![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779B6C10361711EFA03588B6762E951A.roa
File: 779B6C10361711EFA03588B6762E951A.roa (raw, json)
Hash identifier: rttAPnKnM2zc5+Wgoo29dIOv9vImXMlKbcJPsIIvIIA=
Subject key identifier: A8:4B:01:7F:E9:20:E0:24:8A:0E:E2:6E:06:DA:DB:A6:41:93:39:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9698
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779B6C10361711EFA03588B6762E951A.roa
Signing time: Sat 29 Jun 2024 12:59:49 +0000
ROA not before: Sat 29 Jun 2024 12:59:45 +0000
ROA not after: Tue 27 Aug 2024 12:59:45 +0000
asID: 134548
IP address blocks: 156.240.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38552 (0x9698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 12:59:45 2024 GMT
Not After : Aug 27 12:59:45 2024 GMT
Subject: CN=66800545-fd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:4b:25:03:fe:5d:61:60:b2:a3:96:da:c3:
99:87:38:af:33:87:84:9a:80:90:f6:d1:08:b5:65:
95:36:2e:fd:31:57:39:f2:77:22:a9:10:77:50:47:
4f:16:b2:9e:52:9d:0e:c0:b2:ff:8a:ac:53:dc:43:
46:4d:a5:23:8f:92:34:e0:54:b9:bf:1f:0e:34:41:
81:d3:09:d4:98:27:85:99:be:81:09:0c:6a:3b:d0:
e5:78:0d:0c:6d:fa:55:bb:d5:c7:93:bb:d9:f1:88:
b8:91:78:52:c8:80:08:c8:11:9e:72:62:40:30:bf:
a6:f0:ca:bd:f9:14:ae:f9:05:08:43:cf:5a:dd:e4:
68:99:b0:52:6d:c4:22:ce:fb:6a:ea:96:8a:8f:f4:
28:8c:49:b4:fa:ac:49:bf:0b:1c:51:e9:8d:00:f8:
c5:81:d8:b9:58:2c:15:3c:de:6d:47:c6:ef:59:ee:
f5:d6:a7:19:02:f0:24:9a:24:f7:b9:05:f4:8d:e0:
ec:53:fe:57:2d:9a:29:50:b0:8d:3b:c7:f8:1f:08:
6c:73:eb:a2:1d:62:86:59:9e:66:2b:1f:51:96:73:
d8:45:a3:9d:2c:47:6b:bf:4a:24:ea:d6:41:47:b1:
04:40:ce:50:65:8d:c7:b5:85:19:04:42:d1:11:44:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:01:7F:E9:20:E0:24:8A:0E:E2:6E:06:DA:DB:A6:41:93:39:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779B6C10361711EFA03588B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.255.0/24
Signature Algorithm: sha256WithRSAEncryption
84:70:ce:df:d2:39:e5:dd:04:57:e7:c6:7f:1a:ac:e7:cb:da:
96:68:0d:c7:3e:cd:e4:44:d3:b1:1d:d5:62:21:ea:d9:ff:74:
13:33:a5:04:b1:2b:d0:1c:f8:ad:15:fb:de:78:c0:9d:f1:89:
b0:37:be:a1:b4:d2:ac:1f:44:25:01:84:a5:71:2e:34:be:ef:
6c:74:15:f2:bd:e8:3e:47:d2:27:e2:c1:59:58:73:31:0f:e3:
18:47:6b:04:c6:b3:79:91:8e:b2:ee:6d:d0:9f:c9:89:dd:64:
d1:33:3f:81:49:ef:6b:fb:45:37:19:35:17:4e:6f:a6:53:eb:
9e:74:5f:3a:8a:63:e8:f4:7d:80:0e:80:ba:93:0b:a0:10:ad:
5f:85:4d:77:d8:6d:c1:55:c8:d2:07:61:85:8c:da:7a:4e:72:
1e:82:6b:33:12:14:12:08:f0:51:aa:ce:9f:2c:45:29:20:12:
03:b5:6b:a5:cb:2c:9b:a3:14:3c:c5:24:0c:f1:84:45:84:dc:
67:67:0f:38:a4:cc:31:56:4b:41:84:74:95:21:2e:56:4f:c3:
af:f8:7a:70:c2:ea:d0:46:aa:63:73:5b:72:5d:33:26:17:1f:
32:7c:1b:43:24:06:25:e8:20:d9:39:f3:9f:58:e1:a1:6e:c9:
1b:c3:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 04:47:13 2024 by rpki-client on console-ams.rpki-client.org