Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7130FC844A6511EF896DF0B2762E951A.roa
File: 7130FC844A6511EF896DF0B2762E951A.roa (raw, json)
Hash identifier: 37Mdzc/fWw4JWmbI5ql/pJHrkHwnD+ve5cZcnVD6dtc=
Subject key identifier: 46:A2:DE:9A:51:EA:1D:75:DD:7F:C5:71:A9:AE:B9:19:F5:44:B6:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7130FC844A6511EF896DF0B2762E951A.roa
Signing time: Thu 25 Jul 2024 09:08:22 +0000
ROA not before: Thu 25 Jul 2024 09:08:19 +0000
ROA not after: Sat 03 Aug 2024 09:08:19 +0000
asID: 22773
IP address blocks: 156.232.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40959 (0x9fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:08:19 2024 GMT
Not After : Aug 3 09:08:19 2024 GMT
Subject: CN=66a21606-3601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:b9:a3:63:b9:27:45:b2:8c:52:6f:88:e4:
25:b9:1b:82:e5:0a:08:ab:30:77:99:6e:b1:25:ca:
fd:29:04:5c:a7:8b:62:53:76:37:a8:bd:fc:2e:c1:
63:53:b6:e6:58:e0:16:0a:2a:d2:b6:2c:e0:5d:ec:
55:ac:ec:d7:0a:60:b3:38:8f:99:98:32:42:da:2f:
20:bf:23:ec:52:6a:18:54:49:a6:74:29:d3:6d:b1:
66:45:5d:8a:a3:b2:43:05:c1:85:cd:a3:53:a1:fc:
fa:4c:92:b7:71:ec:ec:08:eb:5e:f9:85:d5:25:50:
2f:75:72:0f:75:75:c7:12:c8:21:a8:a1:70:6e:ad:
80:88:69:3a:50:94:d9:dc:84:8d:d4:15:27:3d:73:
2b:a2:48:a9:01:5a:b8:53:13:4b:2b:d3:9e:1b:24:
d6:cb:2e:8e:ad:97:19:10:cc:43:35:a7:a1:1e:32:
9c:96:d6:9d:bc:a7:f1:f2:37:76:cc:b1:61:39:13:
b9:da:ef:33:55:0e:cc:32:8b:4e:a8:fe:6b:28:69:
7e:a2:92:d9:83:57:25:54:89:a7:ac:bf:1c:70:a9:
fe:f1:64:4e:46:36:15:05:a9:fd:c4:42:0a:04:f8:
af:c0:2b:b2:f4:4b:95:63:bd:37:37:ef:d7:ff:d8:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A2:DE:9A:51:EA:1D:75:DD:7F:C5:71:A9:AE:B9:19:F5:44:B6:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7130FC844A6511EF896DF0B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.0.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c4:1c:f3:e5:40:23:9e:e8:8c:17:b2:f5:fb:ec:a1:1a:7f:
01:19:55:57:ce:df:3d:6c:d8:f2:02:84:59:16:19:8c:9c:91:
75:ea:a5:24:22:c4:dd:f5:2d:ba:5c:ca:4b:11:59:6e:db:3f:
a1:90:49:57:db:67:7f:a2:ca:70:18:7d:c1:40:6a:3a:2b:75:
9f:80:fe:97:4a:ab:27:08:0c:b6:40:24:bf:07:cc:c1:63:23:
ef:8e:3e:74:21:a6:49:46:cc:b8:a8:4e:e1:7e:33:da:30:e7:
86:71:b3:81:ae:45:bb:b0:7f:d1:31:70:0b:cb:2a:d6:01:7f:
63:95:11:75:f9:4f:ad:16:bd:14:ed:97:dd:0e:92:ac:e0:30:
50:44:33:f9:8e:34:74:ea:db:dd:c9:88:dd:98:0a:87:f5:43:
37:88:d2:8e:8c:9e:e5:7e:76:4e:a1:d3:9a:12:61:5a:22:00:
d8:18:dc:b5:ad:c5:da:d7:e8:01:11:ac:b5:0c:53:9b:0a:93:
4b:d7:d7:53:0c:05:fa:b6:19:bd:87:fc:69:e6:52:6e:e5:f6:
6c:f9:a3:e6:b9:6e:01:71:09:89:01:77:c3:28:8d:e7:09:f7:
34:81:53:a4:f5:e6:cd:f0:ae:24:d0:eb:0c:10:0b:eb:ad:6d:
ad:fb:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org