Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B22C168435C11EFA2A9C05A762E951A.roa
File: 9B22C168435C11EFA2A9C05A762E951A.roa (raw, json)
Hash identifier: Fy1VhHc8zEzZQCBpnd9J29wPkoqjQqNmXbMY2yaYaPE=
Subject key identifier: 97:5B:21:4C:CC:3B:AB:66:86:35:55:04:D1:27:6A:A3:5E:8F:B5:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B22C168435C11EFA2A9C05A762E951A.roa
Signing time: Tue 16 Jul 2024 10:17:29 +0000
ROA not before: Tue 16 Jul 2024 10:17:26 +0000
ROA not after: Wed 07 Aug 2024 10:17:26 +0000
asID: 135097
IP address blocks: 156.226.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40127 (0x9cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:17:26 2024 GMT
Not After : Aug 7 10:17:26 2024 GMT
Subject: CN=669648b9-481a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:f7:e0:10:49:31:78:e2:99:f4:1d:3a:30:
d5:2e:3d:06:dc:37:d3:13:e0:a7:5b:7e:f8:4c:96:
49:bb:f7:e9:fb:09:1d:71:d0:1b:ab:9e:85:3d:23:
8d:97:9a:51:7d:b8:ce:9b:53:7e:6e:ef:bd:50:ea:
7c:40:e9:d3:e7:9b:7a:ea:c4:dc:ed:2e:63:4a:85:
76:76:31:26:c7:ca:e5:d7:9c:10:de:3b:6b:4c:38:
4c:b9:8f:e7:1c:9c:70:1f:1e:8d:ff:58:88:1c:66:
a8:54:29:8a:c2:0f:99:72:7c:34:2a:9b:d8:b4:08:
99:e8:9e:26:2d:cf:4c:45:80:71:a1:02:37:8b:79:
c6:a4:50:18:04:95:b0:23:8b:86:a7:a7:0c:9c:db:
a1:21:3a:e6:d8:49:88:67:86:c9:74:89:37:fb:d8:
4c:f0:33:1f:81:73:2b:93:a5:ce:5b:12:85:11:7a:
1a:c9:43:db:5f:b3:99:7f:6d:c3:04:22:45:aa:3f:
69:99:61:9d:9f:6d:d1:4a:a0:1a:5e:ef:36:82:18:
64:48:24:ea:28:e3:e5:f9:37:98:80:d1:e7:12:a3:
18:14:50:92:af:34:ac:1a:24:3a:3b:10:a1:8e:25:
be:97:5d:2c:9d:7a:6d:eb:85:55:90:c3:5d:b8:77:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5B:21:4C:CC:3B:AB:66:86:35:55:04:D1:27:6A:A3:5E:8F:B5:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B22C168435C11EFA2A9C05A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:70:84:c8:e6:01:e5:de:d7:12:fc:c6:ca:ff:56:d1:47:0d:
a6:f2:e4:64:38:7c:49:50:58:7d:bb:fb:24:52:fa:ca:27:f9:
7d:34:4b:e0:a5:93:bc:82:0e:a4:f3:6d:f4:44:62:cd:00:22:
80:99:89:16:83:32:34:1f:ab:00:6b:96:3b:53:29:e4:27:2a:
8b:29:12:63:d8:96:7e:aa:6d:0e:78:60:8d:a9:3b:70:24:5d:
01:e5:b0:40:b7:0e:98:9a:2e:98:f1:57:62:d0:f4:30:12:b1:
31:63:ab:20:62:0f:86:58:25:63:46:8c:4e:d4:7c:fe:04:bc:
d0:8b:f6:9c:d6:43:77:53:5c:e5:46:fd:57:5c:7b:32:75:a9:
83:1f:69:7e:c2:a7:92:f2:c9:d5:da:e9:42:5a:69:6a:1f:50:
0f:25:4d:f6:c2:92:88:5e:3d:ef:12:39:ab:07:63:dc:66:8e:
9b:4c:c2:69:84:de:58:de:be:08:7c:2d:4d:39:36:cf:c4:fd:
a1:f0:e5:07:7c:cf:e0:c7:24:cb:9c:bf:c1:83:62:ae:f8:ee:
88:47:b3:19:06:b4:7e:aa:36:a8:f2:f1:ea:bf:ec:73:5a:55:
4f:62:4f:bd:c2:86:06:50:e0:28:59:78:d2:fe:be:1a:0b:bb:
15:8e:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 04:08:13 2024 by rpki-client on console-ams.rpki-client.org