Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/698CB69E4A6A11EFA6921455762E951A.roa
File: 698CB69E4A6A11EFA6921455762E951A.roa (raw, json)
Hash identifier: kX3o5t4//uX+4E1E4fPagnm/qsXqATtff1vhrLCO1Qs=
Subject key identifier: BD:6B:85:70:E1:B1:36:07:A4:23:B0:9D:3F:80:3F:7C:65:29:48:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A01F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/698CB69E4A6A11EFA6921455762E951A.roa
Signing time: Thu 25 Jul 2024 09:43:57 +0000
ROA not before: Thu 25 Jul 2024 09:43:54 +0000
ROA not after: Sat 03 Aug 2024 09:43:54 +0000
asID: 7018
IP address blocks: 156.246.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40991 (0xa01f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:43:54 2024 GMT
Not After : Aug 3 09:43:54 2024 GMT
Subject: CN=66a21e5d-39ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:13:56:1c:e6:62:a8:40:ad:46:e7:fd:e5:
35:c6:27:7d:03:ec:b0:d8:31:cb:62:87:f2:c8:9b:
17:29:70:56:d5:bf:36:be:f0:45:43:8b:82:02:fa:
98:18:c4:02:7a:af:98:27:74:27:9f:5d:62:41:fd:
9e:2f:f4:b9:7c:08:b4:0d:d1:c3:b2:1d:d2:da:47:
87:03:22:96:72:a5:a1:42:72:6b:60:b7:f2:48:0d:
21:c8:1e:33:b0:cc:cf:96:42:ea:d6:9f:5c:80:3c:
eb:c7:00:55:e1:43:79:38:d6:90:08:4a:81:13:95:
b0:20:7a:1e:e6:41:4f:ea:ce:83:66:76:da:48:e3:
d2:a1:07:56:d6:67:9e:21:3f:d9:ee:6c:48:9b:ec:
bd:24:36:21:67:10:58:10:60:b1:6e:4d:99:a5:88:
cc:1f:c3:b7:08:4b:d9:16:c3:9e:91:65:7e:39:db:
1a:8a:15:70:bb:1f:38:6d:66:54:1d:99:2d:3d:7f:
0e:08:8e:f9:6f:37:b6:ec:4d:90:f5:9c:b5:f7:7e:
d7:80:21:d7:45:4d:33:2c:90:6f:64:cf:85:b1:e5:
5a:78:92:6b:af:09:3e:ec:22:8b:8b:e4:29:43:1f:
5f:f9:6f:e2:5b:ce:ee:87:49:24:85:ea:cf:d1:82:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:85:70:E1:B1:36:07:A4:23:B0:9D:3F:80:3F:7C:65:29:48:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/698CB69E4A6A11EFA6921455762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.26.0/23
Signature Algorithm: sha256WithRSAEncryption
03:b9:67:ad:2d:1e:f2:9c:4a:85:32:c2:d1:9c:9e:43:f6:66:
0a:d3:c8:57:35:28:b8:28:ce:03:63:04:14:e1:97:2e:1e:13:
14:a7:b8:62:5d:60:0b:ac:72:9a:39:3a:c5:5b:5b:6b:ac:50:
0e:8f:04:e3:92:40:56:9c:d0:29:09:24:9d:0b:6e:d3:df:a1:
c8:7c:36:62:7d:26:37:4c:69:3d:77:44:f9:38:30:32:1f:40:
43:c7:13:9a:e9:06:38:7a:19:0f:7a:7e:04:31:82:d0:93:fa:
6b:50:36:43:f6:fc:75:bc:88:39:f3:20:37:07:93:f8:b0:88:
4b:11:ff:33:9c:fd:ad:e1:aa:c4:76:f1:5e:9c:22:16:f5:3a:
da:e6:d6:bd:c9:ac:33:9f:71:1f:ab:17:de:4d:e3:8b:a6:b5:
39:0d:29:2e:50:81:5e:0b:1f:f0:41:04:ac:ee:48:ab:9f:2e:
41:85:0e:16:03:7e:48:e7:6c:d9:08:d2:f8:03:6c:b6:5f:b8:
a5:31:39:55:6d:58:5d:05:c2:1f:b2:24:38:d6:dd:74:a0:30:
63:4d:9b:87:d8:93:98:43:5e:ee:99:d8:7d:8c:0d:4c:7a:11:
ac:ac:65:cf:f1:8c:84:46:bc:9e:86:32:ff:f3:ed:71:59:d9:
4c:6d:cb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org