Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5079AE4A6F11EFB392AE75762E951A.roa
File: 6E5079AE4A6F11EFB392AE75762E951A.roa (raw, json)
Hash identifier: RptYfoMT2PlLdN+9UjhSg31wPTJwDPGC1JDyP53KDlQ=
Subject key identifier: F4:9E:31:74:C1:CE:43:BE:1A:C3:89:C9:24:1B:71:1E:5B:0B:34:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A02F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5079AE4A6F11EFB392AE75762E951A.roa
Signing time: Thu 25 Jul 2024 10:19:52 +0000
ROA not before: Thu 25 Jul 2024 10:19:49 +0000
ROA not after: Sat 03 Aug 2024 10:19:49 +0000
asID: 212238
IP address blocks: 156.235.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41007 (0xa02f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:19:49 2024 GMT
Not After : Aug 3 10:19:49 2024 GMT
Subject: CN=66a226c8-4d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:04:c6:aa:f0:af:6e:2e:da:54:42:d0:cc:
5e:bf:f0:07:a2:38:27:6b:c3:76:a6:e1:59:84:89:
a6:90:83:c0:9e:c8:4b:16:a0:fd:99:a8:53:51:37:
66:9b:fc:e3:ea:4d:e2:30:6c:10:b5:71:13:5e:41:
09:64:e8:c6:9b:0c:54:07:f1:3d:34:f7:fc:62:42:
2f:45:f9:ee:cf:8e:53:26:76:e2:ba:5f:da:ab:5b:
71:fc:ea:7a:70:c3:aa:dd:15:42:72:7d:4a:91:6d:
71:8c:51:e3:00:89:25:0a:5f:06:33:a2:cf:66:2f:
03:0f:e5:68:97:dc:e7:83:88:83:7e:1f:f2:03:36:
2e:0b:e0:40:fd:85:6e:86:ac:cf:6b:d2:42:50:d0:
22:76:6d:52:ff:e9:de:51:8d:2f:02:76:b1:27:6b:
18:84:e7:15:f2:eb:43:bf:0a:7c:d6:05:4b:a6:85:
63:50:22:7a:37:df:30:01:d5:45:ee:76:92:41:94:
3a:0f:1a:40:f1:09:f0:b0:b0:9a:7f:c0:a1:70:c6:
9b:67:5e:ef:e8:49:7d:11:53:0c:05:02:26:31:ee:
b8:e8:9c:d3:80:73:c5:e3:1b:4b:59:ed:ac:9b:09:
70:eb:aa:06:11:60:65:2b:c1:07:ef:8a:fa:cc:60:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:31:74:C1:CE:43:BE:1A:C3:89:C9:24:1B:71:1E:5B:0B:34:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5079AE4A6F11EFB392AE75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.53.0/24
Signature Algorithm: sha256WithRSAEncryption
36:33:f2:d1:b8:af:3d:fa:33:0f:fb:21:75:e5:1d:7d:98:85:
f2:b0:a1:76:43:b1:26:e0:35:86:22:a6:53:b9:ab:d8:27:ac:
82:d1:fa:89:06:cf:2c:55:f0:81:ef:e0:76:1d:d6:93:a5:d8:
51:e9:9d:1c:48:1a:a5:4d:fc:2c:76:67:bf:46:43:14:08:48:
66:29:cd:46:56:be:f4:7f:bd:ee:c2:97:1d:ac:68:82:25:12:
25:18:43:c4:e0:d8:9a:89:55:12:2d:97:75:ac:0f:1a:e4:5d:
c5:b9:f9:4e:f6:18:2e:65:de:2c:42:be:77:4b:15:4b:bb:db:
dc:c8:07:d3:c5:9d:17:cd:a8:21:80:07:63:cb:f3:9d:b1:1e:
68:19:c7:b7:74:db:a6:52:2e:3a:87:93:27:74:da:e5:40:0b:
fd:ed:17:ec:0b:10:1f:e6:7e:11:fc:84:8d:a9:3a:ef:38:91:
60:05:2c:ee:43:53:38:29:b8:44:94:58:ed:22:3b:28:06:08:
25:82:9c:5a:11:e9:75:93:42:79:6b:2e:1e:e5:da:f4:8e:38:
77:a8:9b:d5:bd:e5:6b:d9:7c:61:50:41:6f:6c:dd:c0:2d:b3:
d9:1c:e7:03:df:b0:91:8d:d1:13:fb:fc:ca:a8:64:f3:b6:c9:
0c:be:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org