Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91B6D104418711EFB454309B762E951A.roa
File: 91B6D104418711EFB454309B762E951A.roa (raw, json)
Hash identifier: B8aNUMTh+0fMVyLcGCMUQeLq+s4vUkD+N1Zcp7dbOOc=
Subject key identifier: 2A:99:FE:08:00:B8:BE:7F:F9:42:63:1F:3B:D6:8E:06:E8:9F:B1:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91B6D104418711EFB454309B762E951A.roa
Signing time: Sun 14 Jul 2024 02:19:59 +0000
ROA not before: Sun 14 Jul 2024 02:19:56 +0000
ROA not after: Sat 17 Aug 2024 02:19:56 +0000
asID: 133952
IP address blocks: 156.225.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39999 (0x9c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:19:56 2024 GMT
Not After : Aug 17 02:19:56 2024 GMT
Subject: CN=669335cf-948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:69:0e:d4:bf:e8:a8:fa:b1:b3:21:97:52:
ed:56:9d:0c:08:a3:86:58:54:f5:4c:79:f4:7d:5c:
ad:34:80:31:e9:fa:79:11:ad:62:98:6e:93:14:2b:
96:c8:16:c2:32:56:f7:7e:6a:97:f4:a0:77:6a:fe:
d3:a6:be:03:ba:2d:83:35:0e:b5:88:fa:66:98:74:
ef:7b:9b:2f:0c:ee:f2:61:ad:1c:f7:dd:82:0b:a1:
47:ec:43:a9:90:dc:45:bf:46:6b:9b:5f:de:48:fc:
01:fb:c3:73:a6:84:2a:50:e1:95:57:39:08:d2:e1:
27:4a:20:95:bd:8e:7f:7e:d3:0f:67:4f:ae:de:5d:
a0:9b:83:32:ab:69:b6:e6:00:56:09:b3:07:31:40:
06:37:95:9d:16:4e:1b:52:c4:fd:a7:d7:4e:49:0c:
74:09:05:b1:de:df:1b:a3:9b:be:4c:ab:c7:61:63:
98:5e:d1:6e:ae:20:56:b2:d9:10:90:6d:6f:e3:95:
2b:d5:8c:72:30:b1:bb:d1:ed:77:43:df:ae:4d:63:
bb:0a:01:ab:3d:18:2e:a6:0b:76:d4:a1:a9:ed:7e:
0f:e7:5f:3a:1f:97:90:33:8a:9c:cf:f3:9c:8f:89:
20:f7:06:21:e7:07:00:84:68:7a:67:6c:80:c0:22:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:99:FE:08:00:B8:BE:7F:F9:42:63:1F:3B:D6:8E:06:E8:9F:B1:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91B6D104418711EFB454309B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a0:43:0f:b7:67:5c:fe:0a:2d:ea:d8:22:a4:8c:ed:ec:a7:
29:14:9f:7e:a7:a9:df:44:01:c4:74:ae:f4:79:0c:49:7e:c2:
e9:cb:37:ee:cb:5d:97:bd:29:a8:86:bd:94:2e:55:44:5a:19:
f1:20:c0:ef:69:1e:18:79:5c:61:11:b4:68:36:1c:29:5c:55:
48:05:b5:a0:09:53:af:8e:c0:c9:05:76:ef:8d:9d:d5:af:64:
25:8e:04:0c:bc:3c:c0:1f:c3:b1:cb:dc:8f:ac:c1:20:35:f7:
c7:68:e5:ad:19:be:dd:79:52:35:82:31:42:47:c8:54:ec:8a:
d5:89:c6:9d:1e:2b:5c:00:fe:39:de:a9:9b:77:fd:a7:8b:5d:
65:85:4e:fa:1d:1e:4a:82:3c:03:a6:f5:f2:3a:3e:37:71:8c:
4a:9b:66:d2:05:de:6e:4f:9c:4f:b0:1f:75:fd:9f:3a:01:5e:
89:66:c5:57:fb:12:42:99:a4:b4:47:d2:41:5e:59:25:94:d8:
49:5a:9e:1b:05:d2:d6:20:b2:42:84:1e:c2:79:ac:23:3b:c7:
58:b4:42:e2:cf:b2:cd:fc:f8:b4:0e:d5:e5:f0:ec:be:90:04:
bc:d2:33:5f:eb:3b:42:b7:7f:08:e0:d0:a2:66:6d:34:f1:e0:
54:f2:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 03:35:04 2024 by rpki-client on console-fra.rpki-client.org