Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D136B94499611EFA75135AF762E951A.roa
File: 5D136B94499611EFA75135AF762E951A.roa (raw, json)
Hash identifier: ZDzZl2dYcqowqjwcmMAhyFwqBChEwctTt8OkrmgN7MM=
Subject key identifier: F3:78:41:8B:B5:5B:CE:DD:E7:3C:F2:BA:BA:69:AC:F0:F6:82:76:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D136B94499611EFA75135AF762E951A.roa
Signing time: Wed 24 Jul 2024 08:26:03 +0000
ROA not before: Wed 24 Jul 2024 08:25:59 +0000
ROA not after: Fri 23 Aug 2024 08:25:59 +0000
asID: 202656
IP address blocks: 156.246.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40725 (0x9f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:25:59 2024 GMT
Not After : Aug 23 08:25:59 2024 GMT
Subject: CN=66a0ba9b-4bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:67:d7:d1:a5:5f:44:24:c1:e1:b8:56:90:
da:59:46:83:fa:fe:96:4b:f0:36:41:34:c0:f7:9f:
a9:3c:89:e8:49:fd:00:27:52:86:af:d7:dc:1f:e6:
e7:e8:b6:a2:1f:54:48:df:d0:07:38:5c:17:f4:57:
c7:c7:39:c6:7f:7b:37:dc:d7:67:fd:38:f6:78:ff:
6f:90:60:2e:65:c4:16:fd:b7:9b:05:f3:47:27:53:
e1:7d:49:67:53:c2:44:cb:92:d6:71:74:cc:ee:3d:
c2:a6:67:52:66:e3:69:87:41:df:ef:12:67:01:6f:
db:5b:db:fa:b7:f2:24:c2:1b:21:3a:ce:be:8f:2c:
e5:51:a5:bd:3d:b4:5a:11:59:ef:40:d8:50:83:1e:
b3:b5:74:54:e6:eb:9c:fc:5f:1d:9a:8c:b5:ea:39:
34:06:f8:1f:9b:ca:6b:9c:a3:16:3e:5e:14:21:7a:
64:d8:b2:48:0c:63:24:1e:1d:e8:cf:ae:7f:49:dd:
40:6b:fb:f4:63:c4:7c:ec:86:28:67:60:a4:95:fb:
25:03:d3:91:48:93:00:d7:8f:cb:6b:93:05:7a:91:
64:0f:f3:6c:2e:de:54:f1:ca:a0:f6:30:93:8a:f1:
53:ee:ca:80:74:ed:58:a6:32:12:c8:ef:b6:41:a5:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:41:8B:B5:5B:CE:DD:E7:3C:F2:BA:BA:69:AC:F0:F6:82:76:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D136B94499611EFA75135AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
79:75:a9:63:a5:be:95:32:08:93:71:ea:ea:8f:f1:05:0b:3c:
be:b2:e6:c8:6f:21:e4:6b:4f:46:f4:cf:69:33:12:07:7d:31:
15:ec:02:0f:ac:8c:17:fd:c5:70:68:9f:b9:5c:23:04:a6:37:
43:7b:a4:38:e1:f6:5d:86:6c:5a:88:3b:30:e9:32:1c:54:f3:
81:d3:ca:47:84:82:94:37:24:ba:ca:67:31:fe:fe:32:e4:88:
d0:63:41:5f:bc:80:47:ab:08:c1:d4:19:a4:2e:db:22:1e:06:
8f:08:2b:8e:17:83:32:06:9f:0f:bb:4b:c1:5c:ee:3b:26:53:
ee:3d:db:da:27:5b:f3:d8:5a:0b:a0:0b:cb:4e:2b:cc:7a:26:
19:2c:d5:e2:4d:fe:c7:f1:41:ba:66:85:4b:0a:4f:a0:4f:9d:
72:7d:8f:50:b4:5a:d7:80:60:82:6e:c1:dd:e4:71:a2:7c:58:
fc:c9:af:aa:db:e5:ee:50:58:1a:38:b2:c6:9c:08:e9:6d:cd:
96:52:06:ea:2d:61:e2:b9:8e:93:e8:03:5e:8a:d0:29:c5:6d:
6f:90:8b:f8:4b:9d:87:6e:b4:4a:1d:ef:25:6c:48:09:f1:4d:
75:66:3a:64:09:78:ad:1b:6d:a7:43:a9:33:c5:6f:3e:d0:e1:
54:1b:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org