Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CE6B004A7211EF8099C188762E951A.roa
File: 95CE6B004A7211EF8099C188762E951A.roa (raw, json)
Hash identifier: 7KlSHbvMIDd8yBz4TT/TRHFBRPSKbVnUeRyUmhTh7OI=
Subject key identifier: 3B:6A:95:84:43:CD:EA:35:59:A8:B7:F7:27:29:5B:2F:B9:5F:D9:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A041
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CE6B004A7211EF8099C188762E951A.roa
Signing time: Thu 25 Jul 2024 10:42:28 +0000
ROA not before: Thu 25 Jul 2024 10:42:24 +0000
ROA not after: Sun 04 Aug 2024 10:42:24 +0000
asID: 5065
IP address blocks: 156.248.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41025 (0xa041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:42:24 2024 GMT
Not After : Aug 4 10:42:24 2024 GMT
Subject: CN=66a22c13-e39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:d7:4d:a7:e0:43:e4:84:ec:d4:32:67:76:
0f:14:9a:51:fe:71:89:7c:a3:67:c0:02:af:e8:5f:
a5:f4:bc:98:c3:21:21:75:73:a5:cc:62:71:59:70:
3a:56:e7:25:99:6e:2b:dc:4a:ec:4c:cd:aa:d7:c1:
f5:18:f2:3a:36:62:4b:a5:09:d8:09:4d:4a:b9:8a:
a5:e9:fd:9c:b2:db:2b:a6:d8:8d:5f:bf:a8:59:67:
af:f4:a7:9a:79:34:ed:b6:c0:f7:e2:f4:0f:38:ac:
8a:81:3b:ca:54:5a:01:ed:34:f4:44:4a:ac:13:4b:
67:bf:63:a3:f0:d5:78:c5:87:87:c7:03:a9:27:e0:
61:ba:21:b7:53:7d:80:b9:3d:f3:fe:c4:76:9d:82:
54:77:2e:ef:88:8b:e6:72:51:7a:fc:f7:b6:99:e9:
5a:13:a4:55:d8:20:f8:5b:4e:b7:e5:25:09:01:76:
9e:d0:a7:16:7c:21:66:bb:0a:7a:8e:79:a6:e3:4e:
da:e6:be:1f:06:c7:07:b4:69:82:ec:ee:98:d8:92:
c4:20:fb:81:df:fa:1c:2e:6a:c7:0a:78:aa:96:2f:
1b:74:ab:42:15:25:6f:27:da:81:23:3d:ed:82:bf:
8f:4d:c5:a5:c0:3d:3a:e7:53:3b:20:8c:aa:9a:d9:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:95:84:43:CD:EA:35:59:A8:B7:F7:27:29:5B:2F:B9:5F:D9:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95CE6B004A7211EF8099C188762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.80.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:ab:8d:b7:c3:4d:07:eb:52:df:da:6d:26:b7:a8:73:e9:05:
d3:56:cf:f9:9d:20:88:89:e2:d3:29:7b:98:e4:7d:38:a2:15:
e1:f8:fa:43:c5:e5:e8:d9:45:5c:2c:06:00:32:a8:a1:b4:0f:
c6:77:b8:f9:d6:d2:19:42:93:02:b8:96:47:c2:29:53:1e:36:
07:6a:4c:11:22:3d:7b:b0:be:67:c1:42:51:b0:bc:1e:a5:a3:
43:2e:72:61:74:55:16:28:c9:44:2b:2c:5d:b2:fc:a7:a0:62:
27:3f:ee:f9:68:86:7b:b4:cd:ab:43:54:0a:82:fb:9c:e4:07:
71:a0:7e:29:7a:60:c4:6d:dd:23:74:82:26:12:96:c9:8c:1f:
7e:df:d1:c5:74:7b:c1:c0:65:d9:7a:26:dc:39:ab:13:22:e0:
fd:1e:c0:2d:85:75:1e:a8:3b:83:10:34:03:63:03:b7:f5:ba:
31:df:9b:2d:40:2d:e3:8e:14:d5:a6:68:3c:52:ee:e2:80:56:
21:b5:57:91:3d:79:60:df:20:85:39:f5:1f:50:c0:3b:d4:da:
fd:61:68:cb:d0:7f:c7:89:8a:12:a9:21:3f:49:2e:59:cb:1d:
9a:9f:b7:0a:5d:04:eb:84:fc:c6:f3:3d:b4:c3:54:ef:02:d9:
b4:d8:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:36 2024 by rpki-client on console-ams.rpki-client.org