Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD23D6AF0BC11EEA22D7752775412E6.roa
File: 9CD23D6AF0BC11EEA22D7752775412E6.roa (raw, json)
Hash identifier: CyNNdEQXTm7m/F7Ak8M8xMYn/wv7jlM16xg8iLxv3u4=
Subject key identifier: 99:BA:15:D9:E9:C6:42:C9:66:75:4B:61:74:96:1B:DE:75:84:83:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8132
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD23D6AF0BC11EEA22D7752775412E6.roa
Signing time: Tue 02 Apr 2024 06:45:37 +0000
ROA not before: Tue 02 Apr 2024 06:45:34 +0000
ROA not after: Mon 29 Apr 2024 06:45:34 +0000
asID: 139646
IP address blocks: 156.246.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33074 (0x8132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 06:45:34 2024 GMT
Not After : Apr 29 06:45:34 2024 GMT
Subject: CN=660ba991-64f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:73:03:85:0c:23:73:2f:e9:e4:91:c9:da:5f:
1f:18:35:07:69:6a:08:f6:b4:57:fc:03:93:ed:e6:
fa:62:9e:e3:b9:9d:b1:7c:bc:e2:f5:ec:41:85:2e:
0a:12:78:56:d1:95:13:45:3f:2f:3e:3a:ce:0e:d1:
6c:dc:61:4c:57:85:f5:91:bf:6f:21:eb:f4:a4:d3:
d7:a6:c8:8c:b8:ba:56:9a:68:45:3e:c1:2a:f4:fd:
2b:a5:ed:37:e1:ed:2d:34:01:9f:f1:09:9b:ce:e4:
e3:28:ab:96:36:69:3d:ce:0d:bd:bc:ba:35:7f:cd:
c0:b0:04:04:31:82:7a:87:01:3c:f9:2e:7d:f1:64:
d6:50:16:f8:1a:e7:3b:0f:48:42:b2:20:4f:a1:b7:
bb:12:aa:c2:5b:13:55:88:4c:ec:3f:cc:a6:c9:19:
2c:1d:a0:73:25:0b:38:96:83:fd:d7:a6:3c:54:84:
2d:6f:69:82:45:41:99:60:99:f0:c0:95:da:97:37:
2f:1e:5d:b5:28:5c:e5:bb:60:4c:f3:51:5f:d2:0b:
b4:6c:3d:9d:f7:cd:a3:08:dc:9a:42:8c:81:ff:d2:
2a:f5:19:de:5f:b8:a3:a2:a3:83:3f:1e:39:c3:92:
93:79:50:fc:ad:97:15:cc:23:0a:64:05:44:8e:2d:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:15:D9:E9:C6:42:C9:66:75:4B:61:74:96:1B:DE:75:84:83:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD23D6AF0BC11EEA22D7752775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.12.0/23
Signature Algorithm: sha256WithRSAEncryption
89:1d:bc:3a:82:9f:45:f8:34:69:d6:fc:09:36:59:be:fb:4a:
7e:94:1d:23:59:27:22:fc:79:54:06:6e:25:96:05:7e:87:60:
2b:0e:e9:d2:7c:12:5a:ad:af:bf:97:86:ed:a7:49:d8:42:bc:
ed:86:d7:71:bb:6f:a2:01:61:0d:70:96:ee:74:02:29:1b:3d:
30:49:1c:7e:73:14:03:27:64:d5:e7:f0:0b:3b:cc:3a:80:f5:
59:4a:1a:13:b8:67:1b:8e:34:8e:81:5e:8b:3f:50:08:f5:0d:
1f:4c:a4:ac:e6:2a:ff:22:90:b2:b6:d9:d5:38:48:4c:92:1a:
88:45:12:09:54:65:07:5b:82:d3:b3:c4:a5:15:c2:55:67:a3:
21:41:15:58:84:03:ad:10:40:2d:0f:cc:99:a6:7d:d2:e7:a4:
56:fb:a7:36:1a:eb:10:46:a5:c0:d5:4b:89:73:7e:ed:ec:30:
e2:7b:cd:1c:2c:c7:3b:4d:71:85:07:5b:c8:37:c5:bc:42:de:
3c:aa:50:db:ab:6e:e1:5a:1b:8e:2c:29:67:9b:c5:fb:93:20:
ec:41:16:06:7b:96:23:16:52:4e:9e:59:6d:1f:c6:95:e5:a6:
4d:7a:ae:22:8c:e2:43:d4:04:72:fc:2b:57:14:81:6e:1f:6c:
e1:b2:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org