF8611ED904995534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d4:75:89:0a:45:2d:ec:92:df:a4:43:2f:30:ed:84:77:31:
52:c6:c4:59:db:b1:97:b3:79:28:b6:e5:0b:78:7d:a0:c9:f7:
91:92:b4:f3:17:79:f6:84:60:26:50:c2:98:76:06:43:86:ff:
b2:1a:8b:f0:51:f1:1a:a5:24:a1:83:c7:ec:28:b5:06:cb:a7:
eb:a4:4e:97:3a:6c:76:fd:9c:8a:c3:70:14:84:13:af:f3:ec:
24:9b:3b:4b:e3:86:cf:a9:af:79:cd:2e:35:5a:5b:ac:89:43:
3d:1d:f0:dc:f1:7c:a8:d0:5e:0d:78:ae:2a:e1:37:47:b5:8b:
5f:77:b8:50:be:5a:da:b7:ab:2c:9d:9b:80:a1:23:a1:82:ed:
ea:79:0d:2e:55:98:c7:71:ba:21:38:8e:d3:0e:fa:1a:6e:2f:
d7:de:e3:5a:ec:a1:19:c3:f5:ea:84:8e:b2:16:f6:75:1a:99:
29:bb:bb:85:44:96:4e:6a:d1:6c:cc:69:c6:ed:9b:f9:5b:47:
e6:e3:00:fd:b9:82:1f:eb:16:ab:54:8c:41:55:51:89:41:0b:
4f:8f:fe:7b:c6:55:01:dd:31:0d:3b:8a:fa:c1:b0:98:8b:20:
9e:c3:f5:0e:f0:2d:43:84:98:52:16:73:eb:ba:84:02:ed:73:
e9:fd:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:12 2024 by rpki-client on console-ams.rpki-client.org