Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CBA7B1A44E111EF961164B2762E951A.roa
File: 5CBA7B1A44E111EF961164B2762E951A.roa (raw, json)
Hash identifier: kD2/0+aQ9NMEw9BmUoackshSO88QJfBqP9wDwAVT+q0=
Subject key identifier: 63:47:C4:56:FC:B8:3C:B8:C4:00:F5:A0:C7:F1:65:33:D2:EE:F8:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CBA7B1A44E111EF961164B2762E951A.roa
Signing time: Thu 18 Jul 2024 08:40:19 +0000
ROA not before: Thu 18 Jul 2024 08:40:14 +0000
ROA not after: Sun 28 Jul 2024 08:40:14 +0000
asID: 5065
IP address blocks: 156.248.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40285 (0x9d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 08:40:14 2024 GMT
Not After : Jul 28 08:40:14 2024 GMT
Subject: CN=6698d4f3-d610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:7b:69:d8:1c:57:59:bf:9c:15:5d:4a:53:
9c:12:6c:23:bf:aa:b4:01:d4:c4:76:03:b4:56:03:
f0:6b:f8:00:83:0a:4a:e2:8c:ec:34:b5:54:19:d7:
cf:39:58:b6:f5:b3:e1:9d:45:a1:87:b3:e8:19:3c:
15:9e:53:ec:81:c4:26:c2:a9:7e:26:c3:0b:f7:56:
1f:e9:d8:55:f7:90:a3:ed:09:c9:dc:52:fe:f4:3b:
80:12:83:fd:d0:79:21:76:50:e0:3f:75:0b:31:79:
a6:2c:e0:47:0a:15:3d:c7:69:92:f9:39:5f:88:a2:
9d:45:4a:ab:9c:6e:5b:8d:cf:1d:07:c9:c4:3d:7c:
a7:1e:41:0c:2a:b2:bc:7c:6f:21:58:fe:3a:dc:ba:
77:5a:7f:95:14:11:13:84:7f:86:3f:22:8e:f4:74:
df:00:30:5e:ab:80:59:00:93:b0:ef:3c:64:78:b5:
22:ee:54:d3:f6:73:52:0f:3a:74:9a:07:88:12:46:
28:de:1e:b3:23:c1:06:4f:7f:7e:07:bc:e7:d9:b1:
78:19:25:4f:7b:85:24:5a:85:d6:b0:8b:cf:a8:40:
7c:a4:c0:cf:58:32:27:d8:2e:b3:f5:1f:b9:1a:91:
04:95:a1:aa:bc:1c:c0:e3:d6:7d:e7:5f:47:fe:06:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:47:C4:56:FC:B8:3C:B8:C4:00:F5:A0:C7:F1:65:33:D2:EE:F8:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CBA7B1A44E111EF961164B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.80.0/22
Signature Algorithm: sha256WithRSAEncryption
53:45:be:d1:59:4e:85:44:b2:9d:1f:27:0d:b5:04:2c:b3:3d:
fd:74:01:33:95:a4:02:59:15:2a:3b:09:28:bc:c4:b0:3c:2c:
69:c0:f6:00:b6:d5:85:87:99:b1:71:a9:6f:af:28:9d:69:d1:
2e:96:3c:0b:50:91:79:36:96:bb:d9:02:8e:b2:54:25:90:12:
2e:03:b4:78:d8:94:7f:b6:cc:54:66:6b:dd:d9:85:94:3b:04:
d1:01:88:52:e8:5a:7c:43:bb:32:a1:8c:46:8b:0e:c0:cc:09:
32:dc:05:0c:9e:7a:ec:8f:b8:8e:03:dd:d0:fa:4f:88:01:49:
e5:f4:ab:81:92:23:bd:e7:21:0e:dc:24:1c:84:c6:91:2d:f6:
09:5f:03:25:7e:45:7d:d2:18:fe:1d:76:d2:9b:6a:c8:4c:a4:
10:92:87:bb:cc:2d:9f:bc:58:ef:35:df:a6:93:3d:22:81:48:
fd:96:96:da:c3:77:6c:55:a7:ad:6f:7a:ee:5f:11:ec:d1:0f:
27:a2:a7:4e:fd:ba:cf:b4:de:97:67:1a:ad:29:cc:72:cf:64:
34:78:bd:d4:90:86:d8:81:f7:ee:12:a9:de:23:78:1c:5c:22:
f9:bd:e2:93:dc:f9:1f:36:4e:ca:37:18:cc:07:e5:fd:8d:f3:
ac:25:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 03:38:52 2024 by rpki-client on console-ams.rpki-client.org