Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D13046FD3411EE93D90C1C017001B1.roa
File: 63D13046FD3411EE93D90C1C017001B1.roa (raw, json)
Hash identifier: 7D+8foJX4V1k31TZGVI2Mh2JjTIPpmPdMGjxnN9NFmo=
Subject key identifier: 8E:CD:93:01:37:3B:4E:44:DB:47:C4:F6:CC:0B:7A:A5:78:A1:E0:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8301
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D13046FD3411EE93D90C1C017001B1.roa
Signing time: Thu 18 Apr 2024 03:33:15 +0000
ROA not before: Thu 18 Apr 2024 03:33:11 +0000
ROA not after: Mon 29 Apr 2024 03:33:11 +0000
asID: 139646
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33537 (0x8301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 03:33:11 2024 GMT
Not After : Apr 29 03:33:11 2024 GMT
Subject: CN=6620947b-2dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:a4:90:9a:ee:d7:1a:0a:82:e8:4a:67:50:
d7:f6:3e:2a:d0:72:81:4e:ee:99:be:83:7e:4e:30:
9e:52:fd:e4:3c:cc:c3:03:60:3a:77:eb:e8:b3:30:
ee:b5:d5:f2:33:a8:d1:6f:71:e2:e6:49:32:55:2e:
68:e3:34:0d:91:05:fe:0d:55:82:f7:a0:00:ea:3d:
d7:2b:5b:71:3e:1f:24:a3:67:f8:8b:aa:8d:8b:60:
ea:4e:94:02:3e:8f:bf:96:ef:7c:70:5e:fb:01:19:
33:0f:5e:98:c9:0c:1f:48:5b:77:a9:8d:cf:ee:05:
97:93:79:cc:19:ca:ed:01:b5:13:2b:19:eb:03:60:
bf:d2:3c:9a:93:d9:60:ba:62:3c:d3:1f:62:8a:54:
43:0c:7a:d2:b5:cf:3d:23:e8:92:13:ab:f9:b7:c6:
ba:e6:d1:4f:2a:50:a9:db:f5:a1:06:4d:26:e8:eb:
91:15:dc:15:1f:68:7f:86:51:92:6d:8a:65:94:b9:
82:eb:be:fd:4c:aa:f8:a4:37:0a:fc:3f:60:50:91:
0a:ad:d5:3a:4b:c1:75:6a:e8:b7:41:5b:c2:f7:ed:
57:3c:ec:1c:a9:7c:92:40:2b:98:65:60:a5:41:9e:
f6:d1:e6:03:c1:bf:4a:e4:b0:58:51:a3:c5:c8:94:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:93:01:37:3B:4E:44:DB:47:C4:F6:CC:0B:7A:A5:78:A1:E0:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D13046FD3411EE93D90C1C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:83:4b:f3:8c:c8:f3:b7:d8:39:e6:77:e3:b0:be:d9:3b:9f:
6f:5b:0c:48:3c:86:28:03:10:92:09:e6:c5:52:ce:90:2f:36:
59:52:a9:25:4c:95:92:33:12:cb:d9:fd:8c:7a:d5:0e:dd:ae:
c3:1b:48:46:2a:13:25:f1:88:06:a3:1c:a1:2c:69:ad:5a:44:
42:ec:11:90:64:53:c3:94:e8:f6:e4:75:b3:5a:bb:f2:f3:6c:
41:89:ac:5a:2e:ed:e6:4c:0d:be:b6:fc:3d:33:7b:da:d0:19:
4c:f0:bd:79:85:96:e4:42:5e:b7:63:d0:5a:7c:97:0a:c5:29:
2b:8b:21:c9:b2:f7:e6:17:05:da:4f:a1:1f:ff:96:b0:18:12:
d5:90:c2:4a:77:c7:aa:2f:d7:9b:5f:25:a0:f1:eb:23:38:0f:
fc:4f:38:8b:93:31:71:da:f3:d0:df:75:46:7f:e1:92:39:23:
7a:8f:e4:2b:6e:d5:b3:14:28:c9:47:23:0f:8a:2e:d4:9e:61:
ed:08:8d:1f:c9:14:e0:d0:a3:14:d7:f4:dc:0b:da:f3:a3:5f:
e6:2e:e1:f8:53:6a:e1:8f:09:69:8d:91:21:09:dd:ab:0b:a8:
be:4f:3c:df:3b:8b:03:fc:ca:20:fc:10:8e:e9:da:72:2f:57:
6c:83:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 05:25:36 2024 by rpki-client on console-ams.rpki-client.org