Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A282EB1E4A6811EF95BBB447762E951A.roa
File: A282EB1E4A6811EF95BBB447762E951A.roa (raw, json)
Hash identifier: MkbyQI1Igv4RnLHV79wkg1JJSbP/Nqct9HL6f/+yRQw=
Subject key identifier: C5:6A:82:0E:F1:A7:07:50:FE:DF:9D:9D:4F:CB:66:F0:B4:49:11:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A00D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A282EB1E4A6811EF95BBB447762E951A.roa
Signing time: Thu 25 Jul 2024 09:31:14 +0000
ROA not before: Thu 25 Jul 2024 09:31:10 +0000
ROA not after: Sat 03 Aug 2024 09:31:10 +0000
asID: 5065
IP address blocks: 156.233.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40973 (0xa00d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:31:10 2024 GMT
Not After : Aug 3 09:31:10 2024 GMT
Subject: CN=66a21b61-cbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:88:41:45:6e:ad:22:5e:05:1e:d9:66:74:
cb:7b:c7:40:b8:d2:0c:57:10:a4:07:95:4b:3c:99:
99:cd:a5:6b:a4:85:ed:4f:e7:66:dd:ff:90:a9:a4:
32:44:93:56:8c:94:f4:d6:ee:b3:4c:cf:ae:38:d1:
dd:d9:de:de:ea:87:f9:92:00:b7:0b:38:5f:93:32:
c5:43:f3:bc:f1:ea:91:b3:03:31:ab:9e:d7:66:35:
96:d1:3c:1a:b2:13:fb:46:c2:9b:27:34:d5:8f:4e:
38:83:a4:24:2b:a2:cf:b9:68:b0:ef:f3:93:97:e6:
f7:ee:24:46:cc:ad:04:2e:ad:3c:4c:c5:67:8e:b8:
0f:df:35:65:72:ac:36:35:65:61:6c:35:50:7d:77:
40:3a:28:72:01:b4:ef:df:ab:2d:74:61:7d:87:10:
9f:3a:a9:f5:6c:c5:38:5f:6c:88:a2:e0:da:4a:4a:
0c:f4:e1:5f:69:66:c4:33:8a:8e:dc:2d:2a:c9:24:
e0:75:ac:e8:ea:6b:97:72:dd:4e:74:e6:78:aa:8e:
47:fd:3f:92:78:0b:e6:61:46:1e:d1:d0:ff:00:ee:
1d:6b:b6:50:93:f1:b2:de:f7:81:c0:7a:36:b9:ba:
c6:c0:8c:9e:b5:fe:73:70:8a:23:65:a5:66:75:60:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6A:82:0E:F1:A7:07:50:FE:DF:9D:9D:4F:CB:66:F0:B4:49:11:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A282EB1E4A6811EF95BBB447762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.23.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ad:ce:69:81:bf:98:d3:08:1a:6d:39:31:09:a3:ba:1d:9c:
1d:44:c2:2b:98:cf:66:15:8a:f3:eb:53:1c:82:b5:4f:95:a8:
b4:fe:87:f8:40:de:99:71:72:83:9c:d2:0a:9b:50:9d:da:cd:
04:bf:8a:49:46:5e:fe:d1:af:32:24:00:47:a4:de:31:c1:9f:
35:0d:5f:72:5e:6e:0a:96:55:bb:0c:68:5c:f9:3f:50:c9:78:
08:52:a8:4d:cf:d8:87:ce:66:c0:67:8d:79:23:52:c8:9f:b7:
6b:c7:7d:c6:3a:16:b9:01:cd:c8:30:bb:fd:c3:29:aa:e0:c0:
b2:2e:2e:88:4c:1e:aa:01:b2:d4:33:fe:3d:7d:5c:57:6d:d1:
39:64:62:fc:c8:6d:68:94:a4:77:77:a9:97:60:01:dc:1d:f1:
e1:3d:a4:1a:35:0b:dc:62:4e:cc:de:76:46:49:fa:de:0f:15:
1f:7d:35:b4:97:85:a2:d2:5d:1d:30:83:09:46:89:73:00:2c:
5c:12:88:83:15:b5:c8:ca:21:55:6e:c3:53:64:b9:e4:4b:44:
a1:83:e0:f8:e4:43:ef:e8:43:3c:c8:c4:09:3f:83:b5:59:a4:
c6:5a:89:24:df:40:23:9a:11:c5:b6:4f:84:10:e4:35:fd:21:
d5:aa:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org