Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B9957648C711EFADFE71B2762E951A.roa
File: A2B9957648C711EFADFE71B2762E951A.roa (raw, json)
Hash identifier: TP3zCnGhqFZf1Na6qajKC0DVhgIkTGY2sDGVjyZfiz8=
Subject key identifier: 7F:9A:31:ED:30:B6:82:11:41:BF:59:3B:17:3E:A6:FB:88:6B:CC:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B9957648C711EFADFE71B2762E951A.roa
Signing time: Tue 23 Jul 2024 07:46:14 +0000
ROA not before: Fri 26 Jul 2024 07:46:11 +0000
ROA not after: Fri 23 Aug 2024 07:46:11 +0000
asID: 202656
IP address blocks: 156.246.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40556 (0x9e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:46:11 2024 GMT
Not After : Aug 23 07:46:11 2024 GMT
Subject: CN=669f5fc6-68d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:77:93:ee:38:0f:7c:04:6a:d7:d6:04:28:
2f:ba:f9:4e:12:68:b9:08:78:1b:cb:c6:4d:f6:57:
4d:f9:49:35:15:8c:5f:9d:d1:8e:d5:27:75:48:5c:
12:1e:c3:a8:55:0f:0e:2c:43:19:bd:41:63:91:f6:
4c:07:d9:a0:2d:87:03:a9:8a:c9:05:4d:04:18:94:
1e:c5:d3:3e:df:01:fa:72:70:0c:62:ac:25:5c:77:
b3:de:d6:a7:da:e7:f2:1e:f2:b6:0a:48:57:78:f6:
3d:48:34:35:cf:f3:9f:57:8f:68:cd:77:6e:9c:28:
69:13:c2:fd:f4:95:a0:6a:fe:93:b0:ef:22:64:d2:
fa:0a:82:3c:37:0a:e5:54:1a:7a:83:7c:57:1b:41:
8c:21:a2:dc:a2:fa:96:c6:75:54:cc:0a:0f:5e:ab:
e3:3c:6d:6a:88:20:71:18:07:58:fd:57:7e:e5:3e:
01:ec:54:ce:ef:9a:7a:50:4c:4d:d2:84:22:cb:63:
3c:7f:de:1b:ff:e1:36:22:bf:46:38:31:48:86:ba:
68:0f:3d:77:2d:86:7b:a6:04:6d:ae:e0:03:eb:96:
07:8a:c6:1d:cb:9a:fc:5d:3b:9f:86:b1:4a:5a:c5:
da:16:d4:09:58:a4:50:05:f5:40:5d:da:10:3c:dc:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9A:31:ED:30:B6:82:11:41:BF:59:3B:17:3E:A6:FB:88:6B:CC:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B9957648C711EFADFE71B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.224.0/22
Signature Algorithm: sha256WithRSAEncryption
76:82:05:c9:60:20:08:50:e7:db:82:a3:f7:51:8b:4e:46:68:
e8:e5:5c:36:17:14:c9:42:c4:40:9d:15:8a:95:b2:6a:01:16:
1b:8d:09:5f:58:11:44:3a:47:56:d8:fe:02:f6:ab:15:09:e5:
e0:dc:dd:a6:25:48:29:e8:11:c0:20:ca:58:9c:65:a7:9f:39:
41:1f:0c:e5:a0:35:95:0e:5f:cc:9d:16:65:fc:f3:0f:ae:bc:
84:5c:51:01:83:d1:fd:36:ac:99:24:d5:89:9e:cd:19:09:f9:
1f:45:f4:8b:e2:99:f9:b9:88:58:71:4b:e0:25:db:07:59:6b:
38:b4:37:8a:0d:6f:2b:2c:7e:a2:e4:2a:b5:55:28:58:ee:6f:
73:d0:51:d4:e0:06:51:b2:bf:bf:72:b8:d0:39:17:7b:58:3e:
87:2e:75:21:f6:14:3d:d2:ea:3d:a6:ee:12:e1:3f:30:cf:c8:
10:2c:ca:69:20:ff:71:c4:88:35:06:b5:16:63:ca:3a:ed:4b:
80:17:d7:cb:c9:2e:c8:7c:92:cf:d5:a7:ac:0d:c8:b2:58:e7:
c3:6b:c2:49:62:f5:4b:7e:59:f2:d4:b6:7c:58:8a:eb:8f:b0:
50:50:50:b4:f9:ed:10:92:c5:84:ba:8c:c0:43:86:47:06:86:
12:80:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org