Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F3FA06044F311EFBCF2AFAB762E951A.roa
File: 5F3FA06044F311EFBCF2AFAB762E951A.roa (raw, json)
Hash identifier: h4UGpN1w4hC1Uoc0wK4TZ1Cp4tjPJq6tyD3le71QK18=
Subject key identifier: 05:6D:49:1F:68:71:6C:63:CE:6B:BF:CB:A7:73:97:13:95:BD:97:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F3FA06044F311EFBCF2AFAB762E951A.roa
Signing time: Thu 18 Jul 2024 10:49:14 +0000
ROA not before: Thu 18 Jul 2024 10:49:10 +0000
ROA not after: Sat 27 Jul 2024 10:49:10 +0000
asID: 5065
IP address blocks: 156.239.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40307 (0x9d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 10:49:10 2024 GMT
Not After : Jul 27 10:49:10 2024 GMT
Subject: CN=6698f32a-092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:d0:77:f6:2e:87:dc:c5:ba:e6:2b:d1:98:
45:21:da:3e:5d:36:b1:5e:c6:cc:6b:f2:f1:6d:27:
ca:1b:e3:d6:c2:46:fe:23:12:94:c0:80:8e:69:4e:
13:08:cd:90:e4:55:8f:91:27:f5:2e:89:ce:fd:a4:
9d:9a:2f:e1:bc:2c:43:f2:71:7c:3f:83:bf:92:02:
eb:04:ae:5e:da:e1:1f:11:29:53:f1:3f:bd:d8:35:
0f:21:d8:a8:cb:62:25:43:c7:c8:41:2d:db:d4:89:
a6:3d:bb:3c:ce:63:d9:eb:31:1b:13:9c:a4:b9:01:
41:1d:15:3b:67:62:ed:32:4e:1e:45:e4:9f:0a:3e:
0e:06:4e:0d:e6:5b:90:b4:21:f2:84:cb:bd:27:21:
82:33:07:bf:65:31:d2:f6:2a:a0:68:26:18:df:97:
17:60:ce:03:88:bb:e6:f7:3b:13:8d:01:a7:ec:be:
54:f5:17:2b:c7:c0:df:c3:c2:f5:c3:6d:13:af:b0:
ee:a2:a0:e4:a1:c9:b7:c7:16:d3:17:dd:05:4e:07:
fe:ee:fd:dd:e7:77:c9:6f:ff:be:f1:39:7f:c8:2e:
52:fd:3d:fa:07:ca:b6:c4:b9:84:fd:07:a3:91:ba:
26:fb:f0:71:a7:24:38:39:67:08:a7:69:55:00:1c:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6D:49:1F:68:71:6C:63:CE:6B:BF:CB:A7:73:97:13:95:BD:97:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F3FA06044F311EFBCF2AFAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6a:14:82:39:a8:35:fb:5e:ce:f0:f5:5b:53:a5:b0:fd:d2:
8d:d2:f3:bb:50:fe:5c:b6:57:7f:61:bf:bb:05:49:81:2d:9f:
a8:d0:97:80:34:73:25:4e:66:8f:1d:33:38:fa:04:0d:a6:4f:
a6:71:83:87:48:b9:87:17:f2:84:9f:72:51:6e:db:37:79:58:
52:22:4a:ef:c6:80:ce:71:15:a7:58:89:81:56:ea:9c:30:ad:
25:13:6e:3a:26:cb:a3:0a:e7:c8:78:75:6a:eb:3a:e0:53:a4:
96:0d:96:b5:12:5f:27:d2:d2:b7:fb:fe:69:02:2f:45:52:04:
2e:e1:44:91:18:d0:98:d3:f1:f9:89:45:62:56:99:00:62:4b:
0f:c9:27:85:7a:58:eb:ac:4d:e1:96:d3:8b:30:03:d7:3c:3c:
af:36:2b:76:39:a9:26:75:02:a3:03:6a:9b:8f:41:16:93:3c:
ff:cc:7d:7e:57:36:4a:45:6f:3e:fd:ca:2d:78:fd:45:53:c7:
92:60:1a:fa:87:6c:54:c8:1c:3e:81:c6:fe:66:67:79:52:86:
b8:c9:84:15:6f:4d:10:66:89:29:1c:e7:97:5b:d9:85:a8:c6:
e6:51:25:18:67:a2:b1:6f:d3:ff:0b:82:97:5a:5d:9a:c7:7d:
ad:42:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org