Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97C31B3C499511EFA18E88AA762E951A.roa
File: 97C31B3C499511EFA18E88AA762E951A.roa (raw, json)
Hash identifier: kAGO/kEk6VDuHa+YO3zi+NkKV0IALqbyRDsFE2fHeQQ=
Subject key identifier: 97:97:7E:92:F8:3C:AD:4A:D3:CE:48:BC:B1:CE:FA:D7:2F:E5:6A:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97C31B3C499511EFA18E88AA762E951A.roa
Signing time: Wed 24 Jul 2024 08:20:32 +0000
ROA not before: Wed 24 Jul 2024 08:20:28 +0000
ROA not after: Fri 23 Aug 2024 08:20:28 +0000
asID: 202656
IP address blocks: 156.246.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40713 (0x9f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:20:28 2024 GMT
Not After : Aug 23 08:20:28 2024 GMT
Subject: CN=66a0b950-0ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:2e:3e:93:a3:fa:d0:0a:b1:38:79:b9:c1:
db:7f:ab:d8:79:38:dd:7c:d7:4d:36:0d:75:95:d5:
a7:a2:f0:e2:61:32:6c:d7:35:b0:26:1b:a3:44:10:
45:5a:0f:d1:7b:15:ed:78:2b:7d:b1:e0:3c:ab:88:
a3:4f:a7:de:f0:bf:29:18:83:42:71:68:2f:70:22:
ff:7b:0a:56:c2:6f:fc:f0:11:37:76:07:e9:c2:8b:
68:64:6d:86:d6:f6:dd:b3:62:74:8e:36:fe:0b:63:
3a:5c:ee:45:ed:d4:cf:bf:dc:49:05:36:f4:7e:fa:
d7:81:02:2a:e1:20:47:7e:59:73:42:d2:4b:02:41:
e6:41:55:7e:8a:4d:73:76:68:27:78:8b:3a:ed:d4:
e3:f2:74:e5:80:14:ae:8a:42:7f:d1:1f:21:5f:66:
52:8b:eb:ef:29:39:22:dc:ef:e2:8d:d8:b9:41:27:
39:50:d2:c4:a3:74:97:9a:1e:6b:d5:9f:ef:52:3c:
19:7d:ee:b3:d1:f1:a2:e0:ef:c2:b4:71:12:cb:c9:
8a:53:50:6f:93:9e:db:cb:01:5d:27:ad:66:13:5e:
ac:c9:45:70:48:c8:53:c0:6c:f7:e4:77:21:69:3d:
ac:7c:09:5c:be:15:2d:41:ff:fa:fe:2c:f8:94:de:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:7E:92:F8:3C:AD:4A:D3:CE:48:BC:B1:CE:FA:D7:2F:E5:6A:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97C31B3C499511EFA18E88AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.167.0/24
Signature Algorithm: sha256WithRSAEncryption
56:da:54:00:75:b6:0f:dc:2f:da:c7:f8:a4:c1:fc:d3:3d:dc:
ee:94:1f:27:4d:86:97:9a:d2:9e:02:dc:29:fa:3f:1b:f7:40:
c7:d4:f7:9f:de:b1:f5:8e:f0:eb:23:47:a7:e5:71:e7:99:e3:
76:2c:a9:09:89:5f:60:b6:a2:28:b1:dd:db:76:c6:57:78:30:
c1:a6:fe:71:11:84:a7:41:76:45:ab:b4:a6:fa:19:42:1b:58:
71:e9:4d:8e:49:7b:48:4c:ae:49:45:44:16:a8:0a:43:a2:5a:
11:34:dc:73:11:ee:a5:92:6b:0b:2a:35:f1:9e:5a:d1:ee:2e:
32:71:94:79:9b:67:a2:06:88:e6:a5:25:47:d5:2c:eb:0f:e9:
9f:dc:16:73:94:ea:92:46:28:8f:19:e7:24:ba:7b:87:3c:b6:
04:58:04:55:dd:53:04:83:0c:f3:90:78:bb:79:08:0b:a8:7e:
04:3e:4e:1f:e6:ab:af:7f:e4:9d:38:e6:3f:84:3a:b3:f3:a3:
68:b3:2c:e7:48:8f:ea:0c:92:d2:fb:d6:e6:6a:b6:db:cf:62:
74:7c:15:83:bc:a2:ec:8b:7d:63:33:75:55:47:26:1a:f2:fa:
9d:ce:79:59:1d:dd:78:d4:b0:72:d8:9f:21:86:eb:ec:ed:43:
80:27:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org