Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6469C4D8FD5111EEA9188909017001B1.roa
File: 6469C4D8FD5111EEA9188909017001B1.roa (raw, json)
Hash identifier: NxOosEbc7gZh4uAjXBMCCCRivbeFZTfiNgB7vMptAeA=
Subject key identifier: C4:5A:14:D2:80:01:36:AB:0B:41:9B:B0:35:07:F8:4B:93:B3:49:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8365
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6469C4D8FD5111EEA9188909017001B1.roa
Signing time: Thu 18 Apr 2024 07:00:51 +0000
ROA not before: Thu 18 Apr 2024 07:00:48 +0000
ROA not after: Fri 26 Apr 2024 07:00:48 +0000
asID: 39600
IP address blocks: 156.255.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33637 (0x8365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 07:00:48 2024 GMT
Not After : Apr 26 07:00:48 2024 GMT
Subject: CN=6620c523-0c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:7d:61:c8:c9:82:95:e1:7e:d7:56:16:b8:
eb:47:d1:ee:e3:24:3c:22:54:fc:6c:c2:f6:ab:94:
20:10:a2:6e:46:e2:a2:3f:7e:27:c3:5f:ed:fe:70:
08:47:21:2f:ec:2a:a1:cc:06:c9:eb:2c:e3:dc:78:
a9:5a:5e:5f:34:5c:b8:aa:d2:75:d4:3c:24:1d:b5:
4d:f1:de:c1:d1:b9:b6:0f:12:cf:94:52:9f:6c:3b:
bd:d1:ab:88:93:8d:ca:6c:4c:f8:32:3c:7b:8e:f8:
2e:68:4a:fa:7f:75:42:1b:3d:fa:03:d4:b3:da:bc:
a9:21:ff:eb:69:8a:0b:3f:87:0a:9d:7d:68:b6:0c:
d2:cd:7e:cd:1b:b3:fe:8e:a2:b9:92:b1:d5:12:8c:
37:35:de:2e:7c:67:5f:4e:81:55:ec:bc:1c:5b:cc:
c2:4a:0f:1d:c0:c2:37:35:52:c8:1a:39:35:f1:77:
86:eb:a7:6f:fd:62:c1:87:24:49:e6:c5:69:65:ae:
2e:04:ea:8d:5f:b4:64:77:09:57:48:f1:c3:e5:11:
07:6c:33:26:a9:29:45:84:69:5b:31:53:09:a2:99:
54:2e:67:2a:ff:9d:18:60:2c:bb:ec:5b:0a:ef:ec:
e3:d4:af:2e:da:ea:47:be:10:d9:d6:02:cd:01:2c:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:14:D2:80:01:36:AB:0B:41:9B:B0:35:07:F8:4B:93:B3:49:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6469C4D8FD5111EEA9188909017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:35:24:3a:24:db:9d:f1:5c:04:12:a5:b9:10:79:70:ec:30:
90:fa:f2:20:7a:cb:4e:6b:f6:aa:38:fd:e1:86:f9:7c:ee:5e:
a0:e2:b0:68:79:5c:81:6d:20:30:c5:67:9d:80:d9:41:d2:1f:
48:9b:77:65:36:68:03:f6:f6:04:9e:f5:31:c9:32:88:be:eb:
b3:56:86:26:cf:ac:ad:9a:b1:1d:20:4b:7d:2d:7a:c8:83:0a:
b0:08:98:98:ca:30:e2:16:ff:55:b8:02:38:18:fb:14:13:6a:
aa:36:64:80:24:d6:01:16:87:51:dd:8e:84:c7:34:13:93:2e:
a1:ed:10:bc:99:40:ba:43:74:22:23:ea:44:0d:4b:17:e4:6e:
5b:17:03:68:08:3e:dd:1d:cb:6c:b2:81:d2:ae:33:c8:63:b5:
4d:68:cb:a5:01:8f:3a:a3:2e:0f:1f:df:e0:32:d2:98:03:47:
5e:b2:c1:44:9d:93:c0:a8:b5:32:0d:59:30:94:1b:80:45:d7:
70:82:4e:96:fd:ee:f8:e4:4d:7e:9b:27:91:70:fa:dc:b5:d5:
7a:cb:3e:cf:16:35:b9:0e:fb:2f:3e:98:df:3a:fd:20:20:84:
22:92:93:6c:1a:b7:be:6a:63:48:9e:0d:92:19:8b:7b:61:1c:
9a:45:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:27:27 2024 by rpki-client on console-ams.rpki-client.org