Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87A95F2A3F5B11EFB9817779762E951A.roa
File: 87A95F2A3F5B11EFB9817779762E951A.roa (raw, json)
Hash identifier: kDReUyUdwuD67uSdzmfACc3BR1x/17vxpB36iyHic8Q=
Subject key identifier: CD:FB:A1:BE:1C:FF:51:43:BE:FE:D5:5C:A4:1A:88:61:C9:C7:1D:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87A95F2A3F5B11EFB9817779762E951A.roa
Signing time: Thu 11 Jul 2024 07:59:42 +0000
ROA not before: Thu 11 Jul 2024 07:59:39 +0000
ROA not after: Wed 21 Aug 2024 07:59:39 +0000
asID: 63139
IP address blocks: 156.227.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39868 (0x9bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 07:59:39 2024 GMT
Not After : Aug 21 07:59:39 2024 GMT
Subject: CN=668f90ee-0faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:77:36:ce:f4:45:1f:35:bb:fc:8b:d0:ef:
ca:a6:12:3e:40:bd:e3:25:13:fe:3c:6c:95:74:c0:
24:65:64:df:8a:39:e4:ca:2b:42:49:21:d3:8f:9d:
b8:6d:aa:39:5d:c5:9c:77:ef:e0:64:47:47:8f:4b:
d9:f4:b0:fe:8f:72:91:75:6f:8c:9a:a5:b3:3a:07:
78:13:de:9e:24:d7:bc:4b:52:a6:4f:af:6c:95:c7:
65:a8:fe:c3:3b:54:72:1f:85:33:f4:a6:2d:38:92:
0d:13:15:e3:1b:d6:26:13:9a:33:85:45:70:9b:c5:
ec:d9:36:f7:28:68:f9:a9:bd:3f:cc:8d:5a:2e:10:
b1:b4:f4:c9:f1:31:d5:9d:0d:10:eb:94:5c:c9:51:
0f:89:7e:66:d4:9a:ef:3c:9a:36:65:2b:ec:eb:99:
fc:4b:f8:06:92:31:40:95:70:bb:9f:c5:13:15:de:
5e:74:95:06:c8:da:91:e0:e2:a5:bd:ab:22:42:51:
37:75:49:14:01:ba:f5:00:82:d8:88:c2:3f:65:2e:
fe:bf:96:bd:39:2e:f2:17:09:af:32:7f:7d:8e:e6:
49:60:d4:5f:17:ca:16:63:90:40:48:03:ed:5b:dc:
f9:f5:d4:13:a7:09:c8:d6:47:69:7d:70:cc:34:30:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:A1:BE:1C:FF:51:43:BE:FE:D5:5C:A4:1A:88:61:C9:C7:1D:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87A95F2A3F5B11EFB9817779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0b:48:96:a2:66:cb:68:fc:87:99:a0:a2:a3:dd:e0:f5:7b:
0c:c6:a7:0d:44:5e:81:96:0e:ed:cc:31:04:16:0c:78:ee:15:
02:9e:b9:54:e2:fa:c5:44:ec:ae:9c:89:53:f2:4d:b7:86:4f:
f3:c9:5e:11:2b:ab:b8:a2:a4:ac:b3:d3:d7:6f:14:8c:84:a4:
0b:9d:a7:2d:c8:3d:98:5b:e5:07:0d:1f:6b:0a:d5:ea:e2:5e:
ad:81:50:1a:36:7f:1b:49:a4:8c:2e:0a:a2:b1:42:d9:f8:c1:
ff:db:4f:f7:ce:13:ef:c0:0e:e2:0f:7e:5d:f3:86:19:1c:14:
36:38:5b:4c:0f:59:a8:1f:4e:54:13:11:e3:48:ae:1d:4c:8b:
5b:df:da:b8:45:b9:76:b8:3e:58:d7:35:65:da:f2:20:d3:fb:
8c:c1:98:5b:a0:ba:87:32:55:e9:2d:d2:e3:16:4f:ac:a0:89:
05:36:67:6d:2c:fe:69:0f:03:26:c3:74:66:75:7b:c1:be:75:
7e:c6:48:fa:7b:f9:73:ac:f7:f9:ee:27:d4:89:b7:40:0e:a3:
d2:4c:e4:f8:d7:6d:38:d0:ab:67:5c:e4:ff:5a:7b:6d:04:03:
eb:48:4d:09:1b:29:ad:3c:bb:ed:b2:f0:31:5c:83:12:a2:3e:
3b:5b:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:45 2024 by rpki-client on console-ams.rpki-client.org