Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE5FA3648E311EF85A0A870762E951A.roa
File: 6CE5FA3648E311EF85A0A870762E951A.roa (raw, json)
Hash identifier: FAec/k0J2gaKt5e8rkAjLqxoYR0+6tioLeFNQhqcdXY=
Subject key identifier: DD:A4:BE:8A:96:68:46:72:7A:59:DB:01:9A:57:4C:FF:6A:18:BB:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE5FA3648E311EF85A0A870762E951A.roa
Signing time: Tue 23 Jul 2024 11:05:09 +0000
ROA not before: Fri 26 Jul 2024 11:05:06 +0000
ROA not after: Fri 02 Aug 2024 11:05:06 +0000
asID: 204957
IP address blocks: 156.225.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40642 (0x9ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 11:05:06 2024 GMT
Not After : Aug 2 11:05:06 2024 GMT
Subject: CN=669f8e65-dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:03:d9:92:8b:c2:dd:69:0b:74:87:88:d2:
6d:0c:61:f1:8e:ca:dd:04:67:46:99:da:2d:8d:05:
c6:e4:b4:31:32:2c:5e:31:80:af:37:ed:76:fb:5f:
a4:e7:cc:0c:86:46:c8:fd:7d:d3:54:2c:f8:0b:68:
ab:72:46:9c:4e:76:de:d3:14:10:f6:31:a9:b9:d6:
c1:a7:7e:75:21:85:f2:3f:f4:46:0c:2a:2e:00:13:
a0:fb:00:73:13:3e:87:b1:5f:cb:f7:f7:68:24:af:
73:77:a3:7f:1f:18:4d:96:fb:53:7e:50:a3:e4:80:
ef:6a:74:3a:6b:a7:b6:a7:21:c1:ac:b4:dd:18:ab:
f0:cc:b4:eb:19:e7:f3:4b:dc:0a:1a:53:a7:07:62:
a1:75:02:df:c0:48:c6:e9:1b:2c:62:1b:ef:32:bd:
1d:3d:e0:0c:9e:9c:85:5f:06:be:07:01:6d:ab:1b:
a3:a8:03:ac:d0:c3:36:11:d7:a1:62:f4:86:01:59:
39:0a:7f:01:61:eb:6c:0d:d9:8b:2d:a7:a8:3d:c4:
91:37:4d:c1:75:8b:fa:3f:45:10:2e:7c:69:6e:31:
17:60:f3:01:28:64:c8:ff:41:a6:b6:d3:0f:70:f6:
39:eb:d7:fa:a9:12:de:a4:6d:0d:9a:38:93:a6:3d:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:BE:8A:96:68:46:72:7A:59:DB:01:9A:57:4C:FF:6A:18:BB:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE5FA3648E311EF85A0A870762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b0:24:24:4c:0c:8b:d0:0f:a9:c8:cd:fd:05:ae:79:95:6f:
70:45:53:62:99:49:d5:9b:1a:b4:2f:3b:53:3c:5d:a8:0e:dd:
fd:52:02:7e:89:0b:c6:74:9b:4d:86:91:87:70:ee:f3:5c:67:
1f:d6:76:04:fa:8b:ce:48:65:26:4d:b3:5f:37:56:84:44:72:
7f:15:67:b8:4c:30:68:33:ae:2e:55:0d:e4:2f:53:2c:b0:00:
93:ad:1b:da:4d:fb:a9:a6:d7:59:d4:e6:6d:8b:4a:68:4d:df:
c3:ab:46:b4:88:19:bd:7a:83:51:77:c9:94:7e:75:ed:d4:2c:
85:95:a8:24:7e:1c:9c:c3:69:2d:3a:98:11:19:14:3c:14:b6:
ed:18:9d:10:15:4f:cd:62:6b:cd:f3:1e:f9:3f:9f:3e:f7:0c:
8b:0b:bb:3b:27:66:99:67:cd:b3:be:4a:c5:62:67:03:0b:08:
63:68:38:fb:70:18:1c:23:1c:9b:a3:54:b6:c6:42:30:b0:37:
f7:e6:45:d4:b7:be:6f:5f:d4:5f:0d:1d:84:10:cf:78:fd:c4:
8d:cc:55:a6:ea:c0:42:08:25:b6:ae:b3:8a:30:c9:f6:5a:52:
dd:83:7e:9f:98:43:e4:26:3c:55:d6:52:f8:eb:1e:d0:f8:01:
05:e0:35:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:24 2024 by rpki-client on console-ams.rpki-client.org