Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C77CF7E47D611EF82A31B4E762E951A.roa
File: 6C77CF7E47D611EF82A31B4E762E951A.roa (raw, json)
Hash identifier: WMLUYOmYUFemZUYVTOqykDMPESHldY8te1DanO9MtEY=
Subject key identifier: BF:7A:BC:E4:35:4A:13:56:89:CD:79:14:14:F7:65:2F:E5:28:90:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C77CF7E47D611EF82A31B4E762E951A.roa
Signing time: Mon 22 Jul 2024 02:59:34 +0000
ROA not before: Mon 22 Jul 2024 02:59:30 +0000
ROA not after: Fri 23 Aug 2024 02:59:30 +0000
asID: 44559
IP address blocks: 156.246.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40423 (0x9de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:59:30 2024 GMT
Not After : Aug 23 02:59:30 2024 GMT
Subject: CN=669dcb16-2750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:bb:e9:6a:88:bb:ff:55:f7:28:7e:9b:26:
e0:cb:68:6d:4d:49:25:8a:6c:70:f8:0f:2e:2f:a4:
a8:52:99:ea:45:ca:b5:e2:bd:80:4e:86:ba:9a:9d:
f5:ec:cf:43:d1:8e:e7:71:bc:4c:d9:98:32:af:ca:
a2:b3:7d:ce:62:7b:d6:c0:ea:d6:1d:5a:48:07:9d:
c4:dc:33:4c:da:55:76:29:d0:70:3b:19:6a:74:8e:
c9:17:55:85:dc:a2:5f:1c:9b:08:80:4f:aa:33:77:
a0:26:2c:2b:a6:32:54:0a:b6:05:0d:7e:05:73:02:
87:c5:8c:74:0a:cb:2b:3c:4e:2c:f6:ed:ac:1c:fc:
dd:80:5c:6d:0e:24:29:f0:f5:83:98:37:e5:9e:78:
13:e9:16:f5:a6:49:11:cb:34:5c:6b:88:50:98:0c:
d7:d2:b3:3d:53:c7:76:22:66:75:10:b2:ff:d3:c0:
be:8b:79:41:26:a4:0a:f2:55:52:8c:a3:84:5a:a5:
7a:13:ff:76:84:1d:7e:00:f4:15:af:25:38:f4:13:
44:79:60:71:15:2b:38:ee:65:d8:ee:19:d1:3f:97:
4a:22:7d:bd:7f:d9:29:fc:85:81:fd:84:ee:34:1b:
c9:0e:2b:8e:22:b7:fe:ad:2d:61:ee:90:c2:34:57:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:BC:E4:35:4A:13:56:89:CD:79:14:14:F7:65:2F:E5:28:90:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C77CF7E47D611EF82A31B4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8b:41:22:ec:ca:44:d9:a8:e7:14:90:0d:d5:47:b0:6e:41:
07:23:b8:0e:91:64:7c:a8:de:86:7f:fa:3a:2c:3a:31:68:71:
26:fc:9e:37:ba:d2:e1:7c:27:76:a9:08:6e:c0:31:fd:2a:ff:
d4:29:1b:2f:da:f6:f2:18:4e:96:6f:cf:ab:5f:e1:92:00:e5:
fc:45:74:da:a6:78:da:d1:b9:09:1e:9b:c5:9b:83:dd:67:7e:
f7:28:5f:4b:66:b7:3f:69:71:5a:61:13:ee:4a:cf:42:68:c4:
5d:f2:c0:ff:9d:54:25:8b:8e:26:7d:41:7f:c3:b1:c7:e3:5d:
f4:61:e1:1d:bd:2d:fb:b5:ad:b6:a5:d0:be:9a:b0:a1:a5:b6:
6d:8a:e3:98:da:d4:a7:7a:f6:24:cf:e5:14:ca:29:10:e7:fa:
c8:7f:de:5d:1b:62:e0:3b:fb:a7:96:ab:c8:b8:84:d9:9a:30:
67:76:29:6e:d6:b0:eb:06:cd:c4:94:ce:70:74:d5:b3:91:ef:
76:c3:51:92:01:d5:12:f2:ff:6f:2a:57:fa:bc:a2:5f:84:ed:
ec:ec:27:03:05:68:58:c0:8f:1d:e1:d7:0a:79:42:07:3d:a9:
56:80:a8:37:cb:09:8d:b4:d4:5c:94:74:9d:ea:24:2e:38:a1:
ff:8b:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org