Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F95920247D511EFBACA3649762E951A.roa
File: 9F95920247D511EFBACA3649762E951A.roa (raw, json)
Hash identifier: 9FAs2jeU/lZAHt7EPZja/RUAOojgv+SYigStHrjSUfY=
Subject key identifier: 9A:7F:D8:86:55:81:07:08:08:8E:37:EE:49:B4:4A:AD:92:F4:26:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DDB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F95920247D511EFBACA3649762E951A.roa
Signing time: Mon 22 Jul 2024 02:53:50 +0000
ROA not before: Mon 22 Jul 2024 02:53:47 +0000
ROA not after: Fri 23 Aug 2024 02:53:47 +0000
asID: 44559
IP address blocks: 156.246.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40411 (0x9ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:53:47 2024 GMT
Not After : Aug 23 02:53:47 2024 GMT
Subject: CN=669dc9be-cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:83:af:01:0c:12:18:78:64:bb:1b:47:9f:
65:54:28:db:5c:83:89:2c:26:0d:1d:12:b5:87:d4:
47:8d:b5:b9:02:87:57:d6:0a:74:60:61:39:22:d0:
c1:3a:88:a2:1a:02:55:e6:dc:cc:17:b6:f4:8b:93:
18:bd:37:fd:0a:0f:ea:09:e0:88:14:82:f0:98:45:
44:bf:64:13:ab:9a:03:5a:ed:bb:ef:a3:b4:cf:04:
74:14:62:d4:bb:c6:b5:c6:70:8f:da:5b:c2:a7:e4:
f5:49:45:0c:01:a1:4f:72:4e:fc:64:57:33:f7:67:
f8:23:3b:c0:01:dd:6a:1a:c4:54:96:8e:79:e3:97:
2c:a6:8c:07:38:79:ef:c9:af:fd:bb:00:98:7f:3b:
a0:5e:83:ba:70:52:84:f6:3c:59:f7:f8:d9:69:c0:
fb:1d:47:38:4a:d4:f2:b8:a8:81:4d:c1:df:9d:95:
aa:3d:0b:9b:13:7f:2c:5c:28:8c:27:3d:02:af:2e:
78:ed:60:0b:6f:ff:67:c8:54:ff:6e:09:6d:9a:4b:
13:5f:f8:3b:96:4d:dd:33:ed:5b:7c:3b:ab:99:b7:
3a:aa:0f:5a:97:88:1d:d4:a1:0e:2b:31:e4:52:dc:
af:b2:3c:83:cf:c8:ca:9b:77:57:3a:9a:c4:69:5a:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:D8:86:55:81:07:08:08:8E:37:EE:49:B4:4A:AD:92:F4:26:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F95920247D511EFBACA3649762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.241.0/24
Signature Algorithm: sha256WithRSAEncryption
28:51:95:77:62:a5:d6:e4:ac:22:e5:34:65:69:7f:a7:b0:ab:
40:61:01:c7:05:3b:ed:c5:a6:ff:d4:75:2e:2f:61:9b:cf:b2:
1b:17:db:36:ff:51:cf:28:45:32:3b:4b:cf:f8:05:da:6b:3f:
ad:78:8c:7e:a1:3f:5b:7f:ac:ea:92:4f:55:2a:93:30:87:52:
0d:80:ba:0b:06:9b:68:c1:bb:ca:a9:6e:f5:f5:ed:78:d9:8f:
83:bc:fe:89:78:35:34:dd:3f:bf:65:69:bb:e2:34:8e:e4:55:
48:79:a8:75:3a:68:22:bc:a9:8e:f2:46:30:51:d1:f3:74:d5:
da:c1:ac:e1:aa:94:34:eb:a3:a0:1c:0e:33:f7:4b:1c:b8:08:
68:3c:3b:52:6c:25:a1:13:dd:ae:7b:d2:b9:6a:39:de:f5:60:
c3:2a:27:b2:06:55:dc:06:31:de:20:86:42:79:79:f3:a4:37:
e6:4c:bc:ab:9d:4a:da:ed:58:1f:14:c4:92:5a:2f:24:98:36:
0b:2f:7b:46:08:10:fd:ff:1c:b6:13:cb:91:2a:9a:1e:19:f3:
14:6b:10:b1:76:e5:80:01:a1:c9:62:27:f4:c4:86:e5:d0:d5:
a9:6a:13:a8:cb:bb:09:62:e4:13:08:16:bb:9f:c3:5c:76:04:
f1:e9:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org