Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CD1F92406911EFBB24F797762E951A.roa
File: 95CD1F92406911EFBB24F797762E951A.roa (raw, json)
Hash identifier: 4aO5T+E5Un2gbiBQbI1QjiaInTg/VvX8NtA+YBOG3bc=
Subject key identifier: CD:6E:FB:25:07:2C:4F:A1:51:86:F6:42:D4:CC:24:9F:40:91:1B:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CD1F92406911EFBB24F797762E951A.roa
Signing time: Fri 12 Jul 2024 16:12:50 +0000
ROA not before: Fri 12 Jul 2024 16:12:47 +0000
ROA not after: Tue 13 Aug 2024 16:12:47 +0000
asID: 138915
IP address blocks: 156.244.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39933 (0x9bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:12:47 2024 GMT
Not After : Aug 13 16:12:47 2024 GMT
Subject: CN=66915602-a536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:98:54:b8:ca:67:e0:83:cc:88:a8:5c:0a:
40:1d:ca:59:1b:7b:25:cf:3d:d1:3c:e8:54:36:17:
86:40:d5:fb:1c:2a:b9:1c:0d:6e:37:da:13:01:3c:
1d:fa:20:04:24:03:25:d9:74:ad:4a:b9:ac:98:5e:
36:d9:bd:5f:10:f6:e8:52:e4:db:05:7a:a6:34:3c:
d6:ab:16:4d:96:9a:82:dd:77:ef:be:06:b9:30:b8:
9a:b2:f3:09:da:56:f6:fa:1c:cd:5f:1b:35:c2:39:
c4:d8:34:2f:4b:ec:ba:ae:ad:63:39:96:11:37:cb:
d6:66:10:85:cd:e5:94:0b:90:5a:22:c4:5e:10:96:
40:9d:31:3a:0b:ee:e0:f7:43:7f:45:18:5a:af:ac:
b3:3d:e3:22:cf:24:0b:14:2c:b8:f3:c0:32:ef:82:
16:c9:ba:b3:0e:f0:8d:91:3a:bb:26:f4:c1:b6:a9:
cc:51:85:7e:cb:b3:35:1b:67:ee:2c:09:ea:2a:28:
21:d1:68:26:fe:d7:7e:47:50:d5:19:d8:8b:54:9a:
35:3c:44:f0:1d:d5:be:ba:bb:28:21:7b:88:a1:4a:
6e:18:6c:f6:7d:7b:3f:ac:fc:93:42:d5:33:e9:76:
8f:c4:e1:25:d9:89:f9:b4:a0:79:cb:21:a8:31:6d:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:FB:25:07:2C:4F:A1:51:86:F6:42:D4:CC:24:9F:40:91:1B:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CD1F92406911EFBB24F797762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.10.0/24
Signature Algorithm: sha256WithRSAEncryption
13:00:7c:44:e1:66:b3:59:b4:c8:d2:40:0d:37:54:01:1f:93:
0b:5e:67:bc:cf:e5:2f:8f:9e:6c:09:10:3c:6e:24:c1:a6:e2:
d9:2c:96:52:d8:77:5f:b2:c8:9d:f9:cc:a0:85:b5:21:62:6c:
e1:3b:2c:ca:9d:e8:b3:b5:f1:36:06:da:28:88:51:d2:ab:35:
a0:cb:9f:83:e9:9e:d5:35:0c:d8:94:6a:37:11:99:68:e2:28:
86:da:2a:da:de:f5:f4:af:bd:fd:ba:1e:a8:3f:72:e1:9a:9f:
ae:e6:c2:94:4b:ca:ae:66:10:0b:5c:c2:05:94:1d:37:57:59:
da:b1:7a:94:36:4d:20:91:32:86:09:36:24:60:49:f2:4b:73:
85:49:dc:e4:f6:98:a2:48:47:fe:ac:48:40:e6:4a:05:d2:df:
dc:59:3a:69:e9:ab:ab:2c:01:28:d8:17:a7:e2:2b:78:1a:ad:
83:c5:ed:69:05:53:86:54:b4:9e:32:a6:1a:d4:04:a0:8e:8e:
e1:1d:f4:f1:6d:7f:02:12:ce:89:29:6a:24:1d:a6:c4:8e:68:
32:f6:3e:ab:53:4f:bb:fa:55:0d:59:cc:cc:dd:79:b8:af:87:
d1:ff:6f:3f:17:f7:1e:cf:38:e0:b0:66:df:d4:3b:1c:54:b9:
d2:50:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org