Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EAF46C63EA111EFBDBE6083762E951A.roa
File: 5EAF46C63EA111EFBDBE6083762E951A.roa (raw, json)
Hash identifier: yL5ALuAcAvR6dRhhDMyKgaeV8xg+6mmGAIanffwk8GE=
Subject key identifier: 45:8A:7B:70:2F:24:8C:75:80:F0:DF:AA:9B:80:35:AF:16:80:EE:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9AF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EAF46C63EA111EFBDBE6083762E951A.roa
Signing time: Wed 10 Jul 2024 09:47:07 +0000
ROA not before: Wed 10 Jul 2024 09:47:04 +0000
ROA not after: Fri 02 Aug 2024 09:47:04 +0000
asID: 139646
IP address blocks: 156.249.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39668 (0x9af4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:47:04 2024 GMT
Not After : Aug 2 09:47:04 2024 GMT
Subject: CN=668e589b-8686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:e2:80:e2:26:06:bc:3d:57:82:2c:50:d8:
5c:63:20:3d:96:d6:69:d5:4b:b3:17:2a:91:44:94:
79:22:5d:61:0d:6c:ac:af:d5:2d:fa:21:fb:ef:ce:
3c:24:00:9a:2c:0c:05:05:1c:de:8e:77:c2:9e:26:
93:68:5b:7a:a8:fe:bd:1f:5d:e8:9d:1e:8d:12:c0:
8d:bb:82:00:11:cd:1d:1d:c9:b5:3c:26:80:86:a4:
2d:52:9d:07:65:1b:cc:1a:9f:61:ed:3c:7a:ed:19:
bf:c0:a0:47:87:16:67:a9:4e:17:ac:2c:d6:f6:50:
f4:14:f1:12:ae:1a:ea:a1:12:57:9b:28:d4:a6:14:
ba:16:c7:ff:65:dd:b0:0c:94:ea:93:24:0f:ca:ec:
c8:82:e9:07:11:9b:19:3d:b8:8c:2a:a6:17:38:f1:
8c:1a:fd:5c:b2:8c:5c:6c:12:86:80:3c:d4:f6:de:
1b:3c:19:f4:fc:25:e4:2a:bf:f1:92:07:55:f6:76:
57:42:4b:20:4e:68:59:07:03:32:15:83:f4:27:56:
b3:25:db:14:ca:5c:0b:dd:22:a2:e1:b7:88:2f:9d:
1a:30:e0:28:cf:8d:74:df:94:f0:6d:86:63:ca:a0:
9a:50:24:a3:32:c8:3f:c5:61:6a:9f:29:b6:0d:2d:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8A:7B:70:2F:24:8C:75:80:F0:DF:AA:9B:80:35:AF:16:80:EE:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EAF46C63EA111EFBDBE6083762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:ce:0c:11:25:27:53:75:ad:fe:fb:42:34:ad:8d:51:5e:04:
06:f5:86:d4:78:98:d3:1c:97:df:09:1d:24:d7:e2:ce:07:90:
35:31:d7:87:86:2d:e8:f3:65:17:58:a6:9b:62:ca:a4:d8:70:
23:cd:1f:29:16:5b:94:5e:35:e1:7c:52:1c:a3:4b:9e:52:2e:
6b:c5:d8:e1:1b:07:46:80:b4:cc:e8:07:a5:2b:b0:d8:53:aa:
18:27:8b:f7:5b:64:a4:42:da:48:2f:8f:e6:4e:77:46:ad:ac:
bb:b5:d6:9d:bc:9b:df:0d:08:0a:8f:ed:62:14:b5:40:9b:e3:
a2:fc:2e:42:0f:85:33:51:75:31:60:e3:47:01:0b:83:94:e8:
8d:ad:d7:27:63:de:02:97:08:21:4f:48:f7:89:13:2b:eb:d2:
5a:63:c7:d8:87:94:4a:35:e3:24:75:fc:0d:f6:4a:3f:f2:07:
3e:df:e2:34:2f:a2:e4:42:81:b6:25:2d:a5:ce:0f:39:d6:a5:
a3:ea:de:b5:4c:52:bb:70:5e:ae:27:16:d6:9a:63:39:0b:00:
b7:fa:8c:b0:85:a4:f2:08:8a:5d:65:0c:6e:52:09:fa:79:1a:
f0:48:af:83:d9:5a:e5:e7:63:6d:60:c7:7e:9c:64:f5:48:26:
90:9e:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org