Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FF3F8FC3E9D11EF8AE4CC6B762E951A.roa
File: 8FF3F8FC3E9D11EF8AE4CC6B762E951A.roa (raw, json)
Hash identifier: J9PVEU8OTR8Qtu/DWpO6ArkvKmN9QhnM32pYDg0Xdbs=
Subject key identifier: 9A:B5:C6:B5:B8:23:98:C8:6F:23:1F:F0:FD:55:72:C8:CA:70:86:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9AC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FF3F8FC3E9D11EF8AE4CC6B762E951A.roa
Signing time: Wed 10 Jul 2024 09:19:52 +0000
ROA not before: Wed 10 Jul 2024 09:19:48 +0000
ROA not after: Fri 02 Aug 2024 09:19:48 +0000
asID: 139646
IP address blocks: 156.242.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39623 (0x9ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:19:48 2024 GMT
Not After : Aug 2 09:19:48 2024 GMT
Subject: CN=668e5238-8f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:67:ff:66:7a:91:72:35:38:1a:40:e5:f7:
b2:77:c2:59:37:6c:3b:cf:37:90:f5:7e:91:40:45:
5a:6e:c0:7d:3d:82:ed:fb:a0:02:f1:84:b2:f9:aa:
f9:6e:09:af:fd:0f:de:97:a3:55:75:88:c0:13:68:
12:7d:86:49:1f:1e:84:2e:0c:f6:19:94:38:fa:e5:
a1:84:07:04:f0:63:af:93:85:df:ab:7a:79:e5:eb:
12:4e:b0:b6:5b:0c:e6:16:15:84:db:96:e8:1a:d2:
e2:1a:de:42:9e:12:8e:8d:cd:92:2e:d2:92:d1:34:
bd:66:fe:04:17:bc:0e:06:63:1e:89:be:51:aa:d9:
89:b7:9c:7c:0a:c4:ed:db:fd:8d:9e:c1:7a:bc:70:
5f:4f:1b:c8:8b:c7:c0:a4:0f:7c:6f:a4:1b:6c:b7:
6e:9b:16:47:c7:47:fc:23:7a:dd:84:48:43:cb:42:
3f:19:3a:a6:b3:3e:d0:0b:fd:64:85:22:5c:f2:1d:
7a:ed:d1:a1:7f:0a:c2:53:41:66:08:70:6e:dd:ee:
4d:3c:8f:f7:38:43:c0:2c:63:e6:1e:1f:3d:da:87:
b0:a1:0f:c2:be:5d:4c:e8:d7:81:57:65:d6:30:03:
a6:fe:b3:3b:bd:44:8e:74:73:de:39:8d:21:d5:bd:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:C6:B5:B8:23:98:C8:6F:23:1F:F0:FD:55:72:C8:CA:70:86:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FF3F8FC3E9D11EF8AE4CC6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.12.0/23
Signature Algorithm: sha256WithRSAEncryption
67:3c:33:3f:87:75:f2:ab:a7:2d:a7:93:5b:ea:b2:2a:0d:5e:
c8:00:b7:34:83:3d:cd:fb:7d:77:80:df:03:d1:39:de:09:d5:
31:15:bd:a3:24:78:90:d5:bb:87:92:5a:9b:c0:7a:98:12:97:
99:76:7c:15:77:1c:60:cd:ce:4c:73:35:df:56:91:6d:7c:fc:
ff:f2:53:1c:0c:ea:39:3e:22:1b:05:01:64:e0:1c:a3:8d:f9:
2c:f5:3a:1a:12:4e:a2:74:c7:c4:ed:0e:f2:f9:3b:94:36:28:
cf:8a:19:e7:b1:64:1d:52:c0:d5:47:e4:84:47:6a:a2:8a:ea:
39:88:b0:f6:9a:0b:c8:2a:82:b0:08:4b:9d:68:50:4a:e6:7b:
38:6f:c9:6a:b6:06:8b:27:dd:6f:76:de:39:c6:11:f5:48:0c:
52:c9:96:7e:38:6c:a0:e8:4d:07:3b:5a:13:66:c6:64:4f:4d:
a1:ba:9b:c3:cc:61:89:10:17:1a:5a:8e:85:86:b4:d7:34:db:
aa:5e:90:a5:19:c7:a1:ab:32:96:b3:b2:f9:05:35:c0:3a:14:
47:41:2c:bb:50:7c:c8:15:68:4c:e1:9e:1d:c3:72:f0:18:c2:
da:a6:38:f0:26:07:f0:ce:2d:17:f6:74:ae:62:21:b3:a4:26:
c6:0f:77:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org