Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6750E4D047F011EFB7D7D27E762E951A.roa
File: 6750E4D047F011EFB7D7D27E762E951A.roa (raw, json)
Hash identifier: I1pO5fWYIm93HreYXuZ4CxHpZXneLCQAgWy3AOxIpH8=
Subject key identifier: B1:50:E4:4F:5D:ED:AC:99:2C:52:68:1F:4B:B8:89:4C:91:A8:49:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6750E4D047F011EFB7D7D27E762E951A.roa
Signing time: Mon 22 Jul 2024 06:05:32 +0000
ROA not before: Mon 22 Jul 2024 06:05:29 +0000
ROA not after: Mon 29 Jul 2024 06:05:29 +0000
asID: 44559
IP address blocks: 156.225.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40533 (0x9e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:05:29 2024 GMT
Not After : Jul 29 06:05:29 2024 GMT
Subject: CN=669df6ac-85ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:41:29:74:35:4b:d4:98:85:2a:f4:4e:39:
a1:55:b3:38:d9:17:79:c7:31:0c:2c:16:d5:d2:c0:
ac:e6:30:c5:da:8b:eb:ec:64:75:21:57:8c:d3:2e:
9d:36:02:df:d5:55:88:bc:31:ac:5b:c6:36:0c:21:
33:ed:89:82:70:e9:df:b9:a4:bd:a7:6b:16:b6:26:
3b:32:25:33:e3:25:60:49:dd:36:ad:43:19:eb:33:
98:d3:52:a4:bd:cf:22:ca:6b:21:ab:98:4d:c3:3e:
c2:6a:19:64:f1:75:04:fb:2e:84:c0:b0:3c:92:2a:
8e:89:a6:5e:30:e8:54:9c:ef:4d:a4:84:b8:3b:67:
30:87:6b:ed:b9:3f:a4:5f:5e:f7:70:9a:1e:f0:dc:
47:2c:fd:3c:b9:f8:e1:88:fb:16:c5:b7:ab:2a:2f:
a0:8e:e1:17:39:10:17:e8:02:6f:96:2c:99:d7:2f:
5a:36:6b:7a:ff:2f:f9:69:27:bd:13:94:cc:60:86:
53:a8:3b:ae:a4:77:b3:82:9f:d6:3b:81:38:b3:17:
3e:bf:23:3b:5d:8f:8a:e8:cd:f2:14:58:07:65:ce:
0e:c6:7b:88:2c:e4:19:21:c0:ff:4e:ce:41:41:b7:
db:47:ec:de:7e:0c:b7:60:fe:6a:d4:03:c5:6a:11:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:E4:4F:5D:ED:AC:99:2C:52:68:1F:4B:B8:89:4C:91:A8:49:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6750E4D047F011EFB7D7D27E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:51:e5:88:eb:26:40:e0:17:c7:cd:0f:f7:75:63:d9:f9:b0:
7a:c6:8f:fd:43:5d:76:07:f9:fb:28:a9:8c:38:2c:cc:df:00:
2f:65:89:41:7a:8a:fc:bc:f0:b6:ab:7c:77:75:c9:f6:12:6f:
4f:9e:e7:0f:4c:df:f8:dc:fb:f6:70:9f:38:a0:12:48:28:6b:
3d:cc:e0:18:fe:b0:12:70:7b:31:21:be:6e:46:22:91:3f:06:
cc:0b:bc:dc:4d:37:05:f8:bd:b4:fa:df:a9:1b:0a:f6:ec:13:
f7:4b:09:2d:c4:ac:b2:11:a7:81:ae:4b:27:a1:38:df:60:ce:
c5:40:84:df:bf:44:13:ad:83:d9:6d:c0:12:fa:cd:2c:1f:b1:
6b:e0:31:54:12:55:21:73:49:fb:fa:17:47:79:52:5b:c8:18:
ab:fc:9b:da:f5:f2:fb:79:48:84:db:5f:1c:24:ca:0c:05:30:
24:6b:7c:34:5f:f0:c6:3d:c8:75:f6:a5:97:d8:eb:78:89:1e:
a2:93:ce:ca:d9:58:84:84:4a:f7:5e:f9:f1:fc:97:9d:03:a1:
9f:f0:61:44:38:bf:1f:0d:33:9b:e3:9e:95:c7:ad:a2:2c:a2:
62:49:15:b0:10:2e:14:42:af:47:41:25:b2:ff:33:8c:de:58:
ff:f9:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org