Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ADE6BBE47ED11EFA0B7166C762E951A.roa
File: 8ADE6BBE47ED11EFA0B7166C762E951A.roa (raw, json)
Hash identifier: A8+jH7I4FH7WdReS+lRUZDjtnJxZWOmAoYWRBWoZHfc=
Subject key identifier: C8:55:2A:49:B4:2D:32:79:C2:B2:B2:49:FA:5E:DF:60:90:B4:4A:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ADE6BBE47ED11EFA0B7166C762E951A.roa
Signing time: Mon 22 Jul 2024 05:45:04 +0000
ROA not before: Mon 22 Jul 2024 05:45:00 +0000
ROA not after: Wed 31 Jul 2024 05:45:00 +0000
asID: 135293
IP address blocks: 156.227.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40505 (0x9e39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:45:00 2024 GMT
Not After : Jul 31 05:45:00 2024 GMT
Subject: CN=669df1df-8f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:74:e3:92:aa:db:73:62:e5:c1:e5:84:5e:
bf:7d:cb:5b:a1:49:c7:5a:37:9a:f0:49:65:12:33:
0d:ca:ed:5c:c8:14:fb:a8:4c:a2:0a:2a:c2:65:11:
34:df:59:b9:6a:45:50:45:02:29:c4:a2:b6:dc:49:
09:85:61:24:07:18:4b:cd:55:7b:a7:21:ee:c9:37:
ef:19:13:24:33:06:25:b3:8f:9e:b5:ca:fb:6c:61:
06:7f:aa:10:da:81:f4:05:94:b9:05:1f:6b:a6:72:
0a:6c:60:b5:27:93:be:0d:cb:79:63:2a:4a:53:0d:
e0:4b:93:e2:f9:d6:f0:3c:d4:be:97:36:1c:e5:b2:
ff:c6:ea:26:ef:0c:a9:24:01:9d:82:39:a0:de:f2:
5b:d4:70:2c:f4:67:2a:b4:4c:da:fe:36:69:76:18:
1b:6c:b0:af:c7:d9:be:b7:2e:7f:c9:44:ff:88:ed:
ec:a0:bb:be:c8:ac:9c:bb:55:5a:b7:f4:8f:8e:a9:
94:c2:0a:6a:0a:b5:16:e3:e7:e7:41:44:db:d7:9e:
51:10:4b:cb:17:b2:59:15:bf:34:31:99:3b:85:29:
52:a0:b4:c9:86:03:79:90:02:b5:2f:a1:1c:73:ca:
66:b6:b0:a9:43:18:42:5a:59:f1:14:da:82:f1:cb:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:2A:49:B4:2D:32:79:C2:B2:B2:49:FA:5E:DF:60:90:B4:4A:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ADE6BBE47ED11EFA0B7166C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7d:86:fc:05:ea:a5:36:4e:75:ba:b6:26:0b:ec:7f:af:00:
be:fa:ad:54:1d:ab:e3:6f:2d:e1:da:66:c7:3c:93:9a:ef:06:
35:1a:67:1c:3a:a0:bd:07:af:d3:d1:fe:10:4e:4c:05:ad:62:
40:7f:bf:c4:2f:9e:24:b4:47:71:07:fb:d3:69:cc:41:60:b8:
1f:d0:c1:25:59:20:b7:ea:ff:e4:bd:6e:99:af:56:52:16:d4:
f9:0a:b4:db:00:af:85:2d:56:a5:dc:0f:82:d1:77:00:ba:86:
2f:70:d2:21:75:9b:81:7f:ca:64:58:06:e9:77:3d:9f:cc:2c:
57:e2:5d:61:a2:c3:bd:8a:8e:59:c7:60:fe:ce:be:5e:d1:16:
30:ba:bd:82:36:ad:20:8f:59:f1:6c:84:37:dd:5d:53:7a:d7:
4d:5e:c7:21:35:b6:c5:66:23:b5:ee:64:7a:11:97:21:46:03:
fd:c5:e0:1f:75:be:fe:fc:11:78:c1:f2:e4:ab:dc:ab:c6:d1:
a2:58:37:01:0e:52:58:df:86:04:ed:25:b9:35:8f:02:3b:e2:
6d:72:f3:6c:35:c6:f8:b4:e9:87:0f:48:e5:af:f3:cf:b3:50:
73:4c:a4:38:71:9e:12:6e:25:5b:86:99:d9:de:37:0c:76:93:
95:95:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org