Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B6FE3C47F0C11EFA4088341762E951A.roa
File: 6B6FE3C47F0C11EFA4088341762E951A.roa (raw, json)
Hash identifier: 4mJkUZa+leghp8+KMBC3IfelQFx2jEQyvaM+UCjtpzM=
Subject key identifier: F1:BE:10:E0:B3:56:8F:7C:56:4E:1E:3C:D1:2C:0A:BE:40:0F:41:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B6FE3C47F0C11EFA4088341762E951A.roa
Signing time: Mon 30 Sep 2024 09:14:39 +0000
ROA not before: Mon 30 Sep 2024 09:14:35 +0000
ROA not after: Thu 21 Nov 2024 09:14:35 +0000
asID: 63139
IP address blocks: 156.227.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48547 (0xbda3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:14:35 2024 GMT
Not After : Nov 21 09:14:35 2024 GMT
Subject: CN=66fa6bff-28ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:a9:bc:5e:71:24:af:a4:ae:0d:a7:80:e7:
02:61:9c:14:d2:72:f8:97:e1:df:6f:9d:18:5b:cb:
5f:e2:b4:5c:af:fd:84:9b:2f:38:51:38:c5:ab:2d:
c7:79:44:03:76:d1:64:67:e1:84:75:2f:74:d5:e2:
65:33:a1:07:39:a7:2c:12:de:16:d1:5f:eb:5f:3f:
04:bf:da:07:36:ce:7e:cc:7f:84:9c:a9:9a:b2:4b:
30:0f:c4:ae:b7:b3:7c:4d:75:5c:31:8e:46:f4:60:
5d:9e:aa:be:c3:2e:ed:a4:a2:48:02:0d:94:eb:3d:
64:eb:7b:6b:46:c8:b3:64:1d:01:a4:80:d0:84:e7:
65:41:fb:21:de:47:68:51:7a:b1:56:3f:fc:c1:f8:
25:1f:5b:5d:40:8f:99:6e:af:49:a4:51:b8:1d:aa:
79:53:ea:eb:a8:dd:5a:18:58:85:d4:71:aa:51:d1:
76:6d:25:25:27:c3:46:b8:f5:00:07:88:e7:fd:85:
01:02:dd:d6:30:27:02:70:a2:13:f2:99:11:81:81:
55:5d:76:93:fb:67:fa:06:84:71:71:8c:a5:3e:58:
de:98:a4:f0:4e:b3:bd:5d:ee:d0:4d:d0:8f:72:97:
af:22:a8:6d:12:e8:5a:b1:5a:d0:bd:9a:88:9a:2f:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BE:10:E0:B3:56:8F:7C:56:4E:1E:3C:D1:2C:0A:BE:40:0F:41:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B6FE3C47F0C11EFA4088341762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/22
Signature Algorithm: sha256WithRSAEncryption
24:5b:f3:8c:3a:a3:29:61:03:8d:2f:43:2c:82:be:83:36:ad:
e6:46:38:8a:05:b8:10:a8:29:6d:b6:d3:f9:68:32:1e:24:77:
f9:c2:74:86:5a:d2:da:04:cb:68:c9:c0:cb:9a:4f:70:27:37:
dc:55:e7:f0:8a:e1:b8:a9:7d:10:f2:e1:40:bd:a2:d9:1e:ac:
a7:39:9e:2a:6a:85:e5:10:2c:13:af:56:de:ca:66:e9:bf:8b:
c2:72:54:83:0b:6e:43:46:78:5d:f1:91:76:27:7e:ba:d5:c3:
23:6a:9b:3d:a9:93:b1:11:c6:ec:4f:49:85:ea:3e:fe:e7:da:
cf:11:61:1c:99:b3:7d:d3:d9:81:68:a5:b0:a0:83:0c:6d:49:
c9:f2:7e:da:47:d2:6b:75:ba:92:dd:42:2d:78:18:bc:fc:50:
c3:64:e2:61:5b:27:ab:ad:94:c5:7b:51:71:a5:82:8c:78:d9:
b5:5c:a7:e4:59:16:31:ee:ad:70:0e:7d:ca:29:66:7e:78:6a:
f5:bc:ca:6b:c8:cc:27:d3:7a:38:2e:d7:ac:14:f3:d0:a1:e7:
5b:62:6c:4e:56:4a:76:d1:3f:20:89:d8:22:ec:ad:79:d4:5e:
5c:24:d2:8d:1e:28:26:66:0a:92:4d:e9:46:64:60:bf:1a:9c:
9c:ac:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org