Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B50807047ED11EF9DB9C46B762E951A.roa
File: 6B50807047ED11EF9DB9C46B762E951A.roa (raw, json)
Hash identifier: qCz6/C9ku1NjW8CRvm+VL7lOiGMCv4SdpWgp2aTgSrY=
Subject key identifier: D1:0D:2B:4D:85:2B:F4:20:DD:DE:99:D0:F4:39:3B:CD:15:87:19:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B50807047ED11EF9DB9C46B762E951A.roa
Signing time: Mon 22 Jul 2024 05:44:10 +0000
ROA not before: Mon 22 Jul 2024 05:44:07 +0000
ROA not after: Wed 31 Jul 2024 05:44:07 +0000
asID: 135293
IP address blocks: 156.227.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40503 (0x9e37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:44:07 2024 GMT
Not After : Jul 31 05:44:07 2024 GMT
Subject: CN=669df1aa-9b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:77:b8:ed:e9:4e:56:a1:72:17:c3:1a:f0:
5b:4c:63:f4:c6:f3:71:c8:1c:ee:d0:d8:ab:d1:00:
7c:3e:c5:40:cf:f4:54:2d:dc:40:4a:98:06:2e:c6:
84:67:e1:6d:07:05:92:c7:cc:39:b0:fc:aa:d8:db:
72:80:69:f3:54:55:bc:a2:a9:19:63:45:77:2a:c4:
b1:ba:e5:98:4d:b5:21:34:23:04:fb:ba:60:b2:5e:
78:7f:c3:f3:ce:f6:da:c8:ad:33:c8:6a:b7:00:45:
2c:7b:34:b8:36:ac:90:5b:44:39:a7:53:81:08:f8:
60:3b:14:c8:fc:34:af:df:c4:ff:5e:03:ab:a0:e6:
a3:ac:e3:04:8d:80:c8:4d:80:f7:77:e4:43:f0:b0:
7a:75:60:90:db:7c:cc:9f:b6:3b:3a:99:bc:6d:5b:
a0:f4:ba:ab:7d:42:64:89:df:53:f4:7a:cd:46:41:
80:47:c8:47:70:af:d9:f5:2c:3f:56:ab:32:44:be:
a4:c4:58:41:66:de:d1:64:36:3f:52:5a:e8:12:49:
35:39:ba:fa:6d:d5:e5:3c:19:47:f1:1b:90:64:59:
02:0d:82:e0:5f:02:91:fe:6d:57:c6:d1:a4:6f:5e:
af:3b:ca:39:71:03:c8:1d:71:c1:89:50:72:25:8a:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0D:2B:4D:85:2B:F4:20:DD:DE:99:D0:F4:39:3B:CD:15:87:19:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B50807047ED11EF9DB9C46B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c6:20:ac:be:59:8e:47:cd:c6:56:6d:46:d7:92:9c:90:33:
b2:00:5b:ec:f9:1d:a9:a3:70:e8:f4:c3:53:7c:f0:63:5a:95:
e3:27:34:cf:79:17:8a:db:37:54:b4:73:7b:d6:57:c8:a7:b4:
f3:d2:3d:f2:73:dc:88:a4:93:4f:e7:e5:43:ab:b1:c3:a2:e6:
01:e6:3d:48:53:01:c2:cb:dd:d4:6b:8c:7a:de:8d:f1:e9:a8:
e1:93:d7:7e:ad:3a:b5:3a:7d:9f:6a:8e:07:44:53:74:81:70:
a9:49:62:48:38:e8:b7:11:31:a0:c3:11:4a:61:fa:e4:20:4f:
35:eb:9a:4e:ef:8b:5d:0a:b1:ff:2e:e7:6e:da:5b:f9:82:69:
ab:0e:39:65:57:cc:d7:9d:d2:3b:85:05:f3:1d:8a:62:a9:c9:
7a:6e:6c:90:96:73:1e:08:3c:44:0d:de:5e:28:e4:ba:30:96:
17:67:4a:ad:8b:e8:1a:ef:9e:c6:4c:8b:ab:f8:42:16:f0:cd:
ae:bf:80:7b:6c:ee:c0:fd:8e:6d:f9:b6:f9:c6:53:35:8a:e4:
43:f7:4c:bc:06:37:f8:f7:de:f0:87:6f:6e:61:2a:25:d2:2f:
ce:29:c6:43:b2:3f:98:61:a8:27:dc:60:2f:50:02:fc:5a:29:
b1:a9:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org