Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95926DFA435E11EFAD5F8568762E951A.roa
File: 95926DFA435E11EFAD5F8568762E951A.roa (raw, json)
Hash identifier: +ZxMuGXghyfG+KsdxP1pbGdBg2xAoqhtNsTroiyGORo=
Subject key identifier: E2:83:BC:0B:31:E2:9F:38:2E:B9:6D:D5:D2:AF:73:57:79:5A:AA:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95926DFA435E11EFAD5F8568762E951A.roa
Signing time: Tue 16 Jul 2024 10:31:39 +0000
ROA not before: Tue 16 Jul 2024 10:31:35 +0000
ROA not after: Sun 18 Aug 2024 10:31:35 +0000
asID: 62240
IP address blocks: 156.229.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40147 (0x9cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:31:35 2024 GMT
Not After : Aug 18 10:31:35 2024 GMT
Subject: CN=66964c0b-6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:0e:c5:f3:24:83:5f:0d:5d:14:19:1d:a0:
ad:4f:8e:18:ad:58:62:7a:d7:a5:5f:02:7b:a1:37:
cc:06:97:90:0b:55:41:70:76:6f:ce:d9:8b:4d:79:
d4:3f:60:c0:44:2c:c6:5f:1a:7e:b0:cf:cd:d1:fd:
a8:24:40:bf:b0:69:4e:60:8c:17:42:0d:4d:e3:4b:
58:10:79:e9:dd:59:6f:71:6c:58:ce:eb:02:c5:cb:
1b:f8:2b:10:71:4d:9b:63:25:db:cb:5d:17:c5:a2:
77:f6:bd:e4:96:77:bf:c8:c5:1d:cb:08:28:19:96:
00:d9:f4:3e:8d:2e:7a:0e:db:c2:6c:d1:fd:ed:d8:
3e:5f:a0:c6:bf:29:e0:00:02:07:47:bd:a5:63:8f:
79:90:42:62:c3:2c:6e:9d:7c:cf:a9:3e:f5:6d:d1:
b0:ce:c1:84:72:8c:8a:7c:83:6e:ae:53:96:94:9b:
2d:8a:cb:22:50:e2:d2:50:da:9b:e0:97:18:9a:78:
f7:eb:92:8d:d5:2f:1c:bc:6b:c2:32:d9:83:30:52:
b1:f5:0d:14:dd:ab:85:1e:62:ff:52:b2:73:31:e9:
8b:bc:1c:f8:53:7d:86:e7:0f:e0:0a:52:82:7f:d4:
0a:09:08:c0:0e:69:6c:c7:cf:3a:16:d7:02:14:7f:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:BC:0B:31:E2:9F:38:2E:B9:6D:D5:D2:AF:73:57:79:5A:AA:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95926DFA435E11EFAD5F8568762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.26.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:6e:22:c9:06:84:a5:77:7a:33:a0:93:5f:92:81:94:94:39:
1f:2d:37:22:31:02:0d:74:cb:da:b4:5c:37:d2:a3:d3:49:f8:
c6:7f:61:cb:35:b8:3b:fb:a7:46:b7:12:0f:0b:cf:d4:4f:ce:
4c:95:ce:84:57:ba:b1:32:75:85:fc:6b:46:85:c8:e3:04:89:
fa:c3:44:d4:5c:8c:1f:df:d9:4f:a7:b1:85:d8:92:18:fb:27:
14:07:fa:a5:ea:4c:cc:31:a6:10:9f:73:17:d2:a2:dc:d5:a0:
9a:e8:80:eb:00:ce:92:4b:6a:49:28:1c:e1:f5:85:d9:b9:98:
4c:b5:23:49:a3:e7:b3:0f:e3:15:51:c8:43:bc:3b:4f:50:5d:
b8:4f:d3:6f:04:d6:31:be:43:fe:9e:66:68:98:ad:d8:43:d4:
e3:ff:7e:a9:26:47:1c:5e:a3:3d:ac:29:ed:e7:0d:56:62:98:
37:03:7e:12:8f:ef:78:ac:cc:a1:0a:9c:d6:54:0b:2f:6f:47:
08:06:c5:d0:a7:a9:72:a5:23:e3:15:4f:0c:11:3b:d9:d1:71:
69:f6:f2:85:82:72:96:a8:02:a5:dd:6f:b6:e9:a4:c2:ef:a2:
7f:e3:e3:55:5c:71:2f:48:e9:fc:3d:2c:5e:65:03:cb:19:1d:
6f:0a:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 05:25:49 2024 by rpki-client on console-fra.rpki-client.org