Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D3F19A448C911EF947F6341762E951A.roa
File: 7D3F19A448C911EF947F6341762E951A.roa (raw, json)
Hash identifier: J+c/XzcuIOHXOe2/YD4eSr4JlKwyE3m8PQO+AJvXzL8=
Subject key identifier: 31:40:59:FC:21:95:8C:8F:89:1C:74:65:7D:C2:F9:68:0A:F2:0F:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D3F19A448C911EF947F6341762E951A.roa
Signing time: Tue 23 Jul 2024 07:59:30 +0000
ROA not before: Fri 26 Jul 2024 07:59:27 +0000
ROA not after: Fri 23 Aug 2024 07:59:27 +0000
asID: 202656
IP address blocks: 156.246.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40586 (0x9e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:59:27 2024 GMT
Not After : Aug 23 07:59:27 2024 GMT
Subject: CN=669f62e2-7601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3a:c7:77:b3:4b:c4:5f:19:64:d2:12:03:e0:
2a:8a:33:8b:2d:1e:40:e1:b6:cf:fe:26:39:61:4b:
60:fe:45:4b:31:fd:ac:9f:e8:5e:54:d8:b7:15:20:
85:a0:dc:43:52:1b:db:33:9b:1e:bf:d2:bc:a9:b9:
9b:da:af:85:a7:73:89:e8:3e:2f:eb:16:1e:21:fc:
fa:e8:4f:65:c1:e1:cc:bd:18:f6:ed:80:91:96:91:
fb:14:39:70:7f:a6:39:37:bd:5f:ee:92:87:7b:83:
c9:e6:a6:27:ea:61:0d:f6:00:b0:48:bc:26:14:f9:
c8:da:6c:a7:28:26:62:27:c4:3a:54:ad:88:0c:5e:
ad:f3:b6:8e:ab:de:b9:72:47:e6:3c:4d:4d:bc:54:
af:eb:96:eb:5e:14:60:5f:ce:27:9d:93:38:3b:c2:
b8:f1:05:42:4c:82:1c:75:84:3a:5e:39:50:2c:28:
05:b2:96:80:bf:3a:a6:3f:39:a9:09:8f:0a:ab:bd:
9c:02:20:f1:aa:f3:63:fc:3b:a6:cc:d1:9c:56:45:
e7:66:7d:e3:68:2e:8e:90:4e:08:18:a3:02:af:61:
f4:03:fa:75:38:69:32:b3:78:f6:c3:34:c0:4d:ca:
8c:32:0f:e7:f9:95:c7:8f:33:21:ca:36:a0:ea:5b:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:59:FC:21:95:8C:8F:89:1C:74:65:7D:C2:F9:68:0A:F2:0F:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D3F19A448C911EF947F6341762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
50:4c:01:ae:5c:bf:e2:a1:c4:ec:d4:8e:93:d7:56:85:3d:70:
73:03:a0:ad:e9:1d:94:4f:c8:94:e0:f3:16:21:00:a9:d8:a1:
63:ae:c6:49:fb:d0:71:b4:37:db:61:1d:98:1e:10:3a:fc:ee:
35:f6:73:0c:ee:67:4d:b3:b9:fb:20:41:ab:f3:53:4f:21:62:
9a:4a:ec:a4:1b:22:d3:39:66:da:f0:11:c8:f1:80:2d:5f:c8:
db:5d:d5:2c:59:41:b5:e0:35:45:03:1f:85:1e:15:81:2c:ec:
2f:9e:7f:57:a1:f9:7e:22:d7:bc:bb:e0:92:12:ac:ef:0f:4c:
93:c9:c0:ea:58:da:a2:e5:51:74:1d:b8:a4:86:cd:e0:b8:bc:
7f:27:ac:e7:e2:3a:32:dd:e2:ea:75:29:e4:e0:a0:b5:4a:43:
2f:33:a0:5c:a1:ff:ab:bb:98:ce:bd:02:c1:9e:0c:38:c1:c8:
7a:59:18:00:ae:6e:77:96:01:b7:fd:2b:05:7a:d5:31:1e:6a:
cb:29:39:4f:4f:30:85:f4:3c:e0:2b:c1:d3:6d:a4:40:f6:25:
c7:8f:7a:d2:6d:1b:7e:dd:ac:08:0d:79:e8:d5:ca:bf:75:b0:
16:ae:67:49:49:52:0e:86:f8:ea:aa:83:6a:9f:84:af:43:c1:
63:7c:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org