Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B28374440FE11EF92C5B18D762E951A.roa
File: 8B28374440FE11EF92C5B18D762E951A.roa (raw, json)
Hash identifier: uH3lIph23GAmcYAj4AiKLCo01B2vZfiDxNKYAnHUqOE=
Subject key identifier: 13:08:6A:FB:32:CC:82:5A:41:3D:4E:AA:76:6C:BD:39:BB:0D:49:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B28374440FE11EF92C5B18D762E951A.roa
Signing time: Sat 13 Jul 2024 09:59:07 +0000
ROA not before: Sat 13 Jul 2024 09:59:04 +0000
ROA not after: Tue 13 Aug 2024 09:59:04 +0000
asID: 138915
IP address blocks: 156.244.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39966 (0x9c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 09:59:04 2024 GMT
Not After : Aug 13 09:59:04 2024 GMT
Subject: CN=66924feb-a2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:dd:63:94:d0:be:5b:39:d4:6d:a2:51:c5:
d9:25:1b:4f:be:b9:6c:85:31:85:70:f1:23:43:ed:
25:36:4b:7b:5d:10:ee:6c:6c:d4:3d:76:49:6c:08:
7a:b0:92:f3:dd:56:b6:f5:7e:d1:ff:00:7a:4b:f6:
b6:3a:ae:e9:ed:fd:7b:a7:68:51:b0:8f:1e:b8:fc:
2f:03:bf:81:af:89:03:ef:9b:db:c3:3a:1f:a7:79:
d8:82:80:87:71:4e:58:8a:05:52:f2:c8:2d:4c:19:
1f:e7:84:9a:ba:31:24:cc:60:9c:8a:98:e4:ea:e7:
d9:cc:3d:06:af:48:69:a3:63:b8:a7:24:80:22:17:
48:6d:9b:a2:33:4d:5a:24:63:50:3b:0a:74:24:19:
2d:88:15:ec:8b:21:8e:3a:34:c0:35:f8:24:6f:1e:
6c:b1:2d:ef:ae:28:4d:cf:0e:9a:27:27:8c:ed:7a:
c8:87:77:ef:1a:ce:af:ad:d8:8b:82:0e:77:ca:f8:
1e:c3:82:0e:55:26:0b:a7:c1:44:43:c7:d9:3c:2e:
d0:cd:b5:b8:e0:63:42:9c:e9:80:66:8b:f4:23:4b:
54:66:a0:b6:ab:3f:2f:30:b5:8f:9e:9b:aa:0f:42:
00:55:3c:79:65:eb:00:19:df:3f:9f:ab:5d:38:65:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:6A:FB:32:CC:82:5A:41:3D:4E:AA:76:6C:BD:39:BB:0D:49:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B28374440FE11EF92C5B18D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a1:af:74:76:ea:08:bc:72:c8:77:7e:a6:39:db:9b:d4:1b:
86:dc:03:d7:a2:74:74:78:22:b0:a7:d8:e2:dc:5b:fe:a8:f9:
9b:3e:1a:21:bf:27:8c:d3:6a:00:d7:dd:f2:96:39:ab:08:ab:
1a:e8:ec:54:db:bf:39:24:2e:33:52:06:0e:48:02:fc:e5:c6:
4b:45:79:38:c9:f7:25:75:25:f2:b9:49:59:83:15:21:80:d0:
ff:95:1d:26:94:1b:04:6c:e5:e1:3f:11:6a:f0:47:48:ac:68:
ee:0e:3b:b7:62:9a:03:7e:f9:5a:83:95:1a:b3:86:f8:bc:86:
df:5f:cf:35:b8:2a:e2:8e:c0:1b:c9:30:ae:0b:96:42:ae:8e:
10:0a:f0:d7:f7:82:2a:2f:9e:11:b7:a6:c9:d3:47:0b:21:95:
82:76:64:fa:fe:fe:d9:68:c6:48:e0:8b:18:74:0e:ba:43:a8:
7c:7a:37:28:34:f2:4f:f5:c0:f3:af:be:d9:80:4d:da:81:2f:
2b:92:60:49:f3:bd:72:0b:b2:a7:f4:c7:bb:15:a7:c6:ed:43:
45:bf:be:15:a9:ce:ba:0f:d5:a0:f6:41:4b:81:e1:01:4d:a4:
c6:2e:bd:c7:a2:78:bd:3c:96:29:2e:a2:6f:9f:71:21:38:a7:
4b:88:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org