Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C0C5104B2111EF9BCA38B0762E951A.roa
File: A7C0C5104B2111EF9BCA38B0762E951A.roa (raw, json)
Hash identifier: tohT7gNS78gsF5cj0LgPSgG+BQhqc7pRiNRm81JgRWo=
Subject key identifier: 2E:1B:28:40:87:EE:51:A9:1B:49:65:0C:3D:35:CF:02:6E:40:49:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A05E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C0C5104B2111EF9BCA38B0762E951A.roa
Signing time: Fri 26 Jul 2024 07:35:39 +0000
ROA not before: Fri 26 Jul 2024 07:35:36 +0000
ROA not after: Sat 03 Aug 2024 07:35:36 +0000
asID: 5065
IP address blocks: 156.235.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41054 (0xa05e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:35:36 2024 GMT
Not After : Aug 3 07:35:36 2024 GMT
Subject: CN=66a351cb-810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:1f:f5:43:d9:ae:78:23:46:bf:ba:da:f2:
6e:a2:e6:37:79:f2:cb:9b:dc:2c:27:6c:32:03:bd:
82:be:2c:20:1d:f0:47:ea:65:ad:03:06:e7:9b:db:
29:36:6f:85:60:e4:69:9e:27:43:41:28:46:36:5b:
a4:db:a7:ce:5e:b2:8b:e7:e2:b6:22:ad:e3:52:8f:
e2:c1:6c:27:66:55:3b:81:71:b6:b1:94:97:ad:7e:
35:fa:61:f0:7e:bc:12:cd:a8:59:3b:1b:72:fc:f9:
53:8c:a8:c6:e1:77:ac:6b:4d:ac:24:e4:5b:c1:55:
55:52:b5:33:7f:a0:e3:a8:c2:b3:a5:a3:2a:48:78:
96:d8:2f:57:45:d9:83:81:25:c8:7c:db:34:8f:f5:
dc:71:34:ae:a3:b6:ee:54:81:cd:ce:e9:3a:17:62:
ce:23:db:35:49:98:69:71:6c:30:6c:ab:56:56:f0:
55:ee:fa:23:21:27:29:b8:6d:dd:3b:5c:8e:18:9b:
24:20:5c:10:ea:de:e7:2d:5a:6d:2a:91:3d:6a:fa:
1a:8a:0a:e7:27:99:14:39:fb:72:24:cc:89:2b:60:
a5:d5:51:a9:5e:b3:82:1d:b4:c3:fc:16:e3:8d:27:
66:c0:5d:d2:0d:0e:50:10:dd:cc:9b:56:13:26:f1:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:28:40:87:EE:51:A9:1B:49:65:0C:3D:35:CF:02:6E:40:49:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C0C5104B2111EF9BCA38B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a9:dc:b6:7e:bb:6b:1a:c1:02:e3:55:6b:c6:fa:44:fa:2a:
d1:61:fd:d2:fc:aa:c2:e1:65:94:98:4f:72:51:c8:83:fe:60:
3b:4a:b5:44:61:79:54:48:66:90:49:18:ef:d6:e1:35:c4:e3:
6e:b2:6e:b9:8a:10:9d:f8:9a:2d:32:40:d2:3a:a5:d9:df:22:
69:ba:b2:5c:5c:0a:8e:57:1f:68:e7:e1:9f:81:f9:ae:9e:f6:
e9:8f:c5:6d:5a:80:65:57:a4:aa:bc:dc:58:d1:0a:74:e8:12:
8a:ca:8a:78:e3:db:16:4c:13:bf:7a:77:da:39:3d:0d:18:43:
f0:d0:7b:2e:77:81:34:c7:db:a5:a4:ce:9b:75:d7:15:64:48:
64:78:51:0f:04:a0:6c:63:ed:ae:06:f3:19:a9:5d:23:dc:ff:
bb:77:17:eb:e6:54:30:38:38:4b:32:53:71:ac:7b:af:b5:ed:
21:46:a0:71:d2:91:b6:ea:34:61:bb:93:88:aa:00:80:8b:dd:
27:dc:f0:40:d9:55:b8:34:f6:72:30:b1:e0:06:b4:3a:47:e5:
04:61:a0:2e:b9:6f:ab:4c:c9:b2:0a:a5:07:f8:7f:0f:cc:6e:
bb:9a:df:b8:3d:4f:53:9a:f0:7a:5d:45:7b:18:89:ff:4e:db:
23:b9:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org