Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4F657202F611EFA35EED0B017001B1.roa
File: 6C4F657202F611EFA35EED0B017001B1.roa (raw, json)
Hash identifier: Uq/7iKGtee+kMC+YcNWE5KP27hsHCQB5gLbHY47ekhY=
Subject key identifier: 65:AA:E2:7B:46:73:F0:57:74:53:23:17:1B:AB:15:16:D9:D6:67:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8505
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4F657202F611EFA35EED0B017001B1.roa
Signing time: Thu 25 Apr 2024 11:24:47 +0000
ROA not before: Thu 25 Apr 2024 11:24:44 +0000
ROA not after: Sun 05 May 2024 11:24:44 +0000
asID: 39600
IP address blocks: 156.238.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34053 (0x8505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:24:44 2024 GMT
Not After : May 5 11:24:44 2024 GMT
Subject: CN=662a3d7f-5b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:39:4f:f5:9b:1a:87:25:6a:39:70:9c:0b:
3f:10:3a:99:c8:b6:33:b6:59:ba:bd:12:07:7c:0f:
3d:26:a7:9a:74:68:46:68:01:17:6a:18:b3:af:09:
91:50:29:71:8c:5e:3c:77:fd:3b:6c:2c:60:14:08:
be:30:c0:03:f5:07:6b:ec:2c:cc:6d:e0:1a:8a:8a:
8b:a2:44:cb:7c:0a:d2:ca:6a:a4:e4:a9:40:ab:89:
1d:5c:43:06:3e:52:bc:d1:51:a7:80:4e:af:d3:24:
73:a9:87:3f:7f:8a:f0:10:f3:79:03:27:7a:07:f3:
69:ae:f1:93:7d:19:9c:da:73:db:83:2d:22:34:f8:
63:fb:cf:df:5e:a7:92:83:b9:80:32:84:f1:ad:1c:
6e:fc:ff:bf:89:cf:02:81:e6:a6:83:62:49:2a:89:
df:9f:ba:6a:da:2b:6e:b7:a9:79:65:72:39:6f:e1:
27:a3:96:d8:b1:e8:d6:d7:83:a4:ed:e5:f5:46:b1:
c5:e0:ef:c0:47:71:f4:8c:ae:cb:44:8e:2d:d0:4a:
cb:fe:a7:2c:d0:cd:aa:30:87:57:7b:0e:08:c5:12:
d5:23:a8:64:e1:9d:f6:d7:d3:56:5f:5b:88:d3:9d:
e7:ab:c3:17:ed:1f:2f:b7:0f:44:02:7f:04:74:d0:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:E2:7B:46:73:F0:57:74:53:23:17:1B:AB:15:16:D9:D6:67:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4F657202F611EFA35EED0B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.120.0/21
Signature Algorithm: sha256WithRSAEncryption
26:11:fa:1c:b7:2c:8b:5c:8a:90:fa:c1:2a:e9:ab:03:f7:a4:
f8:3d:1a:30:05:39:18:81:a0:e9:54:68:9c:41:8c:be:73:86:
c8:eb:db:88:11:a4:e7:7f:32:2d:f8:f0:60:ea:db:05:5b:a0:
0b:98:d6:f4:12:98:0b:63:b6:5e:d0:48:d1:3f:a2:b3:dd:9b:
86:9a:7f:42:14:e6:28:ba:e7:4e:e2:fa:4c:74:61:a2:86:c6:
bf:05:a6:66:ba:97:8b:ed:98:dc:cc:ea:15:09:37:38:c4:31:
f8:ab:71:4f:6a:d0:03:75:e3:97:21:d4:fa:03:e2:ca:24:17:
cd:78:6b:43:7e:a8:86:8e:8e:5c:57:06:9a:39:a3:51:1f:ba:
b1:0b:d8:fc:83:68:14:e2:54:bf:a2:6b:a4:cd:7b:80:77:15:
09:c9:ba:f2:08:3d:5e:ee:21:89:8b:02:c2:70:82:3a:13:72:
c5:94:3a:e7:4c:04:33:8e:70:38:d2:d7:9d:de:7f:fa:7f:d9:
93:7c:a4:03:58:14:1a:f2:db:f0:d9:ff:5f:d1:f7:87:53:90:
c6:4d:68:ac:d0:b4:d0:64:8a:f9:2c:c7:85:db:30:2d:60:9e:
f0:cd:16:f6:94:03:51:0b:8b:91:57:13:3b:5f:cd:af:e3:52:
ec:63:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org