Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/873310F8499311EF88E7869C762E951A.roa
File: 873310F8499311EF88E7869C762E951A.roa (raw, json)
Hash identifier: wtfpcGfHKew8DQVQ2c9GZSa70adbkQwyXkNAmgKTodE=
Subject key identifier: EA:0A:91:69:43:78:46:94:E7:F8:EB:37:E3:B3:4F:6D:8D:84:F0:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/873310F8499311EF88E7869C762E951A.roa
Signing time: Wed 24 Jul 2024 08:05:45 +0000
ROA not before: Wed 24 Jul 2024 08:05:42 +0000
ROA not after: Fri 23 Aug 2024 08:05:42 +0000
asID: 202656
IP address blocks: 156.246.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40679 (0x9ee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:05:42 2024 GMT
Not After : Aug 23 08:05:42 2024 GMT
Subject: CN=66a0b5d9-ce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:2e:46:f7:26:dc:9b:2f:09:1f:80:56:b9:
d9:33:d8:7f:7b:26:76:a8:08:f6:6b:34:d5:cf:61:
42:da:0b:51:6f:2e:c7:53:8c:ab:94:b5:04:b4:e4:
ac:ea:df:0e:9b:6a:0a:2a:04:c5:96:c0:c7:bc:4b:
8c:1c:f1:e4:3d:96:78:e0:d1:8b:64:af:c5:41:c5:
bc:50:fd:1f:e1:87:2e:64:98:23:10:08:1e:bb:38:
7c:20:50:91:d1:83:96:1b:47:39:b2:2b:9f:a9:74:
0e:50:9a:e5:5b:df:63:45:2d:3f:52:f5:00:fe:ec:
24:74:e0:81:ea:ba:a9:c2:ca:6e:ac:a4:3c:1b:37:
a9:1a:c9:d4:af:e5:26:63:1e:9e:d7:a3:2e:8b:31:
32:4f:57:30:30:ac:7a:06:06:3f:a8:d3:92:ea:da:
cd:31:38:ea:85:b5:db:db:62:83:d4:39:d0:a5:ae:
0d:33:a3:e2:62:05:cd:a1:37:69:6b:a3:0e:81:27:
cc:46:b1:41:ba:59:db:ec:25:04:a1:11:14:bb:7c:
f7:07:74:cb:93:2a:9e:b1:7d:44:54:54:99:01:e5:
27:c8:3f:37:bc:35:35:7a:8d:17:f9:41:4f:0e:e7:
2b:bc:09:10:ba:42:02:93:b8:19:3e:ba:bc:08:3a:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:91:69:43:78:46:94:E7:F8:EB:37:E3:B3:4F:6D:8D:84:F0:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/873310F8499311EF88E7869C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.200.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:57:0a:ac:d8:83:88:2b:40:f8:5e:aa:f0:bc:f8:5c:75:58:
68:22:d1:c9:5f:09:d6:b2:29:41:6e:fa:76:bf:47:6c:53:e4:
d4:cd:fa:81:0a:d0:ab:b6:a9:8f:0f:32:e8:11:b2:e8:71:3a:
e8:c2:b9:32:a1:c3:4c:37:9a:55:9c:41:54:f9:8b:e5:e6:45:
f5:d3:11:8c:72:6c:5a:98:2d:86:02:89:68:92:67:ae:45:3d:
0c:b6:de:98:3e:30:3d:48:cb:4c:85:55:db:44:9a:62:4f:0a:
9f:94:f4:1c:50:11:1d:29:0f:c2:e2:ed:69:a1:7b:70:47:c3:
7f:11:e2:2b:7f:d6:46:4f:9f:62:a2:17:98:56:29:85:86:4b:
1e:a4:86:26:f8:83:0a:4a:29:2e:09:a2:e4:5b:75:99:96:fb:
31:4a:cb:ca:85:c3:bb:33:28:4a:86:04:13:ef:a2:af:33:22:
0d:b4:5b:5e:a5:d6:40:44:29:41:2d:2d:36:5b:77:32:a0:0a:
c5:19:76:0c:03:4c:81:0d:c3:b9:ca:4a:fe:55:de:b0:f2:c0:
cc:33:16:80:6f:ac:87:17:4f:dd:41:0b:a4:00:4f:e7:e7:f4:
db:db:7f:8c:38:5f:ab:dd:17:00:da:94:5c:cb:f6:cc:ea:17:
b6:d5:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org