Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/647D31BEF0C511EEBE375F96775412E6.roa
File: 647D31BEF0C511EEBE375F96775412E6.roa (raw, json)
Hash identifier: sXzn09+AGnqMTPXoUr2f9K8XsmrtClTL25rktQxW6l4=
Subject key identifier: 6D:E8:E5:72:90:7B:67:9D:82:9B:4F:1A:AD:5A:AB:19:68:B6:EF:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8152
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/647D31BEF0C511EEBE375F96775412E6.roa
Signing time: Tue 02 Apr 2024 07:48:28 +0000
ROA not before: Tue 02 Apr 2024 07:48:25 +0000
ROA not after: Mon 29 Apr 2024 07:48:25 +0000
asID: 139646
IP address blocks: 156.246.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33106 (0x8152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:48:25 2024 GMT
Not After : Apr 29 07:48:25 2024 GMT
Subject: CN=660bb84c-4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:d2:9c:80:03:cf:bd:65:79:1e:85:bd:8e:
f0:1f:25:19:dd:02:52:8f:1f:97:df:85:4d:e4:58:
27:c2:36:65:0c:03:ad:a3:3c:93:c0:a3:01:5a:18:
67:9a:5c:be:24:fd:c8:32:e2:3f:2d:75:5d:e5:c7:
41:24:25:5d:51:7c:58:6c:1a:1e:ca:69:93:78:16:
db:d7:25:f2:17:c8:70:dc:e7:6e:6a:aa:ec:93:e3:
c3:21:0e:61:f4:c6:6f:f3:95:45:24:05:d7:38:cf:
18:9c:0b:a6:db:72:79:fe:72:7b:ee:26:e1:23:19:
91:f7:d8:89:aa:c0:df:33:2e:07:34:2f:4e:44:18:
eb:18:67:74:f9:db:65:f9:20:0b:c3:3b:93:5b:c4:
a5:f2:d7:c6:1e:a3:ed:fd:fc:45:84:b8:ae:6b:df:
a4:97:f1:80:94:63:9b:8d:a7:78:f4:c1:35:21:d8:
e7:e1:d7:18:d5:cb:30:1a:30:d3:3c:37:72:00:ec:
e2:2a:3c:f5:8b:1d:73:da:75:80:a5:b4:40:3b:c9:
f6:fa:b6:30:6f:57:25:e1:2c:51:d1:94:1b:f2:6f:
3e:b8:7a:40:38:5d:be:43:91:34:e5:c9:3a:88:45:
b0:3b:fc:0f:8e:29:76:25:f7:8c:7c:eb:01:99:a0:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:E5:72:90:7B:67:9D:82:9B:4F:1A:AD:5A:AB:19:68:B6:EF:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/647D31BEF0C511EEBE375F96775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.16.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:d8:bb:0f:96:b5:f1:03:22:78:91:9e:c8:28:a2:71:6d:9e:
07:60:c5:99:dd:4e:f6:92:75:4d:05:05:70:60:b1:aa:1d:d5:
c5:8a:80:f6:f9:bc:a9:d3:5d:1c:47:ba:24:a9:9d:69:ac:11:
45:b6:d3:c5:45:b9:c2:da:60:0a:ee:c2:51:b4:d0:5e:83:9f:
7c:46:42:89:43:e1:12:c4:4a:60:56:b5:51:32:60:b8:ea:83:
6e:7e:d3:a5:69:19:d0:85:17:80:12:3a:a6:c6:cd:bb:93:1d:
ec:16:49:83:88:23:45:74:f7:c0:e6:28:9d:ae:9a:a2:ad:52:
30:c4:a4:55:e4:fb:85:ed:2b:84:07:35:2f:4e:d3:95:72:f8:
c1:bb:36:93:0c:83:69:9d:43:34:aa:e5:5c:01:5f:8c:f2:a5:
68:94:e3:5e:0f:3b:4e:79:9a:73:34:38:01:25:ef:34:44:6d:
10:4e:e8:b6:80:15:1d:f3:db:d8:ff:b0:40:75:59:e3:1c:1a:
91:59:e1:60:ea:3b:7b:30:ac:22:bb:24:63:39:0c:cc:96:69:
f0:f0:72:26:ea:86:08:8e:b7:4d:5a:3d:8c:c7:00:47:2a:89:
be:3a:78:85:f4:ae:62:04:4a:8c:0e:56:09:41:69:71:4e:b5:
0e:59:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org