Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BB1C3DA4A5D11EF988E377B762E951A.roa
File: 7BB1C3DA4A5D11EF988E377B762E951A.roa (raw, json)
Hash identifier: wTEkKi01OPDfQx7fHWiISFYKyeyV9qQFDwqxUO6y/W4=
Subject key identifier: 35:F7:E3:C3:36:DD:43:8A:EC:F7:AF:F2:7D:21:26:23:99:E4:10:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BB1C3DA4A5D11EF988E377B762E951A.roa
Signing time: Thu 25 Jul 2024 08:11:24 +0000
ROA not before: Thu 25 Jul 2024 08:11:21 +0000
ROA not after: Sat 03 Aug 2024 08:11:21 +0000
asID: 22773
IP address blocks: 156.249.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40913 (0x9fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:11:21 2024 GMT
Not After : Aug 3 08:11:21 2024 GMT
Subject: CN=66a208ac-baae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:0f:b3:d3:76:26:90:72:09:08:5a:c2:a4:
06:f3:31:8d:18:5f:8b:43:5e:d7:25:9b:1a:a6:d2:
a4:bc:aa:a8:62:26:f6:29:75:a9:51:5f:6f:7f:0e:
cd:ed:e7:90:5f:b0:6f:89:b1:ad:f2:26:51:61:38:
75:cc:f0:15:06:5b:c8:d3:82:e6:ef:8c:c4:ed:f5:
76:6a:ed:c2:4e:5a:75:85:51:dd:0c:55:b8:ae:75:
66:20:67:23:4a:7d:df:98:bf:64:d7:45:64:af:c0:
72:12:4f:4f:0d:ad:ea:ab:07:02:fa:f4:77:81:36:
9a:56:e0:d5:69:9d:7c:ae:9e:40:94:56:fa:5b:68:
f6:00:38:9c:42:ec:d3:1e:41:27:3b:a3:f1:44:2a:
13:8f:48:b4:81:d1:57:ba:83:46:2b:b2:7f:be:47:
ac:77:45:03:85:6e:52:e2:cf:7c:62:f3:67:fc:29:
73:6d:e3:9c:15:aa:a5:fa:2a:42:ba:44:0e:98:52:
77:02:a0:98:a1:1b:94:ae:25:03:a9:84:b7:6a:fb:
ec:7e:16:b5:ab:7f:25:78:29:2b:44:8f:42:ac:cb:
40:c7:90:67:64:13:d3:62:19:ac:21:b7:c3:62:1d:
c3:af:75:a4:23:dc:f0:6a:a7:c4:d1:30:40:66:ba:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:E3:C3:36:DD:43:8A:EC:F7:AF:F2:7D:21:26:23:99:E4:10:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BB1C3DA4A5D11EF988E377B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:9e:25:cc:1d:3e:19:30:27:6a:45:9c:6f:b8:4c:7c:8e:67:
c0:7b:88:b2:58:41:93:db:de:2d:06:1f:3b:b2:d7:38:aa:b5:
1b:eb:f3:0b:0e:84:28:c5:10:9f:7b:07:d8:ef:24:0b:91:59:
14:79:00:9e:b0:02:2e:02:32:eb:85:9d:60:89:9b:d9:4a:25:
3b:61:df:86:7b:46:d0:57:73:a3:fb:20:c6:9b:7b:a9:ce:17:
34:69:9c:d0:a2:90:24:37:34:7a:7c:03:4e:01:85:0d:2d:06:
ad:fa:ab:60:88:c0:42:3f:dd:c4:34:11:0c:61:f0:e6:b4:1f:
87:5a:97:c5:83:eb:a6:0b:03:b7:5a:8b:7f:29:4f:02:d8:7b:
96:4b:91:5c:41:36:b7:ac:fa:01:9b:cb:56:45:37:df:2a:77:
da:88:eb:73:cd:79:0b:21:3a:12:e6:b3:f5:e0:6e:7e:67:93:
3a:87:89:52:c2:bd:3f:d6:45:8d:b4:83:cc:6d:af:c4:ed:d5:
3d:fe:03:05:78:ea:34:3f:15:be:3a:8b:94:98:23:2d:bf:66:
c8:1c:18:fe:c4:6f:e4:b4:4f:c2:ab:7b:73:29:8f:15:d9:50:
d4:3b:0a:4d:0e:08:5e:38:cc:99:cf:dc:de:5c:74:8c:74:5b:
05:12:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org