Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6223F92F0C511EE865D5997775412E6.roa
File: A6223F92F0C511EE865D5997775412E6.roa (raw, json)
Hash identifier: S7n1REOXY03Hx4jZU0i7Onkw16zFIZfDVQtTqnvLNLs=
Subject key identifier: 78:2D:70:A4:01:CD:EB:73:8E:67:FE:D7:AF:50:66:78:B3:20:E1:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8156
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6223F92F0C511EE865D5997775412E6.roa
Signing time: Tue 02 Apr 2024 07:50:18 +0000
ROA not before: Tue 02 Apr 2024 07:50:15 +0000
ROA not after: Mon 29 Apr 2024 07:50:15 +0000
asID: 141883
IP address blocks: 156.255.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33110 (0x8156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:50:15 2024 GMT
Not After : Apr 29 07:50:15 2024 GMT
Subject: CN=660bb8ba-7d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:d3:ea:34:46:d2:96:8a:39:c3:64:79:65:
50:9b:0a:83:34:99:35:32:87:7b:4a:71:fe:2b:7b:
ae:8a:a4:d9:17:40:41:40:fd:0f:74:1a:f6:39:85:
df:cd:b2:30:4e:82:c5:d0:f7:8b:a3:db:42:88:27:
05:58:47:1a:c3:90:0b:3b:47:62:fa:64:4e:5f:82:
b3:dc:a6:cf:3d:6e:5a:7b:8d:0e:e5:c6:5b:1a:fb:
a8:52:6f:72:22:67:09:b0:0b:39:80:29:4c:60:40:
2e:5e:07:75:32:b8:c9:a7:1e:db:00:51:5f:f8:f7:
bd:f5:21:bb:cf:ef:d5:98:e8:da:88:12:a9:c6:28:
0c:77:a1:c9:f9:9d:46:d1:03:fa:b2:32:30:33:11:
4d:d7:0b:d7:16:1e:dc:b4:56:d9:90:34:2b:a3:1c:
6b:a9:50:e5:0a:23:b3:86:08:60:e7:2b:98:f0:1e:
7a:28:7e:a1:b7:55:43:f5:7c:f3:ef:81:6f:b7:cf:
57:b3:3b:7e:d5:c4:9e:1c:cb:3c:84:e1:6b:8f:57:
23:83:92:13:1a:4f:67:97:03:4c:c0:73:f2:9d:ec:
e4:35:5a:bb:a6:20:4a:6a:8e:b3:7c:cb:2e:8b:dd:
bc:39:d0:50:f6:f8:90:d4:e5:a0:92:bf:fa:fa:1a:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:70:A4:01:CD:EB:73:8E:67:FE:D7:AF:50:66:78:B3:20:E1:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6223F92F0C511EE865D5997775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
49:04:7a:a4:bc:61:30:7b:6f:9e:04:78:7d:52:0d:1a:4d:04:
63:14:e0:42:1f:d6:aa:14:35:c8:56:08:1a:22:fe:36:25:e7:
9a:6a:49:46:79:c0:2d:65:fa:49:77:06:37:46:eb:ff:c7:b8:
94:8a:81:3e:6d:9d:e3:0b:00:96:ba:cb:8a:73:bb:c8:f0:df:
6f:13:6d:34:2b:d9:a8:f1:2e:21:02:d8:26:3c:47:e5:25:0d:
b0:05:1c:e8:e8:b6:04:b4:1d:df:dd:14:72:6c:93:87:69:ad:
6f:f5:9b:27:b7:59:32:bc:df:1a:46:0f:2e:62:5e:66:ac:03:
b3:db:4d:93:f6:14:59:0a:01:ad:9f:7f:60:31:d6:96:81:0b:
0a:60:78:dc:75:ad:5d:bf:e2:71:58:37:3b:50:d2:ae:db:1b:
60:73:d7:1c:60:6d:6b:c3:03:9c:d2:c5:24:7e:fb:05:4e:19:
93:50:b1:c5:e9:97:1e:77:71:5b:89:c4:15:d1:b7:13:b6:76:
6b:1d:06:8c:6f:af:89:75:9d:1a:39:3d:03:01:c9:7c:34:07:
ed:34:ba:bc:87:05:cd:70:66:4c:d7:4e:ab:0b:d6:71:b2:ed:
47:f4:3b:07:33:3f:15:c2:5a:84:62:b6:58:19:b2:45:fd:0f:
6d:67:d2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org