Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C5987B4441611EF8026AA50762E951A.roa
File: 9C5987B4441611EF8026AA50762E951A.roa (raw, json)
Hash identifier: 1sHZzFPBeIZms1Gm8+TeAMYgMaNhUAMXgNm48cP5ZnU=
Subject key identifier: C9:0B:26:B0:41:DF:22:2F:61:C5:E0:37:B4:17:84:0B:0B:3B:6C:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C5987B4441611EF8026AA50762E951A.roa
Signing time: Wed 17 Jul 2024 08:28:58 +0000
ROA not before: Wed 17 Jul 2024 08:28:54 +0000
ROA not after: Sat 27 Jul 2024 08:28:54 +0000
asID: 5065
IP address blocks: 156.239.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40218 (0x9d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:28:54 2024 GMT
Not After : Jul 27 08:28:54 2024 GMT
Subject: CN=669780c9-73ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:29:7e:7b:16:f0:57:72:3e:ef:c1:e9:c2:
be:86:27:c3:9e:b3:10:ae:7b:ac:14:94:c8:46:b3:
53:f3:39:f6:89:c8:6e:e1:02:56:7a:3e:9a:0d:91:
ce:6a:01:64:73:cd:1e:23:f9:c2:0a:c3:03:b8:48:
f3:bb:68:4c:14:e3:2a:d9:4d:e8:5d:70:db:a9:ff:
98:3a:3e:f9:57:8e:d2:d7:22:20:ad:45:f8:fc:56:
ba:72:f9:eb:ff:c6:ff:ed:10:46:75:b0:a4:fd:59:
52:f3:b2:98:aa:2a:be:48:9e:4e:77:aa:29:12:fa:
10:12:21:41:d2:dc:60:b7:4b:a5:b7:e0:69:de:b0:
98:56:84:45:7b:4c:a3:a5:72:e5:cc:00:6b:68:a0:
63:30:63:97:68:25:58:2f:62:67:6a:ab:7f:b2:97:
6e:4c:7b:84:36:cd:ce:fa:a3:a2:52:53:f5:82:61:
a0:a7:29:a8:6a:b6:30:5f:87:9e:ed:e3:e3:d6:f0:
47:08:96:63:4a:54:3e:29:a3:b9:70:53:9b:0d:d9:
1e:93:bc:92:35:69:b9:37:3b:85:3e:6b:a8:1b:26:
77:c0:e9:4f:c7:5a:07:76:4d:ca:4b:84:ee:0c:43:
de:74:e5:98:70:70:e4:8e:43:ce:93:43:eb:e0:d6:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:26:B0:41:DF:22:2F:61:C5:E0:37:B4:17:84:0B:0B:3B:6C:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C5987B4441611EF8026AA50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fe:a6:6c:cd:fc:a9:27:1f:51:77:fe:0a:56:a9:45:99:05:
83:9e:27:fd:4d:96:58:dc:6a:23:4a:4f:cf:22:1a:55:62:b5:
5a:6a:83:26:0b:12:79:ac:3f:b4:ee:e8:e9:d4:53:ea:5b:39:
07:09:7e:36:af:1d:81:36:94:56:ad:ba:37:b9:88:2e:6c:bb:
ea:98:14:64:81:80:6c:e0:58:f6:af:dd:2c:b9:b1:8a:ec:56:
e4:29:3a:a2:00:fb:65:51:ae:51:ea:9d:00:a8:79:bd:a2:3f:
1c:2b:63:7d:fb:3f:08:fa:71:d0:65:9d:5d:5b:17:08:a3:60:
3d:a9:c4:79:54:e5:d6:0b:60:51:5c:b5:79:49:c7:c9:f9:ed:
ed:24:8c:11:0d:1e:e3:7f:b8:a4:52:ac:bb:ce:3d:e4:a8:5c:
d9:c0:d3:f8:b0:e5:f0:4a:61:1f:b0:3a:54:0d:4d:8a:cc:59:
e2:cc:76:b9:85:65:fc:1b:77:9f:38:e5:f3:26:01:85:68:da:
4f:bd:a1:d8:b7:e9:66:5c:d7:1b:35:a9:88:bb:39:42:c7:11:
95:fe:d9:49:34:f7:85:29:d1:e9:88:fb:b3:57:18:f6:e9:7b:
b4:ec:7b:2b:74:43:17:ab:96:93:ef:42:9a:c0:34:82:a6:f2:
f4:10:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org