Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D60DE03E9B11EFBF98735D762E951A.roa
File: 61D60DE03E9B11EFBF98735D762E951A.roa (raw, json)
Hash identifier: baHlOcPQ2cdD37g1Q31fA7PuBVqkIZZc4i56uo6xwis=
Subject key identifier: E3:B8:05:E5:89:54:75:58:A7:E7:D7:CA:BF:0F:27:7A:3D:3A:7E:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D60DE03E9B11EFBF98735D762E951A.roa
Signing time: Wed 10 Jul 2024 09:04:16 +0000
ROA not before: Wed 10 Jul 2024 09:04:12 +0000
ROA not after: Fri 02 Aug 2024 09:04:12 +0000
asID: 141883
IP address blocks: 156.242.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39567 (0x9a8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:04:12 2024 GMT
Not After : Aug 2 09:04:12 2024 GMT
Subject: CN=668e4e8f-565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1e:a3:aa:86:5d:1b:43:f0:b5:6d:57:13:e8:
73:c6:57:55:93:af:28:60:67:69:10:8c:9a:d9:cc:
64:fc:24:d1:bc:22:e7:90:d5:d6:b6:fa:50:7e:d3:
28:80:b4:81:48:c5:2a:01:e4:8f:ea:99:11:1a:e2:
51:eb:94:c9:6a:91:4c:1c:6b:1e:cc:47:84:41:09:
a9:aa:2d:5d:f8:83:68:77:ec:0c:cd:50:be:35:79:
78:e1:23:99:20:c5:dd:09:4e:1f:4e:24:c7:56:c9:
aa:e4:af:28:ad:e6:63:a8:0e:0a:f9:9e:8c:e8:6c:
f1:5e:9f:0a:ab:b9:14:0c:12:91:34:15:6f:22:85:
17:b1:f3:a4:3f:b7:53:87:e2:3c:b1:4c:da:7c:00:
32:38:e3:3e:0b:da:ff:0c:d1:00:a3:19:dd:9c:a3:
4d:3c:e6:d1:4c:77:22:d1:e5:80:51:be:f8:9b:9a:
87:65:4b:a4:1c:95:16:1d:dc:ce:ac:50:12:d5:d5:
45:ad:26:7e:d0:ea:7a:e3:35:b3:f9:25:3a:6c:ed:
a1:e4:db:4c:ba:2d:5e:91:c3:50:9a:41:63:fe:c4:
a4:b1:6f:28:cc:8a:cd:cf:a0:67:e2:46:7b:dd:9d:
8f:2b:46:5e:6f:ce:9d:0a:e0:0b:2d:22:fe:79:d2:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B8:05:E5:89:54:75:58:A7:E7:D7:CA:BF:0F:27:7A:3D:3A:7E:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D60DE03E9B11EFBF98735D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:23:61:75:64:67:50:08:53:19:db:24:ed:91:1c:a5:44:73:
0c:c0:24:a2:9f:87:f6:0d:dd:85:50:b0:de:bb:d6:0b:6c:9e:
a3:97:cd:2f:2c:b1:c5:f9:42:f1:c4:2f:30:9f:ba:0e:3e:88:
e4:ff:34:a0:79:ab:a5:a7:ba:47:28:09:e8:13:f9:95:2d:f8:
79:7d:38:d5:c2:a6:62:66:2b:28:aa:0e:4a:d0:95:9a:db:59:
61:89:f7:a5:80:df:f6:01:6e:8a:d5:6f:d6:8b:66:a6:04:e7:
83:87:0a:1a:f4:7a:6f:4d:0c:22:05:90:6d:b8:7a:69:65:c8:
7b:0e:93:d9:09:d6:6e:13:d3:81:91:46:0a:fb:6b:ab:54:ac:
7e:8d:31:dc:24:6c:9a:7d:38:99:4f:3d:ed:70:5e:3c:b4:ba:
76:d0:20:b9:0e:e5:92:95:5e:38:d2:96:6e:90:ef:20:04:6d:
3b:5b:c6:c5:32:20:f1:da:4f:e5:0d:ba:92:cb:3b:6e:45:46:
9b:80:b9:99:63:58:b2:4f:ed:cf:00:b4:36:c5:71:5a:28:22:
09:14:51:5d:10:23:c2:87:57:34:55:8a:4d:e8:43:78:44:92:
72:84:09:dd:c7:ad:55:d2:9b:a1:f3:75:ec:96:bc:a5:b7:59:
83:40:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org