Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61A3A3A244F211EF824E18A3762E951A.roa
File: 61A3A3A244F211EF824E18A3762E951A.roa (raw, json)
Hash identifier: CWs48IiMVqsAyq6Zs7ZBYj4exrGx2YYpzZjqOFnZr4s=
Subject key identifier: FD:97:D6:55:2E:89:B0:E9:27:A4:E5:01:55:33:AE:78:BD:32:76:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61A3A3A244F211EF824E18A3762E951A.roa
Signing time: Thu 18 Jul 2024 10:42:08 +0000
ROA not before: Thu 18 Jul 2024 10:42:05 +0000
ROA not after: Sat 27 Jul 2024 10:42:05 +0000
asID: 212238
IP address blocks: 156.235.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40301 (0x9d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 10:42:05 2024 GMT
Not After : Jul 27 10:42:05 2024 GMT
Subject: CN=6698f180-d94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:d3:7c:43:2f:aa:ec:c1:0e:0c:dc:79:64:
65:79:7a:f7:aa:d7:9a:9f:45:9c:b9:c1:6f:cf:b2:
e0:68:ca:ea:1a:8a:bb:67:fa:2a:7d:77:7c:fb:52:
8d:c8:80:28:8f:08:eb:c6:38:d6:1c:a2:00:7e:3e:
d2:70:84:50:0c:ea:31:79:ae:4a:62:9f:6c:ac:71:
10:f5:e3:1e:c8:b8:45:82:9e:dc:16:f4:64:6e:01:
ff:29:fe:4c:84:07:7b:4e:10:e5:2d:b3:94:63:8f:
63:f1:d7:1a:80:c6:8e:eb:fb:d4:a5:ff:1a:ee:4e:
a1:8e:71:6c:43:00:0a:b7:d1:97:d3:86:2b:37:ba:
00:4c:e0:25:e9:2f:5c:d9:5f:93:3f:89:07:5a:13:
6b:2f:16:b5:0c:21:71:ff:76:d0:1a:22:0f:17:81:
d6:53:1f:d5:6c:e2:d5:64:a3:06:d3:6f:88:eb:2e:
5c:19:d2:c7:86:1a:53:7c:13:fe:5b:e7:0c:18:3e:
d1:6e:3d:c6:9f:60:a2:f5:aa:75:5e:09:8a:c1:4f:
72:15:15:59:ce:f2:7c:d3:da:52:ed:67:4b:94:1c:
3a:83:4f:65:d9:ee:d3:f1:e1:f3:f7:bb:7e:77:7e:
1f:81:d0:c2:db:42:2d:91:84:74:bd:da:fd:0e:db:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:D6:55:2E:89:B0:E9:27:A4:E5:01:55:33:AE:78:BD:32:76:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61A3A3A244F211EF824E18A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.53.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a4:2b:a9:bb:89:4a:60:6e:2c:70:59:68:64:d6:dd:bd:08:
8d:7f:d3:2f:7a:bc:6a:73:1f:42:e6:f3:37:23:48:d6:dd:0f:
98:22:1f:44:19:7c:77:71:a0:52:bd:4f:2e:47:8b:df:a1:ed:
61:52:fa:62:41:c0:ca:3e:26:b6:33:3a:8e:6c:ef:5b:f8:51:
b7:ab:e5:e4:c7:18:70:a0:dd:bb:75:da:ec:a3:fd:59:ec:d3:
89:8e:6c:21:8c:e3:8a:34:6c:4c:50:a7:5e:5b:ee:1f:ae:55:
e0:87:94:3e:e2:64:67:49:af:81:91:69:da:5c:0e:bd:38:c6:
31:b3:fd:a1:97:23:58:32:92:bd:cd:53:a5:26:0a:cd:ec:cc:
31:36:20:8b:85:ce:68:0b:e3:f4:1c:28:e6:14:11:72:2a:e1:
bd:db:b9:8e:74:63:81:94:13:58:60:b2:aa:61:63:52:cf:68:
ef:0a:57:6b:cb:c9:d6:40:8f:17:ed:45:59:6f:94:11:3c:7a:
34:57:35:5f:f0:35:7a:f2:10:5f:f7:84:43:ea:b3:73:f0:a9:
93:de:83:ae:1f:c6:3c:54:84:94:8f:5f:8f:a1:cd:5a:c0:f8:
93:01:43:43:46:da:53:bf:3c:6f:19:55:f2:cb:84:98:db:fe:
9a:37:e5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org