Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87991440038C11EFB49BBE53017001B1.roa
File: 87991440038C11EFB49BBE53017001B1.roa (raw, json)
Hash identifier: Nw1T+Wt9hA/1uglmt9WVRaFlN2Aio20RO8CpKQh6QHw=
Subject key identifier: DD:00:A0:91:30:63:51:61:11:26:B5:23:79:7C:BC:9E:2D:E2:1E:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87991440038C11EFB49BBE53017001B1.roa
Signing time: Fri 26 Apr 2024 05:19:18 +0000
ROA not before: Fri 26 Apr 2024 05:19:14 +0000
ROA not after: Sun 05 May 2024 05:19:14 +0000
asID: 139646
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34274 (0x85e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:19:14 2024 GMT
Not After : May 5 05:19:14 2024 GMT
Subject: CN=662b3956-f0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:30:0f:07:78:30:8b:cf:48:5e:68:25:b6:
70:ae:2c:fb:93:02:6c:79:37:90:56:98:39:e4:9a:
38:0e:6b:66:a8:6c:3e:18:41:4d:90:66:fb:59:33:
90:3f:48:d3:c2:6f:dc:14:7a:10:cf:d9:6b:f1:56:
14:19:41:56:f4:f1:41:20:5c:02:4e:3b:d1:37:c3:
d4:66:ce:c1:a6:6d:39:69:da:30:09:2e:24:e9:be:
42:f6:ff:ee:27:2b:6a:83:78:94:ca:40:16:19:86:
fd:68:2c:05:59:d0:c3:6a:06:10:8a:82:6a:82:e0:
47:2c:c1:ac:fd:bf:91:97:54:d6:b1:31:c1:bd:d0:
d1:00:06:46:3a:85:27:d3:1a:14:5f:7e:64:fc:ea:
1c:0c:69:43:13:81:80:7a:97:bf:25:c3:b5:2a:d1:
67:95:e8:66:2c:42:b0:6e:14:2d:90:8a:d3:30:b7:
22:a3:e1:3e:06:80:b4:79:ab:ec:f9:9e:61:4a:ad:
5a:f3:61:bd:c9:5a:95:82:a4:50:04:13:53:52:eb:
e3:26:67:3b:d0:27:61:be:d3:9d:f4:dc:5c:09:56:
d0:b2:07:c2:7b:c4:95:5d:f5:25:07:8e:77:92:98:
c2:af:40:96:fa:6a:5f:72:25:d4:56:3c:20:b2:18:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:00:A0:91:30:63:51:61:11:26:B5:23:79:7C:BC:9E:2D:E2:1E:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87991440038C11EFB49BBE53017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:4c:b4:9f:af:f6:a7:32:6b:ad:e4:6d:41:59:96:fb:14:f6:
27:57:a0:23:88:05:81:5e:41:de:8b:5a:0b:f0:a8:b8:bb:1c:
8a:24:b4:50:e8:f8:d9:21:fc:26:0d:e9:0b:27:e2:e9:41:3b:
ab:4a:9b:94:c7:6a:9c:f2:f5:ef:c1:5c:e6:8f:fd:48:25:98:
1c:24:c3:04:5b:46:d6:ad:6a:64:0d:a9:10:db:af:b2:6a:91:
78:e5:45:33:12:0f:59:fc:b6:88:6a:fa:25:8b:80:a3:c2:08:
d9:46:06:49:17:5f:3d:83:07:10:ed:a8:00:ba:19:4c:34:bd:
71:e2:e0:7c:81:f2:b0:13:70:31:f3:c4:a9:b7:ed:08:61:3b:
b6:cc:6d:d9:82:df:ad:74:cb:6b:0e:4b:25:9c:78:9c:d0:2f:
65:f4:cd:a9:bb:69:86:05:47:51:e8:92:12:03:06:ce:80:6e:
e7:68:8c:1d:01:5c:ac:2d:2b:e3:0c:7a:5d:ec:63:02:bd:7e:
b1:5b:b7:b1:69:e3:c4:f2:6d:5e:68:77:e0:b3:57:33:8b:9e:
3f:18:45:81:92:1a:0e:52:2d:03:5b:b7:48:a2:80:4c:58:3b:
83:25:05:54:3b:4c:f9:81:95:b6:f7:ee:d7:5f:69:d0:2f:ea:
87:ed:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org