Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C6F65048C711EFBB56ECB1762E951A.roa
File: 64C6F65048C711EFBB56ECB1762E951A.roa (raw, json)
Hash identifier: Mf1VKBsbApB/CoL0X5d1ziZfT4juSr73fn/TkQpfplE=
Subject key identifier: 46:AF:69:4F:C4:2A:54:97:95:C8:04:89:9F:8E:F9:42:70:5F:11:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C6F65048C711EFBB56ECB1762E951A.roa
Signing time: Tue 23 Jul 2024 07:44:30 +0000
ROA not before: Fri 26 Jul 2024 07:44:26 +0000
ROA not after: Fri 23 Aug 2024 07:44:26 +0000
asID: 202656
IP address blocks: 156.246.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40552 (0x9e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:44:26 2024 GMT
Not After : Aug 23 07:44:26 2024 GMT
Subject: CN=669f5f5e-6c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:9d:a8:5a:87:33:57:8a:ac:03:38:ad:c6:
23:b8:d0:23:d1:67:19:a1:ee:27:1b:9a:8c:82:41:
ea:10:e3:c4:da:ff:52:f0:b1:45:10:f0:54:9f:1b:
e2:b0:d3:e2:5a:09:52:d1:04:fe:ea:da:b7:21:dd:
3a:15:f9:89:68:85:68:88:8b:a0:6c:09:d5:f6:d0:
50:48:68:d8:27:43:22:c3:79:5c:a4:aa:9c:76:86:
cd:12:59:c7:12:cf:50:3a:39:12:1e:f6:0e:dc:e1:
de:8b:25:e8:37:cc:ef:e1:a3:0f:eb:b1:28:b7:f1:
33:e4:50:b6:4f:99:4b:fe:be:c3:0f:90:5c:80:f5:
b2:f7:b7:73:c6:f9:27:00:3b:1b:46:d3:14:b4:a0:
fb:e4:51:55:ea:e1:b4:d3:35:a2:fc:fd:a5:5d:4e:
2c:81:bd:e5:00:50:fa:d4:8c:da:2e:38:27:34:3a:
42:f5:41:1c:a9:1a:cb:c3:88:29:e9:2a:8e:d3:a2:
ec:9f:6c:a3:29:0b:19:a7:ad:86:9e:ed:e4:4f:f3:
61:b8:ff:c7:26:71:19:5a:6c:29:07:8b:fc:41:c5:
a0:e9:91:c4:7c:2a:e2:37:5c:28:4d:4f:52:26:a4:
84:c9:c5:e9:c4:68:fc:ad:2b:56:08:d3:2c:1e:e0:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:69:4F:C4:2A:54:97:95:C8:04:89:9F:8E:F9:42:70:5F:11:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C6F65048C711EFBB56ECB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3c:0c:85:7a:3e:24:a7:ba:a1:53:7e:a7:cf:46:5c:38:f1:
41:77:ca:43:8e:06:60:49:d0:e8:af:38:f9:1a:13:c6:a0:bd:
84:c3:20:ef:3a:9d:51:50:a2:1d:a3:31:ed:2a:14:2a:85:41:
30:5e:af:a5:0f:10:42:63:26:a5:44:ba:92:4c:6e:b3:e8:89:
a0:ea:5b:8f:a0:83:04:32:1d:6d:24:07:e2:1d:c7:b5:bd:ec:
17:74:bd:a6:3d:76:7b:60:92:6a:61:26:f2:bc:99:4e:57:79:
34:73:74:97:7a:5f:5d:e8:10:73:82:54:54:f5:1f:d0:85:6c:
ea:d0:9b:f1:e6:55:15:68:20:d0:b1:a1:6f:21:e9:3c:a3:8a:
36:a5:28:01:99:57:a6:5f:55:e6:a4:1d:c5:e9:0f:a2:a2:38:
05:8d:ca:20:81:68:c3:17:f8:67:a2:05:76:db:62:01:29:ca:
9e:1b:a9:1f:fb:c0:80:f3:80:22:94:11:05:38:c4:d8:60:db:
0d:63:4f:7e:8c:ec:dc:01:1b:c4:de:7f:2e:1c:6f:a1:91:60:
a5:97:b3:12:8c:55:27:30:d1:97:39:0d:44:73:5e:59:e3:bc:
6c:5b:71:5c:d1:d7:01:00:74:5d:7d:ec:c2:96:d2:2f:ff:88:
42:e6:ee:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org