Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/709CF88C3E9811EF8E5B4C46762E951A.roa
File: 709CF88C3E9811EF8E5B4C46762E951A.roa (raw, json)
Hash identifier: OWzpYIPzwrMW1W/4p/X8Z+4I46iJQyel4jIa0/s5te0=
Subject key identifier: 72:27:31:36:40:A0:56:4C:09:2A:31:0D:3D:24:37:E8:75:D9:FE:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/709CF88C3E9811EF8E5B4C46762E951A.roa
Signing time: Wed 10 Jul 2024 08:43:12 +0000
ROA not before: Wed 10 Jul 2024 08:43:09 +0000
ROA not after: Fri 02 Aug 2024 08:43:09 +0000
asID: 141883
IP address blocks: 156.255.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39506 (0x9a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:43:09 2024 GMT
Not After : Aug 2 08:43:09 2024 GMT
Subject: CN=668e49a0-04b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:83:f2:fe:be:f5:8e:8d:60:d3:b2:23:34:
c2:52:23:db:48:65:43:40:e2:16:31:55:6a:2c:c9:
b0:78:40:df:22:5a:8c:12:2a:f7:18:4c:f1:a5:59:
40:e6:f7:9e:91:2e:a1:82:bf:de:48:3b:cf:b4:81:
e4:4f:e3:51:c7:90:cb:cc:c7:ce:85:4a:7a:18:2e:
8c:ed:9b:6f:4b:5e:38:b5:63:93:4a:37:24:ab:b0:
4d:41:2c:d8:ce:04:c2:44:bb:9d:42:01:05:7b:3c:
fe:57:9b:7e:ad:ba:e4:a4:50:5f:c7:53:e1:fb:74:
f5:58:38:ad:4e:0d:3c:4a:3f:19:81:c4:f4:03:26:
09:c6:11:11:25:61:76:85:54:f0:1f:2f:bb:a2:ef:
af:d8:2d:b2:b8:6c:e0:db:12:57:b8:bf:63:8b:81:
e1:d2:75:87:f3:39:ca:8a:ee:1c:f9:74:37:9f:33:
43:0e:ba:88:a0:8b:ce:a8:4f:0a:2b:4d:f3:01:59:
41:b8:f2:7a:80:32:b6:ba:53:ba:82:e4:d8:ad:1e:
2a:ac:35:53:83:e3:36:76:70:01:03:0b:b2:6e:a9:
e8:43:99:29:cc:4f:7e:4c:2e:d1:52:98:73:ba:4a:
27:2b:be:99:c1:9c:cb:0d:f8:1d:ab:92:68:44:ee:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:31:36:40:A0:56:4C:09:2A:31:0D:3D:24:37:E8:75:D9:FE:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/709CF88C3E9811EF8E5B4C46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e1:09:7e:9a:d1:59:ab:c4:67:07:3c:9a:ee:63:0f:82:52:
6d:e6:3a:3a:d0:fd:3e:c9:79:f3:b6:d9:17:05:23:37:e1:5d:
67:7a:c5:c6:97:e9:a2:6b:3b:d7:91:38:5b:77:11:6c:66:10:
34:bb:35:7e:ec:58:cf:4a:5f:cd:ca:6d:38:74:1e:b5:ef:59:
ff:de:b9:44:e9:dc:50:cb:2e:5e:f8:8b:05:9e:4b:72:f3:24:
80:e3:3e:85:7d:77:c4:9e:aa:9c:d2:a0:5b:a3:16:d7:42:bd:
d5:ae:90:ef:3f:93:db:2f:e5:8f:be:73:39:28:34:42:04:f0:
20:47:a0:3c:df:98:88:be:64:e1:fa:4b:3c:fb:78:d1:05:bb:
5c:48:bf:7d:36:04:9b:24:9c:c8:be:30:3f:38:4e:65:5d:65:
c2:04:5f:d0:1f:dc:63:97:d3:f8:90:20:51:38:fb:9e:9f:aa:
33:ea:42:da:da:50:28:12:7a:d9:cc:75:39:9d:1f:90:c1:71:
4a:11:b5:c1:c3:a4:c2:60:1a:dd:2c:53:22:f7:45:e1:dc:4e:
e5:ab:f2:0e:1f:8e:1d:c2:4d:f6:4d:dd:2d:2d:87:18:9e:a7:
5c:dd:1a:0e:6b:c2:9b:7b:7b:4c:8a:fb:ff:19:aa:c7:82:23:
b7:78:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org