Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/727731224B2211EFBF6BEEB4762E951A.roa
File: 727731224B2211EFBF6BEEB4762E951A.roa (raw, json)
Hash identifier: bHm98W58NLs0FXM50shaSde3qmNZXr5sXcvr+CMf6yw=
Subject key identifier: 6C:B4:C1:2D:AA:AC:6E:8F:3B:78:1A:6A:84:A6:2D:CF:EE:E4:5E:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A060
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/727731224B2211EFBF6BEEB4762E951A.roa
Signing time: Fri 26 Jul 2024 07:41:19 +0000
ROA not before: Fri 26 Jul 2024 07:41:16 +0000
ROA not after: Mon 05 Aug 2024 07:41:16 +0000
asID: 147176
IP address blocks: 156.225.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41056 (0xa060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:41:16 2024 GMT
Not After : Aug 5 07:41:16 2024 GMT
Subject: CN=66a3531f-b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:b4:77:59:87:27:10:8a:82:de:fa:72:5a:
a8:69:b2:5b:4a:d6:d4:1e:c7:10:74:eb:25:49:d3:
60:a1:67:69:26:36:cb:f0:52:ef:21:41:af:c1:06:
2f:03:b6:c4:8b:d6:04:f5:76:94:d8:e0:f4:37:50:
1f:ab:f9:e6:e9:0f:e2:d7:a7:c5:8e:ca:b3:78:f6:
7f:62:4f:e5:2a:39:8c:6f:5f:12:27:4f:f5:7c:8a:
11:14:13:b0:2a:b5:1a:3b:dd:f0:95:a9:a5:3d:23:
96:2b:99:97:a5:5d:5a:06:72:23:a4:eb:b7:14:47:
13:89:7f:27:c3:04:f1:df:6d:4b:ca:48:be:93:c4:
04:9b:14:49:80:2f:2b:85:f7:06:c1:32:a9:e2:a5:
68:9f:e0:db:d1:7e:3a:ed:5e:73:af:ea:6f:5c:b6:
b9:c1:bb:3a:e5:83:0e:2e:95:19:88:39:d3:2e:f2:
f0:a1:34:6c:74:da:39:a2:94:af:1e:8e:ea:4f:93:
3d:54:ae:6d:63:aa:d0:57:a8:0e:9f:90:c3:b3:7b:
98:4b:d4:4a:5c:38:45:d4:a0:ac:cf:93:d9:ca:59:
bc:39:6e:8c:88:bd:84:80:28:08:6a:d0:7a:6a:ea:
c8:29:73:04:49:b7:bd:05:5f:b3:83:23:40:05:50:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:C1:2D:AA:AC:6E:8F:3B:78:1A:6A:84:A6:2D:CF:EE:E4:5E:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/727731224B2211EFBF6BEEB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:20:3f:22:29:ff:7e:2a:57:f3:6d:a1:af:7e:0e:93:05:82:
0c:a4:3c:b6:05:34:8f:49:3c:bb:e3:49:24:bb:8a:d7:d9:9b:
cc:90:25:67:1d:38:66:de:46:6c:90:b7:3f:43:63:14:bf:ec:
5d:eb:fa:ef:99:fb:40:f4:58:66:6d:86:05:80:61:6d:a2:fb:
2d:58:d8:b0:36:91:4a:e5:62:f1:ed:91:c4:25:00:5a:b6:a2:
b4:62:28:c9:5d:ea:ca:eb:04:30:b4:8d:91:6b:2c:8c:4a:a6:
71:03:64:32:83:21:d2:69:5e:8f:62:ec:76:4d:74:43:ee:20:
35:f8:c8:62:bf:92:0f:8b:73:6c:1f:0b:b1:f2:11:f8:0a:cb:
cb:42:3c:79:65:73:7b:5b:c2:f5:64:3c:46:5e:cd:9f:77:42:
69:be:50:0d:b4:f8:42:31:70:a4:9e:dc:fc:4c:8d:04:97:b3:
4d:9a:98:75:fc:b8:25:4f:a8:c6:fe:bc:c3:51:49:cd:c3:7a:
8a:16:aa:6e:94:cd:6c:68:ac:44:b6:27:da:33:65:52:b9:f9:
1b:b4:7b:8d:0b:c8:31:82:fc:53:45:ec:b4:ff:3a:91:c1:f6:
7d:07:0f:62:48:8e:03:57:68:8f:7f:c5:fd:f5:fb:6d:2f:33:
36:2f:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 10:16:19 2024 by rpki-client on console-ams.rpki-client.org