Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A348646C48C811EF970F03BB762E951A.roa
File: A348646C48C811EF970F03BB762E951A.roa (raw, json)
Hash identifier: YIHqBtGipTdFXJ6b0mdqWG/KZ7assxkpVjpGcGG000k=
Subject key identifier: FE:5A:E4:E2:99:F3:37:A5:B1:75:B1:26:E2:6A:F9:A2:47:6E:2A:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A348646C48C811EF970F03BB762E951A.roa
Signing time: Tue 23 Jul 2024 07:53:24 +0000
ROA not before: Fri 26 Jul 2024 07:53:21 +0000
ROA not after: Fri 23 Aug 2024 07:53:21 +0000
asID: 202656
IP address blocks: 156.246.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40572 (0x9e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:53:21 2024 GMT
Not After : Aug 23 07:53:21 2024 GMT
Subject: CN=669f6174-5608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:88:a4:14:6a:7c:70:13:3a:b5:b7:01:cc:
56:2e:69:c8:0d:9f:50:86:f8:84:2e:b7:a3:66:36:
e8:59:01:18:41:5d:a1:a4:98:43:fc:6f:76:d2:c0:
0d:2f:85:68:40:ef:d0:97:cb:61:99:ee:1c:14:82:
bc:7c:fb:a0:1e:8f:b9:ec:98:0c:45:e5:b9:c8:6e:
10:1b:ef:db:70:ca:a0:58:36:73:62:29:d8:23:96:
37:0c:db:42:3c:22:46:84:72:ae:f8:06:84:9c:b1:
56:47:ca:56:34:d7:e8:44:ef:03:2a:ab:f2:9c:a1:
c7:0b:49:45:88:3d:0d:3b:48:0f:90:35:39:60:ad:
1e:0c:6b:f9:2b:7f:b9:7a:77:87:f9:d0:ea:5e:15:
af:91:e6:ac:79:17:9b:59:dd:e5:7c:4b:53:0e:b5:
3f:be:9e:50:3b:ff:76:8b:48:49:b8:a8:10:f2:48:
31:10:27:80:65:de:75:9b:6c:7a:f6:41:97:1d:96:
30:6a:63:02:ea:5a:ff:a9:f7:e9:ac:38:9d:82:1b:
26:04:e0:bb:d7:6a:1c:b1:e2:6e:cf:f7:90:03:cc:
d6:61:0a:bf:6b:46:5d:17:6d:e9:93:a0:b3:bd:fe:
10:7e:1b:96:0c:47:f8:3d:50:bc:18:12:5e:12:bd:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5A:E4:E2:99:F3:37:A5:B1:75:B1:26:E2:6A:F9:A2:47:6E:2A:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A348646C48C811EF970F03BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:83:de:fa:b2:b1:86:94:7d:8d:1e:9b:5a:b7:27:ae:8b:ba:
d3:56:c9:5e:e1:ff:18:72:8d:93:26:11:82:1a:cf:e4:63:cf:
66:96:59:c1:55:52:d5:60:20:02:2a:68:37:2e:b7:59:90:68:
8f:01:02:2d:be:a6:ff:3c:3f:92:f8:70:88:9f:29:2c:7b:a4:
a8:dd:5c:78:b5:99:7c:48:de:90:4d:61:df:0f:5f:a5:87:10:
a1:05:9c:07:c4:41:e5:f0:05:ce:c1:b7:d5:75:e0:53:e1:eb:
c1:52:89:34:1c:5b:dd:05:0c:28:bf:98:c8:f9:fc:35:82:fa:
49:7f:c8:45:c9:1a:a6:85:13:f8:51:c0:60:37:cf:2c:a9:d0:
16:90:ee:9c:0d:d8:9d:01:7b:15:a8:9e:c8:8c:00:e2:28:21:
35:f1:05:e7:9d:07:63:10:7c:fe:66:c7:51:d3:5c:c0:8f:d2:
91:f6:f0:79:e1:69:04:44:23:33:ad:d6:66:50:8f:d6:5a:58:
b2:27:0e:39:9c:16:55:eb:85:d6:4a:4c:6c:e0:21:10:50:17:
b3:91:df:3e:0a:8d:26:17:f3:2c:e1:5a:ec:00:1c:5e:79:60:
77:e5:7a:31:04:53:e3:5f:23:eb:2b:4d:94:6b:a8:4c:c5:df:
f9:64:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org