Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F00D00E2EE911EF8DB73645762E951A.roa
File: 9F00D00E2EE911EF8DB73645762E951A.roa (raw, json)
Hash identifier: /uiO4McRhpP1B/jyb95D7wPw0ZYT53TkAXyuVLrxRcw=
Subject key identifier: 1F:0A:6B:8B:53:BA:25:98:29:CB:B2:E5:4A:26:02:E0:AA:09:A5:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 93D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F00D00E2EE911EF8DB73645762E951A.roa
Signing time: Thu 20 Jun 2024 09:44:00 +0000
ROA not before: Thu 20 Jun 2024 09:43:57 +0000
ROA not after: Mon 12 Aug 2024 09:43:57 +0000
asID: 135097
IP address blocks: 156.224.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37845 (0x93d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 20 09:43:57 2024 GMT
Not After : Aug 12 09:43:57 2024 GMT
Subject: CN=6673f9e0-869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:09:f3:60:c0:79:78:b4:54:dd:2b:05:5e:
da:ed:02:fd:35:27:90:c8:14:e3:30:a8:23:f8:7f:
86:13:1f:cb:75:e5:3b:c8:00:da:ab:14:60:fa:8d:
2e:81:c0:23:db:f7:f5:7c:93:16:f0:11:14:d5:e3:
c3:d6:c6:e4:75:01:0f:de:96:ce:5b:60:e7:4d:07:
05:5b:b2:4c:4f:ba:39:b4:5a:e7:da:ee:6a:ad:47:
2f:37:d7:8e:26:96:51:f7:7a:3c:e2:c5:16:c8:e5:
f4:ae:39:d0:ee:ea:20:9a:9b:dd:a8:52:27:b0:8e:
be:b9:1a:4e:03:8d:b8:3f:89:45:da:6b:a8:9f:b6:
04:33:6b:17:f2:5d:31:a4:30:88:1b:86:87:cf:f6:
de:66:90:74:4a:93:06:a8:85:24:db:84:d9:00:2a:
50:c7:c5:25:f8:9d:12:eb:73:96:78:1e:12:de:f6:
d6:59:30:c2:bf:3f:42:8a:c8:fd:fa:7b:31:d4:07:
9d:8d:2a:b1:a5:d0:ed:d2:80:5d:db:c2:cf:89:e7:
36:65:a5:e7:cc:f6:22:19:f3:6f:c4:34:33:7f:fe:
e4:f1:18:42:81:73:f7:81:8e:b4:34:2e:4b:fc:a4:
6f:94:32:f6:b2:86:fd:00:04:4f:f7:2b:25:84:5f:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:6B:8B:53:BA:25:98:29:CB:B2:E5:4A:26:02:E0:AA:09:A5:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F00D00E2EE911EF8DB73645762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.192.0/18
Signature Algorithm: sha256WithRSAEncryption
13:52:f7:e4:15:85:d2:0f:2e:59:35:ef:f8:84:d8:b7:d0:fc:
ee:74:6f:68:21:7a:f3:55:6a:8b:5b:bc:3c:2f:e9:44:9c:69:
a3:37:b5:2c:17:96:d4:84:ad:33:5f:67:86:34:24:b2:62:1d:
51:9f:9d:f8:64:f6:2f:ab:5b:ff:c6:b6:f3:9b:03:37:ad:db:
0c:75:0a:1e:28:37:26:ff:ce:1a:5d:bc:3d:fc:c2:77:c4:07:
fa:cf:7c:18:0d:68:de:92:24:02:3f:dc:9e:88:48:cb:73:a2:
18:f8:ce:0c:d5:ea:3d:06:4c:f7:cf:9d:59:92:c9:23:a8:fa:
0d:ca:f4:1e:4f:ff:c4:29:9b:d9:15:1a:ff:e5:da:40:32:a6:
07:d1:c0:f1:5e:ba:66:45:ba:d3:83:9e:00:20:39:fc:c1:ba:
d3:ff:77:18:f4:90:b6:fa:fb:45:38:d4:56:45:3e:5a:c9:20:
b0:10:ac:2c:2a:cb:51:6e:43:61:1d:e2:fe:cd:6f:c6:c8:b9:
a7:51:71:6d:d5:68:8e:09:7f:cf:f3:15:bd:dc:d7:be:0c:b4:
0d:67:06:ed:84:4f:f5:05:37:0e:79:84:8b:f4:37:97:0d:49:
68:64:a4:3f:94:d3:44:ac:e9:09:5c:03:a4:79:24:a5:8e:29:
69:66:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 04:44:31 2024 by rpki-client on console-ams.rpki-client.org