Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC8B0148E2B11EFA2913994762E951A.roa
File: 5EC8B0148E2B11EFA2913994762E951A.roa (raw, json)
Hash identifier: pu/uW8nX3XV4+zcAZRPTSh7cbqX3yfS5WotRBfncdRk=
Subject key identifier: 81:58:CB:39:3F:F5:0E:2E:03:0B:A5:A2:DF:3C:71:C8:1E:AC:E2:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C713
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC8B0148E2B11EFA2913994762E951A.roa
Signing time: Sat 19 Oct 2024 15:04:00 +0000
ROA not before: Sat 19 Oct 2024 15:03:42 +0000
ROA not after: Sun 27 Oct 2024 15:03:42 +0000
asID: 214536
IP address blocks: 156.231.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50963 (0xc713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 19 15:03:42 2024 GMT
Not After : Oct 27 15:03:42 2024 GMT
Subject: CN=6713ca60-924b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:8e:c5:19:e8:c3:fd:3c:b2:4f:99:67:95:
ff:76:58:e8:75:88:ef:05:b3:1e:32:42:54:d8:39:
c2:10:5a:96:94:50:33:62:b3:9a:5a:df:a5:61:ee:
b2:a7:d0:1d:49:e4:d3:bb:8b:54:c5:92:19:4e:98:
e1:b9:2b:56:7b:22:eb:4b:6c:6d:e6:3a:59:e9:78:
9d:58:12:73:32:99:96:b2:26:b2:19:0a:99:3d:d0:
ce:10:38:9a:10:ec:94:8e:b8:43:3e:1c:24:4a:cc:
26:a4:60:1f:76:28:e3:93:33:0b:08:03:cf:db:33:
96:fd:6a:f5:d4:b9:d4:c7:53:01:e6:ef:cd:b3:91:
98:9e:8d:f1:90:48:f7:a3:d6:49:bf:ab:3d:49:ad:
d9:f5:73:18:f1:0a:ff:33:09:dd:eb:90:85:9e:b6:
61:aa:0f:82:35:3b:35:08:47:6d:7a:6e:4d:e5:41:
5d:76:db:0d:2e:40:6a:cc:a9:3a:62:7a:b8:ea:de:
b8:7b:19:50:60:2e:74:e0:91:46:e8:db:d6:eb:10:
09:10:05:e1:20:02:e1:41:19:b9:cc:a9:ff:e4:4f:
8e:f8:d7:bf:e4:88:b0:e7:11:05:c6:13:5e:da:f8:
96:da:17:e1:0e:dd:8a:cf:e2:36:55:aa:03:17:99:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:CB:39:3F:F5:0E:2E:03:0B:A5:A2:DF:3C:71:C8:1E:AC:E2:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC8B0148E2B11EFA2913994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a5:e7:87:b8:8d:3c:b7:42:7f:c7:17:a2:c1:24:2e:ae:d0:
ef:66:b0:6f:d1:de:07:4b:a9:fc:93:b7:73:46:2e:4e:34:4c:
6f:6e:b5:05:db:d8:03:77:9c:ab:99:7e:1b:67:cb:a3:95:ea:
d8:31:a5:78:30:35:06:e9:3f:31:0d:86:78:e7:6d:13:01:7f:
a3:a5:9e:4a:b9:58:c7:de:91:87:34:51:45:a8:4b:41:b7:77:
84:fa:e2:01:53:51:a4:0a:b4:1b:93:d6:d4:85:6a:b9:ef:37:
13:99:e2:a9:f5:e6:dc:2b:30:52:d7:00:f2:32:4a:4b:f6:aa:
7b:97:b9:f8:c7:4b:99:11:67:d3:5a:7d:21:35:e9:2b:11:81:
1c:50:08:09:4d:bb:6a:19:f3:f2:40:7c:6a:fa:28:11:37:42:
9b:e0:03:ff:70:26:f3:a6:2b:00:9b:d4:ba:0a:60:99:27:e6:
d5:8c:ef:1b:98:9b:c8:a3:e3:2b:5a:cf:03:dd:d3:02:f3:38:
88:8f:17:e0:ba:08:32:3f:5e:04:91:9b:af:e6:aa:3d:32:92:
f6:61:01:47:ac:52:d1:24:f0:24:95:6a:55:1a:97:0d:ab:9b:
0a:d8:62:de:7c:fd:53:a2:55:01:cc:35:36:12:ac:b9:e4:6e:
6e:58:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 03:21:01 2024 by rpki-client on console-ams.rpki-client.org