Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B84BAAF0C311EE8117CC86775412E6.roa
File: 75B84BAAF0C311EE8117CC86775412E6.roa (raw, json)
Hash identifier: dpbFKKEjC22m40h5zHXXipRfVpaODMkl67CaBuribyM=
Subject key identifier: 9A:D1:80:3E:18:6D:8A:C1:9D:20:03:67:4E:25:23:79:5F:0F:8F:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 813E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B84BAAF0C311EE8117CC86775412E6.roa
Signing time: Tue 02 Apr 2024 07:34:38 +0000
ROA not before: Tue 02 Apr 2024 07:34:35 +0000
ROA not after: Mon 29 Apr 2024 07:34:35 +0000
asID: 139646
IP address blocks: 156.246.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33086 (0x813e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:34:35 2024 GMT
Not After : Apr 29 07:34:35 2024 GMT
Subject: CN=660bb50e-f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:b9:69:f0:be:3e:bb:ce:b6:98:d1:45:19:
f8:2a:95:74:f4:b8:83:fa:74:f3:56:b5:80:b1:ce:
4b:a2:cf:5c:2a:06:53:02:24:72:5c:d4:5f:88:dc:
05:e8:07:00:c6:da:7a:bc:38:27:bd:ca:74:c2:04:
dd:50:ad:4d:a3:d9:69:83:10:98:56:52:ed:cc:d5:
e5:7b:ca:59:6a:ba:50:ca:dc:ec:92:81:13:39:99:
30:60:3d:cb:c9:f4:39:ba:cc:e5:ac:ad:8d:3e:2d:
09:85:be:e0:fb:e0:3a:0b:45:cb:4f:9b:64:0b:22:
d5:82:7f:a7:6f:0d:a2:2e:91:17:0f:b5:ce:30:99:
17:a4:ad:e0:c0:d6:03:ed:df:34:0c:ad:28:af:ba:
b7:de:a7:d5:bf:a3:cd:96:6d:0c:0e:7c:34:c8:4d:
4e:aa:55:0a:35:4c:6b:74:1e:a7:e4:be:63:b6:7c:
c1:ca:07:f7:9b:13:89:06:2e:00:97:18:3e:af:72:
35:c4:81:26:e5:eb:1b:df:9e:e4:e2:04:35:73:88:
80:bd:f8:da:98:99:75:7d:46:29:95:7d:e4:68:2e:
ac:b6:5b:2a:ca:be:e5:34:4a:6f:f0:ae:03:f8:4e:
11:73:a8:51:3a:b7:1a:0b:d8:cb:23:f5:c3:9c:84:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D1:80:3E:18:6D:8A:C1:9D:20:03:67:4E:25:23:79:5F:0F:8F:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B84BAAF0C311EE8117CC86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/23
Signature Algorithm: sha256WithRSAEncryption
24:72:15:ad:46:c1:45:0f:71:d9:2e:7c:1f:c5:74:f0:85:00:
79:43:3a:29:a6:a7:4c:34:eb:84:59:80:39:ad:63:a9:5d:79:
04:0d:b2:5c:33:5a:51:5b:d8:b9:b5:b1:5a:c6:71:7e:24:85:
dc:8b:83:db:3d:64:f0:77:0d:e5:f7:c7:16:ef:03:81:bd:4b:
d6:69:38:17:f8:f2:c6:af:aa:3b:e9:3c:39:49:15:82:d0:da:
76:49:e5:fc:04:05:e2:85:6c:df:98:de:0b:2b:3c:55:2d:2c:
6c:6e:e0:d2:f9:48:6b:63:54:c8:f1:9a:fa:99:4b:c6:c3:e3:
ff:84:3d:f6:59:86:97:8f:e0:e0:e8:d7:cd:36:f7:a0:4f:29:
06:ad:e6:75:c7:51:54:ab:93:97:e9:5d:0b:b5:93:a6:9d:0b:
dd:85:21:19:81:18:41:c0:e1:9d:78:af:c9:73:ed:21:89:e6:
b7:79:10:97:20:1a:af:bc:1f:2d:21:63:d3:3a:8a:24:6a:91:
c9:ab:4a:a3:bd:fe:94:8a:56:2f:1d:c4:06:26:be:23:6b:d1:
1c:33:a1:23:16:0e:27:85:fd:06:0d:29:74:dd:8b:e7:e1:de:
80:75:7e:66:35:0c:20:9d:a7:d0:18:44:82:59:51:64:ef:25:
16:54:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:21 2024 by rpki-client on console-ams.rpki-client.org