Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C4CC020C0B11EFAE01EDFE007001B1.roa
File: A0C4CC020C0B11EFAE01EDFE007001B1.roa (raw, json)
Hash identifier: B+jRr5DbOwTdHU5RPrlMyKX539CJQKW3xkbSABvs+g4=
Subject key identifier: 26:63:09:63:BF:79:56:93:96:8D:A4:40:AF:0E:36:21:0E:39:C1:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8824
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C4CC020C0B11EFAE01EDFE007001B1.roa
Signing time: Tue 07 May 2024 00:49:15 +0000
ROA not before: Tue 07 May 2024 00:00:12 +0000
ROA not after: Sun 02 Jun 2024 00:00:12 +0000
asID: 54467
IP address blocks: 156.239.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34852 (0x8824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 00:00:12 2024 GMT
Not After : Jun 2 00:00:12 2024 GMT
Subject: CN=66397a8b-ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:53:2d:53:1b:a2:56:6b:3b:6f:1f:46:89:
d9:9f:ca:7b:6c:5f:47:83:95:8f:22:ab:be:90:57:
e8:bc:7d:fc:1e:55:39:e8:18:11:c5:17:0c:bd:44:
7f:00:3d:e7:f7:c9:24:44:66:f0:bd:bc:46:84:b6:
c8:6c:a3:86:33:ed:e6:32:f6:38:4b:ef:c8:bb:27:
02:52:93:c6:c3:39:fb:11:8f:9c:a0:25:64:bf:50:
ff:97:99:cb:d0:3f:4a:1b:1d:2e:1d:ed:64:69:62:
bd:4f:ed:cd:89:ef:10:15:8f:92:99:14:97:95:ea:
54:4d:fa:89:48:06:b4:8e:b7:5a:08:a8:40:7e:99:
fe:49:16:b2:25:fc:5b:34:e3:89:cb:d8:69:1d:cd:
43:23:51:cf:c6:b6:11:ad:77:46:fa:f0:71:62:3f:
59:7d:84:15:23:ee:b3:c0:b4:55:d8:55:ed:5f:0c:
10:5b:eb:2a:5e:2b:82:be:21:fd:de:8a:5f:f1:f2:
18:a7:99:8d:79:43:6a:d9:dd:03:d3:ce:23:f9:f5:
fe:52:9c:f7:19:d0:22:b0:de:f8:33:2f:60:3e:e8:
2a:d1:f6:0c:df:8c:2b:eb:56:22:83:93:05:cc:9e:
22:12:81:e0:5a:a0:8f:71:e9:e9:b9:62:8c:36:bc:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:63:09:63:BF:79:56:93:96:8D:A4:40:AF:0E:36:21:0E:39:C1:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C4CC020C0B11EFAE01EDFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:cd:18:81:4c:3e:d5:13:df:d0:0b:65:00:93:81:46:b4:74:
43:41:fc:67:f2:d6:4b:c8:ae:ba:95:49:90:a6:c4:d9:13:21:
fe:14:eb:60:59:8b:85:97:b4:b0:00:cd:8c:81:09:6b:31:38:
08:6c:e1:a7:13:dc:1c:6f:6c:3c:66:19:86:1c:3d:a1:18:d2:
a9:97:c4:0c:d8:0d:54:1e:bb:bf:5f:2e:b4:09:df:b4:bd:59:
5b:d6:af:ab:6a:30:9d:1e:55:4e:0d:e8:fc:54:ad:0c:17:d9:
7f:c8:d2:1f:4c:4f:d0:94:6b:93:78:50:99:96:89:0e:b8:bc:
36:74:88:e3:24:7a:8e:5e:83:69:2d:33:82:7e:75:59:86:eb:
13:f3:05:7d:f9:a2:df:c4:1f:ef:73:95:41:56:6f:03:76:ea:
26:23:55:90:3a:aa:44:95:8b:f4:f1:c3:60:d6:4a:53:bd:9e:
2d:61:6d:28:2f:7b:27:13:76:db:58:3c:5d:70:9a:b6:1a:6d:
64:37:8c:8d:37:20:33:ac:5e:d5:b4:14:c2:19:8c:9d:eb:b1:
22:8e:fe:9d:30:52:b9:ec:fc:0a:6b:38:92:01:70:78:2e:92:
04:a8:c3:6c:af:5a:c4:3a:aa:11:f3:68:b7:5c:58:13:5e:18:
10:4a:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:28 2024 by rpki-client on console-fra.rpki-client.org