Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC18BF4435711EF99FFD8B6762E951A.roa
File: 8CC18BF4435711EF99FFD8B6762E951A.roa (raw, json)
Hash identifier: 3IimrW2FrIiJyZkWKH/pWGdPPfVCuUtSTEEBz3rIDts=
Subject key identifier: ED:C4:CC:81:BF:B7:E9:CC:46:C2:14:83:B0:A2:84:15:C4:EC:86:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC18BF4435711EF99FFD8B6762E951A.roa
Signing time: Tue 16 Jul 2024 09:41:17 +0000
ROA not before: Tue 16 Jul 2024 09:41:14 +0000
ROA not after: Tue 13 Aug 2024 09:41:14 +0000
asID: 138915
IP address blocks: 156.244.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40103 (0x9ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:41:14 2024 GMT
Not After : Aug 13 09:41:14 2024 GMT
Subject: CN=6696403d-e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:7e:97:2c:a2:16:42:6d:6b:e2:ba:1e:0e:
a8:0c:6b:f1:f1:7c:aa:0f:8f:ff:b9:1b:25:86:0b:
3a:ce:79:51:72:00:4b:34:53:f5:f3:e2:ab:d3:e4:
4d:15:dd:7d:73:ef:ff:2b:78:85:10:9f:1d:73:b6:
aa:ee:dc:e1:44:02:08:08:21:13:d6:4d:2b:9e:bc:
04:4b:32:2e:03:a0:cd:8d:fe:76:3c:5f:97:c2:0f:
59:a0:06:9a:e7:9c:ee:f5:64:ec:df:89:ac:7e:b0:
5a:89:ff:83:11:fc:54:5a:ea:63:be:38:20:74:58:
9f:5d:9b:d3:61:15:3b:a5:c2:d3:9d:c5:6e:c3:ae:
2a:8c:27:db:bc:51:9a:d6:e5:ca:31:37:6f:86:c3:
29:7a:45:02:aa:33:8c:6b:24:68:39:82:6c:da:8e:
a9:2f:d6:a5:c4:59:0c:78:22:29:58:cb:e4:91:e9:
b3:4b:61:3a:f4:31:82:5a:61:91:29:12:13:42:93:
89:cd:d0:c5:b6:6c:ac:d0:91:f4:33:75:84:d2:5a:
4d:75:09:9d:27:65:33:c7:48:20:1a:28:a1:16:10:
34:2e:e2:a9:ee:10:64:15:fe:ee:1b:bd:2e:09:5d:
66:b3:40:45:16:19:d5:ee:09:06:b5:23:97:be:79:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:CC:81:BF:B7:E9:CC:46:C2:14:83:B0:A2:84:15:C4:EC:86:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC18BF4435711EF99FFD8B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.43.0/24
Signature Algorithm: sha256WithRSAEncryption
98:48:c2:ae:58:03:8c:47:d1:f4:34:5b:32:60:5a:9e:cb:49:
04:88:a5:e4:51:aa:1c:9c:50:7f:3e:a0:70:6b:5b:a2:e7:b2:
e3:30:3f:e0:a6:49:19:46:6a:89:6c:86:ae:61:a1:54:67:99:
6b:c8:a4:62:d5:a1:f3:84:34:d6:f8:e3:2d:2c:9b:8e:54:68:
66:76:3a:f9:d1:dc:de:9c:87:b6:0e:38:fe:72:46:7f:f6:7f:
1c:17:c9:07:74:c2:0a:bb:f5:2e:a2:cc:19:ca:d5:86:e5:86:
67:27:62:e0:1c:1e:fa:d2:8c:14:06:44:2a:cb:7b:fd:21:07:
80:77:b2:f3:df:fb:8b:2a:d3:38:82:31:d9:d6:f9:02:b8:56:
3b:b5:b7:a0:4f:e8:b1:83:3f:c3:f6:d2:f2:70:5b:f0:f3:79:
2b:f7:8a:a1:1e:99:30:43:8c:88:fb:50:f4:7d:78:0b:ac:31:
82:99:4f:ac:6a:98:fd:f3:87:c4:b6:d1:16:32:e4:c3:f8:67:
59:b4:be:87:36:e4:14:b2:fe:c8:81:0b:a4:d2:c0:92:37:92:
88:fa:b1:dc:26:74:eb:99:83:94:d3:dc:cd:11:99:80:67:cb:
da:59:01:12:a5:68:09:78:04:a7:1d:a4:06:9d:da:78:19:d5:
5a:d2:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org