Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED825B649A911EF81CDCEB3762E951A.roa
File: 9ED825B649A911EF81CDCEB3762E951A.roa (raw, json)
Hash identifier: 9W7NAIadnQwPnYQkjLDFIXx7ccxn1GKXUIZC8KmCgiM=
Subject key identifier: 1E:51:A3:51:C3:04:53:7F:D1:06:FD:73:79:A2:27:2C:0A:00:59:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED825B649A911EF81CDCEB3762E951A.roa
Signing time: Wed 24 Jul 2024 10:43:54 +0000
ROA not before: Wed 24 Jul 2024 10:43:50 +0000
ROA not after: Thu 01 Aug 2024 10:43:50 +0000
asID: 3491
IP address blocks: 156.230.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40787 (0x9f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:43:50 2024 GMT
Not After : Aug 1 10:43:50 2024 GMT
Subject: CN=66a0dae9-338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:6b:06:13:90:fb:cc:b8:3a:19:bf:48:d2:
58:60:2e:1d:06:49:ea:f2:06:b2:86:92:b9:5b:43:
71:21:64:3d:e0:a0:8e:53:30:78:47:fd:23:8c:ba:
92:ef:b3:37:97:d6:81:09:6b:60:b5:49:07:86:f7:
d5:50:53:1f:26:90:2d:06:11:98:a9:9d:f3:a9:0e:
d2:e2:41:4e:85:5a:15:6f:ee:f1:dc:53:fe:93:da:
c9:6e:a5:ab:cf:5b:e3:c7:02:68:6d:ff:17:27:98:
9b:25:de:96:cd:62:e9:8f:fb:e9:ac:67:75:59:4e:
55:77:3f:78:f6:1b:fc:d1:f7:30:7e:20:9d:98:db:
e3:e4:1d:51:78:ba:a2:45:e9:12:d3:f2:c3:6f:a6:
9a:17:68:63:03:c4:38:60:b7:25:57:0a:3b:a9:38:
af:40:13:d1:b8:0a:c5:da:33:b1:dd:fa:e2:d4:d8:
1b:d4:8f:19:27:35:52:66:c5:d4:fa:d0:ff:b9:95:
f0:ff:c9:ab:b6:a6:b9:b7:08:13:e4:13:a5:c5:56:
bf:4b:39:3f:17:a5:81:9a:3a:fd:eb:b2:6d:87:cf:
64:8c:ba:52:af:7a:5d:23:86:d6:07:27:fe:3a:3e:
27:c4:65:98:ce:6d:04:93:2e:c2:b9:14:f1:02:e0:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:A3:51:C3:04:53:7F:D1:06:FD:73:79:A2:27:2C:0A:00:59:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED825B649A911EF81CDCEB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.5.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1c:5c:0c:6f:79:20:60:79:46:ce:61:a9:2c:cc:93:8b:64:
ec:4c:ba:6a:03:86:ea:94:b6:64:5b:2e:57:ef:e0:46:8e:6e:
ea:a7:bd:80:7a:c3:07:e8:c3:23:f9:8e:79:93:e9:21:e6:ae:
ef:5a:20:e2:f3:b6:15:fd:12:08:cb:14:f7:d1:b1:a6:af:04:
82:c7:e0:e6:c4:de:f6:39:d6:b2:cd:46:25:fb:38:1a:50:07:
7d:b2:ae:73:3f:1e:fc:f4:99:80:5d:c9:69:92:3c:e8:4b:2d:
c4:ed:49:d0:d1:22:63:31:5f:44:05:f7:ad:4c:68:97:f6:eb:
13:30:8e:d8:8e:63:4a:44:fc:38:61:75:f7:9c:77:f0:e9:7a:
d2:1a:e5:3a:b7:a2:42:9f:0f:71:be:06:d8:a3:4b:c9:53:4c:
22:75:63:5f:51:82:b8:2a:82:c4:ae:02:89:ad:b1:41:9a:fe:
5d:9a:c5:f0:e8:e2:78:71:e1:f7:8c:02:23:df:ab:29:da:77:
1c:20:6e:13:93:5f:f8:02:65:74:7a:42:72:7b:fe:8e:ce:de:
25:73:24:b9:24:a5:92:ff:df:03:33:a6:34:dc:17:9d:94:a5:
c3:26:2f:7f:28:27:79:6b:da:83:6f:f4:79:6e:af:98:6c:54:
6e:47:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 04:03:11 2024 by rpki-client on console-ams.rpki-client.org