Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D456F4E47D411EFBADA6DBE762E951A.roa
File: 6D456F4E47D411EFBADA6DBE762E951A.roa (raw, json)
Hash identifier: 4c4modiLI1geHT9BOSvMrL+eXOu2V+27aQKMgCNo1ck=
Subject key identifier: 32:CE:03:DA:8C:75:8E:9F:26:6C:A8:A5:DF:BB:5A:9B:41:AC:4B:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D456F4E47D411EFBADA6DBE762E951A.roa
Signing time: Mon 22 Jul 2024 02:45:16 +0000
ROA not before: Mon 22 Jul 2024 02:45:13 +0000
ROA not after: Fri 23 Aug 2024 02:45:13 +0000
asID: 44559
IP address blocks: 156.246.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40391 (0x9dc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:45:13 2024 GMT
Not After : Aug 23 02:45:13 2024 GMT
Subject: CN=669dc7bc-c087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:92:e9:6b:c4:8c:f9:32:3c:1c:b4:3f:5d:
5e:65:cb:90:43:af:56:53:6a:e2:bf:a9:1f:83:85:
e9:ab:cb:13:dc:30:81:c7:74:cc:da:d0:9e:3f:3c:
00:8a:fa:38:cd:08:46:3d:47:ff:b8:2d:c7:9b:bf:
fb:73:63:b4:19:fa:64:cf:ac:4c:75:90:39:a2:b2:
cd:96:a0:a3:fa:37:74:3c:53:b5:d9:74:bf:ab:b9:
ad:ad:a5:1f:85:7f:c6:f4:1c:d6:d4:a1:8f:65:d3:
0b:29:4f:bd:7d:37:ba:57:58:54:ff:f4:56:a0:1a:
66:50:2b:9b:cc:b6:9f:95:d6:36:a4:4c:13:1f:65:
a5:8c:61:73:fd:9c:eb:a2:22:55:5c:d9:50:57:0d:
85:e1:c2:ba:8d:8a:36:a9:75:8d:fc:50:33:7d:46:
bb:b8:97:f3:79:ca:bb:0e:d4:cf:6a:fc:cd:d2:fe:
93:96:32:de:19:14:d5:9e:60:a8:23:0b:5d:9d:8c:
aa:8b:b1:b1:8e:95:cc:55:49:97:fb:86:76:d2:67:
fc:18:de:1d:6a:02:b3:f1:50:27:f3:ca:68:e5:7c:
bb:26:46:43:fa:cd:b3:d9:85:8e:f8:7a:1c:ba:68:
ca:a0:84:d4:58:a3:65:52:a4:64:31:ae:8b:c5:28:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:03:DA:8C:75:8E:9F:26:6C:A8:A5:DF:BB:5A:9B:41:AC:4B:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D456F4E47D411EFBADA6DBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:93:8d:b8:70:b4:0e:b7:8c:1f:e9:5d:38:e2:12:0b:c8:b4:
ff:bd:ae:e7:20:ee:4c:02:c1:ba:22:22:15:71:9f:b1:db:39:
2f:1a:7a:20:15:1a:b0:58:a3:9f:eb:1f:2d:d1:8c:f0:9e:f9:
a9:ee:4d:67:f3:61:d9:fc:29:77:a4:9c:95:8e:85:5b:2c:95:
56:87:4a:f4:a2:10:ed:62:55:e1:85:9f:41:07:54:ca:f8:be:
ec:41:b8:d8:2c:bb:04:6b:d9:1a:23:5e:3e:05:64:d7:28:15:
3f:f8:f4:83:97:a9:41:9d:35:7e:a5:ef:a6:24:03:14:cb:1b:
ad:7d:52:2f:9f:bf:1d:64:f7:05:a7:55:81:67:c3:ab:17:53:
cb:a0:05:95:46:2f:1b:6b:24:82:d5:01:b5:6a:dd:ea:93:58:
da:7d:c6:b4:b2:4d:c4:e7:be:91:99:cb:b4:e3:71:87:14:c7:
31:83:f8:21:80:81:6e:5c:b7:0e:a3:ba:86:8a:d3:06:65:9b:
77:61:88:2d:80:19:3d:78:06:65:11:a9:f7:66:ec:fd:21:40:
d2:85:76:f5:84:c7:ad:b2:d6:60:8a:70:32:20:31:77:3d:f9:
fb:f9:af:8c:70:a6:d3:9e:f7:8c:80:2e:e4:e5:8c:ee:d5:a7:
cb:af:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 07:13:26 2024 by rpki-client on console-ams.rpki-client.org