Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B703B38377411EFB9A01283762E951A.roa
File: 6B703B38377411EFB9A01283762E951A.roa (raw, json)
Hash identifier: /raYpRsm+4Dp2peSnaPyV8f56HDwD6+tPG8qmIK28HI=
Subject key identifier: 74:6B:91:96:87:29:75:7F:40:87:50:C2:5D:F2:C8:93:C7:4A:7A:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 96DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B703B38377411EFB9A01283762E951A.roa
Signing time: Mon 01 Jul 2024 06:37:43 +0000
ROA not before: Mon 01 Jul 2024 06:37:40 +0000
ROA not after: Fri 02 Aug 2024 06:37:40 +0000
asID: 269070
IP address blocks: 156.249.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38622 (0x96de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 06:37:40 2024 GMT
Not After : Aug 2 06:37:40 2024 GMT
Subject: CN=66824eb7-17a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:31:e2:0d:f5:5e:fb:3f:6e:99:61:d1:5f:
e3:9e:40:81:9c:78:d8:61:b1:b9:ed:e1:79:0f:f2:
c7:61:32:91:bb:cd:57:be:7a:1f:99:29:29:cc:5a:
80:d0:84:a0:a6:ee:19:5d:a5:5d:50:da:08:6a:34:
5b:1f:d3:e7:5e:0b:1e:e9:ec:5f:03:0e:57:ac:f3:
81:49:bb:f3:23:27:f8:cf:d0:cd:8b:f0:5f:a9:25:
57:30:ee:74:d9:ce:48:ac:67:7f:e1:e3:cb:74:6c:
d8:7a:f2:27:f1:03:21:5d:78:f8:8e:9e:3a:55:9a:
00:36:87:c9:0f:e3:37:3b:98:f2:e0:94:6e:14:92:
28:a3:78:0a:7d:56:82:45:47:bd:af:f3:c8:d8:04:
eb:b3:ab:11:53:b2:34:02:40:a2:50:50:94:3e:2f:
85:93:24:a5:66:32:65:ae:66:f0:db:cc:7f:07:a6:
cd:4b:01:a7:23:80:83:11:b6:db:dd:f4:e7:f4:8b:
d7:e9:3a:d0:84:bc:aa:e0:f9:d1:5c:23:3b:31:eb:
6d:40:d7:c5:48:1e:3f:33:c2:9d:d9:d4:b5:b5:25:
d9:31:66:a4:3e:60:04:96:02:67:df:78:8e:4e:86:
3c:1a:39:15:14:be:51:87:68:76:e1:1c:34:cd:c0:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6B:91:96:87:29:75:7F:40:87:50:C2:5D:F2:C8:93:C7:4A:7A:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B703B38377411EFB9A01283762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.65.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b6:31:ee:c8:3c:9e:6c:ef:85:fd:1b:46:a6:8f:fe:b4:99:
db:c3:d0:8e:9f:55:94:a2:4d:4a:c6:72:55:7a:20:4d:f2:f3:
f4:bc:49:d1:ae:ea:04:22:54:5a:57:96:9e:d7:29:9b:ae:10:
d9:f1:d0:07:de:37:22:ef:17:03:f2:2b:c1:31:cc:f8:6e:9e:
4e:02:5b:52:27:18:16:86:4b:a0:08:9b:3f:43:dc:36:8c:9b:
5f:84:fb:6c:73:89:b4:9e:2c:90:6c:04:2a:79:e6:42:b8:0c:
5e:ea:53:78:fe:a6:2a:36:ba:fb:41:57:87:01:08:ea:f3:9e:
39:11:07:e3:ca:65:fa:5c:86:20:59:cb:0e:1b:15:23:f3:0f:
8a:6f:5e:7f:6a:0e:82:a9:b5:3a:94:55:0e:77:3c:dd:1c:a2:
67:9b:b5:98:91:86:07:a5:5d:5b:fa:f9:f4:93:db:fc:08:6d:
e0:ab:0b:37:19:29:04:16:3a:93:69:1f:47:12:18:e0:52:ea:
d5:7e:1f:04:e5:2f:83:2a:ad:9b:8c:e8:f0:13:bf:57:fd:7d:
d4:88:d1:ec:fd:c1:36:5b:d3:94:52:3c:c2:a8:9d:6e:76:76:
46:98:6c:18:8d:38:50:4b:99:d4:7a:11:3b:9b:6a:f2:22:70:
dc:a6:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 10:00:17 2024 by rpki-client on console-ams.rpki-client.org