Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4B45D203A9411EFAEB9A2AB762E951A.roa
File: A4B45D203A9411EFAEB9A2AB762E951A.roa (raw, json)
Hash identifier: 7tSDDf+FZ9jemjaM2gE4OLruEt7nxSUXrk76afvr/6I=
Subject key identifier: 05:A6:D8:71:40:F3:36:1E:A2:9F:FD:DB:85:58:99:27:0D:FE:94:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 989F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4B45D203A9411EFAEB9A2AB762E951A.roa
Signing time: Fri 05 Jul 2024 06:05:56 +0000
ROA not before: Fri 05 Jul 2024 06:05:53 +0000
ROA not after: Thu 01 Aug 2024 06:05:53 +0000
asID: 39600
IP address blocks: 156.235.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39071 (0x989f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:05:53 2024 GMT
Not After : Aug 1 06:05:53 2024 GMT
Subject: CN=66878d44-4284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:64:7c:dd:85:26:68:7d:99:bd:df:45:f2:
37:37:d5:2b:c2:75:27:40:1a:15:91:cb:51:1d:49:
bd:0e:ff:c3:dc:46:de:0c:ab:18:03:e3:34:b1:ef:
59:94:04:7e:35:7e:b7:57:b4:42:be:46:b6:a8:18:
a7:f7:52:f5:01:8a:a8:1c:19:3e:5c:43:7c:bc:95:
d9:73:06:80:88:73:62:f2:06:e6:ab:93:b3:8a:07:
01:ca:b6:67:7f:be:45:6c:ad:c4:e0:31:48:58:50:
66:ff:98:22:8b:55:10:52:d0:34:96:01:4a:71:44:
9e:30:27:73:03:4d:55:48:3e:b2:db:dc:c2:0f:de:
6e:81:59:d3:43:65:19:69:5e:ba:9d:4b:23:1f:30:
3f:d2:4b:71:06:92:87:e2:e4:5d:d7:b4:a7:99:6a:
90:ff:70:9b:9e:8b:24:01:69:f8:34:0e:b7:ae:16:
66:30:28:97:95:06:dc:3d:44:6d:8c:b1:2e:98:c1:
14:f8:c0:df:72:f8:82:02:6a:9b:ef:99:0d:9e:9f:
3b:72:cc:c4:29:56:52:48:73:a7:c5:2c:ce:16:30:
dd:46:1e:e7:63:7e:42:1f:f6:32:4c:59:1d:a6:75:
88:99:75:9e:e4:de:37:55:0a:88:ed:29:8e:23:bc:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:D8:71:40:F3:36:1E:A2:9F:FD:DB:85:58:99:27:0D:FE:94:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4B45D203A9411EFAEB9A2AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.80.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:b3:eb:2b:9a:a9:d4:b3:c3:7d:b8:58:1d:73:68:a6:6c:b5:
c2:9e:ae:77:42:67:25:de:d7:80:a1:04:5b:e8:a1:08:52:9a:
76:a0:fc:8c:56:de:72:6e:47:63:a5:0b:ed:77:ed:ba:dc:33:
40:26:f0:a4:27:cc:33:95:a5:f9:76:4a:1a:0a:1a:28:8b:74:
ec:40:20:66:75:6b:58:a8:8b:69:b3:8c:f4:14:25:0d:92:d9:
50:bb:c9:82:62:51:82:8c:e4:66:c5:43:2c:cc:e8:09:26:60:
2e:c8:71:02:c1:bc:69:f2:b8:f9:f8:d3:08:bd:70:04:80:ba:
b5:2a:48:3c:ea:2a:97:e2:7e:2a:52:17:e5:29:f2:52:26:23:
4a:5e:98:34:04:3b:cb:b0:61:5e:94:bc:99:29:a4:e4:de:6f:
32:6c:3c:07:4d:22:21:78:4b:86:24:6b:12:83:0d:af:d9:86:
b2:9c:c8:04:6c:d5:2b:2b:1b:e4:15:ac:57:9b:cb:d1:35:97:
21:c4:0c:c5:05:6e:8b:37:ed:05:c7:28:49:d2:88:98:9e:4b:
c8:c8:fd:11:72:b0:76:06:da:80:b2:45:f9:54:2c:76:5a:2a:
fd:91:9d:5c:4c:55:7f:fb:fd:e2:04:dc:b1:cd:bd:20:95:95:
ef:ed:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:32 2024 by rpki-client on console-fra.rpki-client.org