Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CED416A321E11EFB1540883762E951A.roa
File: 5CED416A321E11EFB1540883762E951A.roa (raw, json)
Hash identifier: fRqc5JZGXa8qj4lfFMNjWNhYkXJl25DwtWliVhOJqdo=
Subject key identifier: EF:B9:56:61:6A:8B:23:77:CD:4B:D7:64:1C:BD:9D:04:C4:7A:55:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 945F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CED416A321E11EFB1540883762E951A.roa
Signing time: Mon 24 Jun 2024 11:39:06 +0000
ROA not before: Mon 24 Jun 2024 11:39:02 +0000
ROA not after: Tue 30 Jul 2024 11:39:02 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37983 (0x945f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 11:39:02 2024 GMT
Not After : Jul 30 11:39:02 2024 GMT
Subject: CN=66795ada-c563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:86:6f:44:4c:da:2f:d2:98:d1:c4:5a:fa:
a6:cb:28:5e:10:db:59:f8:e6:82:73:8e:2e:ed:51:
d2:40:f7:8a:59:43:48:86:4e:15:99:4e:9f:f0:1c:
9d:2e:d5:4f:68:d9:1a:a2:f2:35:08:ab:6b:ea:b2:
69:c2:ae:32:23:6b:97:bc:4e:0d:4a:94:81:73:d4:
f7:af:29:91:9c:8f:cf:07:a3:4f:c5:d4:e2:76:31:
d6:3b:9c:50:a2:f8:ac:73:d9:9a:3d:d0:9f:25:e3:
8c:9e:ab:00:7b:92:f1:30:b9:67:bd:67:82:4d:99:
77:15:b1:7a:0e:78:76:20:89:18:77:eb:1f:66:3b:
c4:f7:69:80:97:b6:a0:7e:98:f2:73:68:79:6f:d9:
b1:19:41:8a:07:d1:7f:48:dc:de:54:c9:21:0e:0a:
55:d0:0b:fc:20:13:f1:fe:8f:21:a4:3b:73:56:9a:
27:96:4e:c5:ec:5d:58:26:1c:4d:31:dd:d9:63:ee:
22:21:91:71:13:02:64:9f:d3:63:62:b2:a1:04:51:
d2:35:20:d5:1a:1c:d3:83:dd:95:68:df:8e:5c:cb:
b3:7f:2a:39:c4:43:74:20:23:f5:1e:a4:4a:f6:c9:
7b:d9:f8:b3:55:e4:6a:e8:f3:ee:37:b4:ea:48:29:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B9:56:61:6A:8B:23:77:CD:4B:D7:64:1C:BD:9D:04:C4:7A:55:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CED416A321E11EFB1540883762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:50:69:a1:36:7e:15:70:4c:24:74:7a:4b:96:eb:5e:88:08:
bc:af:f8:10:d1:10:20:1e:0b:c2:32:5f:3e:52:7f:9d:a3:73:
dd:48:17:54:e7:72:7b:ae:79:c4:fe:c7:20:e3:46:c1:9d:43:
bd:33:35:3e:7b:cf:1e:7c:62:7e:13:fa:28:b1:4f:f5:44:66:
ac:6e:2f:30:46:92:09:e2:df:34:cd:0c:6a:5a:d7:87:d9:0b:
48:9d:05:97:31:c8:35:bf:0c:be:04:7d:ee:5d:85:54:fc:b7:
3b:0a:60:5e:f2:e1:2b:c5:1c:86:1d:77:b1:ea:b8:ad:a5:15:
c2:51:cf:ca:9d:cb:ca:9c:9b:81:7c:34:58:e4:b8:fe:31:10:
8c:8d:84:8e:ef:b9:9f:18:f3:fe:86:85:45:c2:b6:bb:ed:21:
a5:15:be:96:76:1a:c4:f8:f2:56:36:63:d0:3f:96:dd:ba:23:
6b:d3:ba:56:84:95:09:ef:f9:94:7a:37:86:f4:04:29:c1:2e:
9c:27:98:87:fa:7a:c4:37:8b:6a:91:87:c7:61:dc:dc:e1:05:
30:b8:c7:8a:68:ce:cd:33:0b:4c:6b:e2:44:c0:7b:ad:2c:36:
4c:53:95:ee:9e:75:24:60:88:54:b2:56:cc:d8:b2:74:63:59:
bf:b1:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org