Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4DC7E58021E11EFAA6C7A2B017001B1.roa
File: A4DC7E58021E11EFAA6C7A2B017001B1.roa (raw, json)
Hash identifier: EJQU4eivaJnyKJa14YrA75OwwhH4//VS3zevJ1AQFP4=
Subject key identifier: 43:1A:54:2C:25:01:85:77:6E:09:EB:6F:6C:20:BD:3B:90:7E:62:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4DC7E58021E11EFAA6C7A2B017001B1.roa
Signing time: Wed 24 Apr 2024 09:40:11 +0000
ROA not before: Wed 24 Apr 2024 09:40:07 +0000
ROA not after: Mon 29 Apr 2024 09:40:07 +0000
asID: 399077
IP address blocks: 156.248.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33988 (0x84c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 09:40:07 2024 GMT
Not After : Apr 29 09:40:07 2024 GMT
Subject: CN=6628d37b-0025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:9f:dd:ec:a8:6c:9d:11:89:41:d2:bb:48:
18:da:a4:b3:bd:2f:28:8e:01:05:c8:c2:56:d9:42:
ad:9c:1e:74:d0:eb:82:67:54:f2:c6:eb:9c:bf:7d:
6f:44:4e:43:5a:4f:38:ef:56:7e:87:94:dd:4c:da:
85:c8:58:32:5b:0f:6a:1f:f0:ca:a4:72:38:43:69:
94:f7:76:db:d6:ed:57:d8:12:4b:a5:40:c3:bd:7c:
e7:96:f4:2e:01:c5:3a:30:91:60:69:a3:a1:5f:b3:
14:a7:ff:b9:04:f5:e3:4f:8e:38:28:82:c4:5d:67:
af:f8:42:84:b0:c9:b5:96:cf:a1:25:19:eb:ab:66:
b4:23:bd:94:1f:85:d4:88:fd:18:f4:3d:61:66:91:
6b:5e:34:ef:4a:08:9d:fb:6d:fa:43:e6:56:c1:c7:
1d:2f:7d:a6:30:ce:be:0f:89:18:6b:32:fb:79:a8:
09:70:f2:35:87:ef:f5:a5:32:f9:bc:a1:df:76:b1:
08:de:a9:ff:67:b3:b8:9b:15:8f:f6:0e:73:3e:f9:
6c:3a:a0:5c:8b:2e:dd:16:e3:5c:f3:93:c0:69:3f:
28:3a:29:6a:6f:fe:25:b4:a1:8f:03:a7:8e:da:fc:
41:c5:4e:4c:be:15:88:c0:a3:5b:bf:26:ee:2a:ea:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:54:2C:25:01:85:77:6E:09:EB:6F:6C:20:BD:3B:90:7E:62:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4DC7E58021E11EFAA6C7A2B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bf:3a:38:c3:be:26:2f:ff:c1:48:e6:aa:8a:06:0e:72:99:
31:41:a3:28:5e:e4:7b:9b:b0:ab:a6:4d:0a:34:fb:e6:60:b9:
14:43:a5:a7:25:d3:03:68:ff:7c:b5:dc:19:44:5f:60:e0:a1:
bc:7d:ad:bc:ae:97:56:c7:4f:c4:8e:81:88:a2:f5:1d:cb:04:
f1:d3:41:f3:9b:e1:ca:d2:0f:7f:a5:ba:1d:8a:ea:b4:90:a0:
08:3f:f8:28:4c:3c:e2:9c:00:83:08:d1:89:3c:3f:12:74:31:
91:17:da:26:8f:5f:04:e4:99:f6:a9:76:af:85:57:50:9f:a5:
47:e9:4b:c4:4b:9b:8d:cb:e8:bd:03:91:86:7a:7b:b0:9f:f0:
f1:8a:2b:0f:04:b8:c5:17:e4:b9:03:10:b9:86:cb:65:fa:ff:
1f:8e:4a:9c:ba:4b:e1:14:31:a3:a4:a9:b3:9b:ee:64:0a:da:
9b:45:3c:6c:f2:4b:d6:ed:f4:48:8c:6b:17:5a:b9:c1:8e:c1:
f5:fa:81:5d:1b:2b:42:5f:ce:2c:89:c5:46:57:8f:70:c6:26:
93:74:ed:81:77:f5:bf:18:5b:9c:e0:af:8a:4a:de:70:58:0d:
c0:39:73:35:b0:25:d6:d4:9f:95:54:4c:89:7a:61:09:6a:5c:
70:d5:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 10:23:28 2024 by rpki-client on console-ams.rpki-client.org