Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A652ED74F49811ED96B2B76A4AD9E6FC.roa
File: A652ED74F49811ED96B2B76A4AD9E6FC.roa (raw, json)
Hash identifier: xLEl5Alw/PjWSQmse8MvliwerIKKjnMames/qCmO3Ek=
Subject key identifier: 6D:A4:29:76:BA:BD:87:16:2A:B5:4A:32:B7:2B:74:A0:9E:7E:1A:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 255A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A652ED74F49811ED96B2B76A4AD9E6FC.roa
Signing time: Wed 17 May 2023 09:53:18 +0000
ROA not before: Wed 17 May 2023 09:53:15 +0000
ROA not after: Sat 17 Jun 2023 09:53:15 +0000
asID: 20473
IP address blocks: 156.240.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9562 (0x255a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 09:53:15 2023 GMT
Not After : Jun 17 09:53:15 2023 GMT
Subject: CN=6464a40e-d950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:46:00:7c:15:dd:dd:b0:ac:45:f8:46:8f:
61:66:c8:57:60:2d:6f:21:54:9d:1c:87:44:87:e0:
2d:b2:cf:f2:fe:5b:3a:23:72:82:8f:6d:ed:a4:e6:
e3:4d:1c:45:14:1e:17:62:80:c6:58:44:bf:a6:b9:
b0:e5:37:46:9b:0d:72:43:c1:0a:09:5b:39:63:49:
b7:05:11:a9:07:0c:09:d0:dc:e1:63:24:50:a9:21:
e3:41:98:56:4a:fd:e0:12:13:b4:25:3b:cd:76:6e:
cf:71:a6:2c:9a:37:37:a1:6d:29:32:27:39:8d:f8:
3b:c9:8b:99:cf:13:e9:c4:3f:29:87:0e:32:1a:8d:
35:ef:4f:25:a3:33:0f:b6:8e:a6:10:df:b0:b7:cf:
00:14:39:72:74:ff:aa:35:c0:51:46:0c:8b:93:39:
b4:25:f9:4d:09:ea:ce:fe:12:f8:96:cc:2b:56:06:
4d:e5:79:37:3e:5f:5e:8c:f0:22:39:b1:34:4c:18:
98:ec:d2:12:1f:e3:98:90:84:1d:b4:06:1e:d9:e9:
8f:e9:f6:7d:45:15:b5:df:88:17:1b:ab:8c:4b:a4:
7b:af:8a:3c:c4:48:7d:5d:3a:28:86:df:94:a2:3d:
51:36:ee:d5:39:50:65:ed:44:70:62:93:28:58:26:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A4:29:76:BA:BD:87:16:2A:B5:4A:32:B7:2B:74:A0:9E:7E:1A:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A652ED74F49811ED96B2B76A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.96.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ad:05:f3:ba:15:bd:5a:85:b5:e9:1a:aa:00:cf:12:9e:1a:
00:96:00:05:79:98:5f:31:6e:53:9d:b3:74:15:53:4d:cf:4b:
90:43:da:8d:43:71:d0:38:99:d4:aa:da:a2:00:01:c8:12:93:
27:e2:d8:26:3b:d5:16:0b:2b:67:6a:91:9f:b3:b7:ab:4f:05:
43:8c:de:41:b9:c9:0a:e1:c7:90:fd:16:e4:d6:05:21:28:2b:
5c:19:b8:d5:17:3e:25:5c:37:99:4c:a1:7c:73:24:21:1c:ad:
e7:7a:25:11:88:29:59:5d:a8:5d:1f:07:b6:9a:6b:0e:20:34:
34:52:56:54:6a:93:3a:80:57:e2:56:79:0f:c3:2f:42:ad:8b:
58:29:49:93:35:6a:a0:e6:6b:2b:20:4d:26:db:5c:25:2e:5d:
e5:21:d4:7a:82:4b:e8:5b:a9:87:35:c9:3e:85:e5:62:47:95:
70:74:13:3b:e1:40:e5:09:80:8f:cf:ff:2d:78:7c:42:8a:49:
12:d1:3f:46:0b:77:33:d0:99:4a:9e:46:c0:51:a8:ef:07:3f:
25:06:6e:f5:bb:0c:45:f3:f9:fb:11:50:c3:5f:a9:50:c5:63:
ab:e9:b8:5c:d7:a6:77:8c:20:08:ca:12:9b:e7:09:64:ee:7b:
ce:1b:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org