Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74A3694C48D011EFBADBED6F762E951A.roa
File: 74A3694C48D011EFBADBED6F762E951A.roa (raw, json)
Hash identifier: knEtg8+f5LSKfsY9EYx/kCGfnEqjZAv8a1UYYwn9yZY=
Subject key identifier: BB:BA:7F:97:39:91:2D:94:8A:1C:CD:98:71:F7:41:4C:D2:58:EA:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74A3694C48D011EFBADBED6F762E951A.roa
Signing time: Tue 23 Jul 2024 08:49:22 +0000
ROA not before: Fri 26 Jul 2024 08:49:18 +0000
ROA not after: Fri 02 Aug 2024 08:49:18 +0000
asID: 44559
IP address blocks: 156.236.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40616 (0x9ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 08:49:18 2024 GMT
Not After : Aug 2 08:49:18 2024 GMT
Subject: CN=669f6e92-b764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:6e:bf:33:9b:2f:e0:d0:ca:0c:59:f9:9d:
74:34:a2:27:0c:15:b1:aa:77:25:ed:95:b4:5f:d2:
c6:37:89:99:92:f2:a8:8f:89:3f:7f:1d:87:30:d6:
83:c8:f3:36:a2:59:08:29:99:a2:db:e2:17:c0:f3:
5c:8a:87:1b:aa:ba:4b:02:8b:5b:28:32:91:a8:42:
a3:5f:f3:d1:2f:e1:ec:11:36:1e:ca:72:9c:d8:8a:
15:39:ab:c6:4a:74:dc:6e:66:b6:d0:99:79:0f:a9:
53:31:dc:73:fe:a1:b5:43:6e:a9:ed:97:1a:7f:fa:
50:ba:e6:74:43:a0:9b:1f:31:9a:4e:c4:a5:70:6f:
64:43:b1:da:a4:d1:41:13:d9:79:ec:53:24:ef:6e:
5e:92:ca:c3:66:b5:b2:34:43:5f:d5:49:dd:89:27:
e3:5d:b4:27:84:2f:57:07:b6:1a:26:c0:b2:35:81:
9b:b9:7c:3c:19:bc:4d:9f:1b:5e:0e:1c:22:26:2c:
64:a3:27:da:c2:c1:b1:33:44:73:4c:ca:80:da:d7:
32:ca:73:8a:4d:84:46:3c:7e:65:f2:58:86:37:c0:
93:7c:56:36:1a:06:9d:a5:a4:de:c2:07:8a:c5:67:
ff:16:b8:06:1e:d6:10:75:e9:c7:fa:80:f1:1c:50:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BA:7F:97:39:91:2D:94:8A:1C:CD:98:71:F7:41:4C:D2:58:EA:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74A3694C48D011EFBADBED6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.9.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d0:e0:59:af:fe:0c:5e:24:81:b0:32:97:2d:c8:9b:b5:86:
f0:b9:f0:06:98:22:d6:f3:f7:9f:c7:56:1e:d7:4c:dc:4c:83:
4b:65:89:55:12:88:1a:d4:f1:10:9d:c2:c1:b1:7f:35:62:fe:
5f:97:36:94:bf:87:5b:81:fb:d0:d1:49:9f:e0:3e:01:9e:d2:
1c:b6:64:3e:99:a3:45:ad:26:7a:95:71:fb:1e:73:37:43:dc:
14:92:6f:3e:3e:c8:d7:48:e2:5d:d5:d2:58:db:05:3d:e6:67:
d2:f0:1e:a6:79:4a:6f:ce:ce:da:d5:1e:bc:0e:c6:83:c1:fe:
a1:00:33:2a:24:4c:f4:54:b9:eb:e9:7f:a9:73:a9:42:5e:75:
e8:ff:db:68:8d:7c:28:e6:83:7b:b3:b1:89:f9:00:d9:77:ba:
c8:aa:fa:3e:71:6f:5f:b7:49:b4:2a:6c:9a:fd:1b:88:88:c3:
06:20:21:49:d3:90:29:a2:7e:11:d4:ed:81:f2:7c:5a:92:8c:
9a:c8:13:bc:d7:43:92:89:45:93:af:5c:3a:99:65:47:4d:bf:
a5:7e:d1:c2:29:7f:fb:31:f5:f4:9f:98:b9:f7:65:98:d5:b5:
33:94:86:8d:f3:9f:2e:e1:9f:d6:7c:1a:6e:57:ae:80:07:5d:
d7:06:5f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org