Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8050A4FA418511EFABA0ED8A762E951A.roa
File: 8050A4FA418511EFABA0ED8A762E951A.roa (raw, json)
Hash identifier: IJg+K84HE5cM4jMpqPVOKPjcm2AfETtmjmtITyoXn/A=
Subject key identifier: 37:F1:0C:08:BB:32:76:81:F3:74:6B:6B:9A:7F:7B:DD:3B:D5:C0:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8050A4FA418511EFABA0ED8A762E951A.roa
Signing time: Sun 14 Jul 2024 02:05:11 +0000
ROA not before: Sun 14 Jul 2024 02:05:08 +0000
ROA not after: Tue 13 Aug 2024 02:05:08 +0000
asID: 138915
IP address blocks: 156.244.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39981 (0x9c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:05:08 2024 GMT
Not After : Aug 13 02:05:08 2024 GMT
Subject: CN=66933257-44e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:b8:0e:b3:e9:e4:20:ad:34:32:d8:e3:8d:
49:f8:63:ce:50:2e:bd:7c:9d:13:19:15:e7:c1:bf:
74:ff:10:1f:5e:89:0c:5e:06:db:63:6c:40:05:49:
23:1b:37:f8:45:27:34:b9:34:6b:eb:86:81:4b:5a:
db:9f:85:52:61:f6:5d:b0:a0:93:61:d7:3d:82:59:
7e:a5:0a:d9:3b:d2:0d:32:6c:17:02:d5:6c:b7:53:
2e:2c:71:63:85:aa:a9:2c:48:c9:0d:38:78:f3:48:
03:d5:5d:f7:0a:3a:f6:ab:61:e0:d0:61:92:08:af:
50:68:2e:0a:89:03:88:8d:ea:f1:f6:c5:7d:5a:59:
ff:15:9e:a0:6f:58:72:54:d8:78:88:0d:d5:29:eb:
71:43:4c:16:a2:12:b9:8f:4c:93:0c:1e:da:5e:4a:
8b:6e:ab:84:06:9b:c0:e6:98:54:8d:91:ab:19:a2:
eb:85:b1:71:c4:08:db:c9:33:cf:a4:73:1c:9f:0e:
d7:94:12:7c:dd:ac:33:80:4a:9d:97:9f:ca:29:62:
62:58:c1:e8:c2:f7:3a:9e:d6:51:43:51:29:ae:f7:
cc:cc:24:dc:af:a4:85:2c:88:92:ca:ad:08:e4:76:
57:65:87:ca:27:4f:b4:f7:58:f3:ff:38:d8:26:18:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F1:0C:08:BB:32:76:81:F3:74:6B:6B:9A:7F:7B:DD:3B:D5:C0:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8050A4FA418511EFABA0ED8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:38:f5:06:e9:5e:6b:51:f6:b9:62:45:cb:e7:3c:44:98:25:
8d:ab:f5:48:f3:e0:cd:63:e0:b0:f1:b8:f6:bb:08:c6:75:f9:
52:79:6f:25:36:17:d3:94:e6:89:c9:d7:03:d5:3e:6d:06:9f:
b6:83:5c:dd:09:ed:94:41:a9:ca:26:3f:36:ff:45:1c:8d:18:
25:1b:61:b9:9b:59:d4:d7:8e:8b:29:5f:ee:dc:81:99:dc:2d:
ff:08:b5:c9:f1:dc:7c:e8:4b:96:49:79:50:c9:2a:41:d0:3c:
e2:26:49:0c:3a:bd:6b:fe:e9:fe:08:ee:e0:20:8e:86:37:8f:
bf:f9:fa:aa:14:3b:82:00:5b:05:18:c1:54:d9:67:ca:1e:81:
b4:14:98:65:7f:ce:0b:f9:2a:c6:bd:b7:41:f8:96:7d:37:60:
ee:71:6b:81:4e:53:1d:f4:90:54:66:70:15:2d:df:0e:75:06:
c5:e6:30:7b:54:f0:66:ca:3c:16:c3:99:8c:80:5e:95:2a:e3:
2f:e7:21:f7:f9:6f:3c:66:89:6b:69:b1:29:5a:44:54:0a:ec:
c7:67:f2:37:a0:86:01:6c:8d:1e:84:37:df:12:8b:d4:e8:34:
d5:ee:f4:3d:53:a5:ea:23:de:29:a5:23:cf:5c:e1:c2:5f:db:
d4:fd:12:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:17:56 2024 by rpki-client on console-ams.rpki-client.org