Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55009D18DAB611EEBF407D8C775412E6.roa
File: 55009D18DAB611EEBF407D8C775412E6.roa (raw, json)
Hash identifier: wWfkQXu0t+6JDscheHVjY7FbSAzwdMnpSCZfPtWs+vA=
Subject key identifier: 3F:57:87:DC:BC:DE:2A:7D:BA:82:FF:BE:D2:2E:B8:15:8C:55:C9:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7B56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55009D18DAB611EEBF407D8C775412E6.roa
Signing time: Tue 05 Mar 2024 06:05:14 +0000
ROA not before: Tue 05 Mar 2024 06:05:11 +0000
ROA not after: Thu 21 Mar 2024 06:05:11 +0000
asID: 142286
IP address blocks: 156.254.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31574 (0x7b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 06:05:11 2024 GMT
Not After : Mar 21 06:05:11 2024 GMT
Subject: CN=65e6b61a-1166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:18:67:93:37:e5:13:be:3b:04:c2:a4:a7:
c5:9e:ea:5c:43:18:d4:72:0a:f5:5d:64:46:50:7f:
3b:71:ff:18:67:10:59:7d:cb:57:81:4f:b9:f4:8a:
9d:dc:c9:c9:17:0a:de:a4:9f:df:a2:2f:c0:f0:ec:
4a:9f:c8:52:1e:50:71:2b:3b:e9:ac:89:c0:cc:83:
8a:d8:90:53:aa:c7:7a:b6:cf:23:62:98:22:97:f7:
3a:73:57:cf:c3:0a:d2:8f:7f:60:de:95:bf:37:9c:
8d:da:a0:53:ca:25:dd:0d:5a:60:ec:41:fb:e2:d5:
1d:e2:dc:af:43:30:4c:90:9e:cf:d8:0e:b5:81:eb:
b5:6d:c9:70:c9:6c:42:de:1f:3c:9a:d0:64:ec:76:
bc:89:c8:e1:9c:2b:ca:77:aa:88:cc:44:cc:0c:f4:
24:54:b5:98:ac:b7:a3:f6:9f:c6:ea:6d:be:0e:db:
4a:02:fb:20:6a:0e:de:d9:7b:2e:38:92:87:b6:6d:
81:5f:d0:a1:93:e7:e5:8e:61:56:6b:97:67:58:df:
03:f5:5b:2b:9b:2b:6e:19:97:9f:cd:6d:ec:bf:98:
7e:3f:de:9f:10:e3:6c:89:c4:a0:10:ca:e8:2f:b7:
9a:9c:b7:a2:54:70:ff:64:bf:ff:8f:3c:f7:65:9d:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:87:DC:BC:DE:2A:7D:BA:82:FF:BE:D2:2E:B8:15:8C:55:C9:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55009D18DAB611EEBF407D8C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
65:3b:f8:a4:62:b4:49:63:fb:c2:8b:40:95:4b:9f:72:13:c3:
51:dd:cb:82:96:55:82:49:8a:83:25:87:fb:7f:e2:14:a1:3c:
81:b9:c5:fc:a2:a5:42:61:e4:0d:5e:a9:e3:6e:1c:61:47:be:
1b:8f:45:99:23:4c:57:c9:f9:7f:64:b6:f3:76:36:b8:68:79:
21:68:05:cf:51:18:ff:64:df:0c:67:46:e2:ee:e5:d8:45:2d:
41:37:ea:c2:2e:34:ac:81:3a:b3:7d:6b:09:0c:2d:2e:df:8a:
dc:49:ed:f1:63:d4:67:9d:12:65:25:40:43:75:6d:21:11:1d:
20:fe:a8:15:e2:25:96:0b:5c:a7:06:7e:d2:ab:1b:6a:26:a5:
9e:03:15:0c:5a:37:8f:c4:2d:02:9a:3e:e3:f4:1e:81:93:ec:
66:b9:41:d0:ee:3f:5d:35:ab:66:75:b1:6b:03:69:2c:75:e4:
90:71:88:47:85:fb:3b:48:2a:dd:27:5f:15:5a:87:17:21:d9:
19:8a:8d:29:37:97:c5:35:0d:90:fe:c8:9f:dc:f1:86:df:9a:
1c:aa:df:0a:d3:3b:64:5b:f3:1a:3c:28:01:c4:e0:99:d8:bc:
05:92:41:3e:20:88:d7:ee:cc:f4:c4:3b:70:c6:9b:74:67:06:
94:76:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 18:22:40 2024 by rpki-client on console-ams.rpki-client.org