Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9332AC602F811EFAB45131D017001B1.roa
File: A9332AC602F811EFAB45131D017001B1.roa (raw, json)
Hash identifier: rpbHNu6EwEQaQmLZfoR7xxV5xnmjRFoZG8hxOk+FtF8=
Subject key identifier: 71:A8:3B:59:60:C7:80:61:24:A7:13:CD:C5:EB:D0:86:6A:C3:04:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8515
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9332AC602F811EFAB45131D017001B1.roa
Signing time: Thu 25 Apr 2024 11:40:49 +0000
ROA not before: Thu 25 Apr 2024 11:40:45 +0000
ROA not after: Sun 05 May 2024 11:40:45 +0000
asID: 39600
IP address blocks: 156.255.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34069 (0x8515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:40:45 2024 GMT
Not After : May 5 11:40:45 2024 GMT
Subject: CN=662a4140-ae25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:c2:5f:ba:7b:f5:1a:ea:81:de:d7:48:6a:
fb:b3:7d:90:f0:1c:8a:f8:b8:ac:74:8a:d2:50:b9:
35:eb:c6:cb:84:d0:3b:ea:b8:c8:d3:79:91:dc:9f:
6c:83:98:6a:d8:f0:01:72:3c:27:19:2e:e5:d9:01:
de:4f:b4:b7:37:d7:76:8c:7f:6a:02:0d:4b:db:f6:
a4:6f:c4:28:2b:ff:b9:d1:f3:99:d5:5c:57:66:8a:
bb:b6:48:93:92:ee:d0:83:70:b1:b3:3d:1d:fa:52:
5b:26:f4:b9:90:6e:44:8a:c5:7a:90:5c:e0:1b:0d:
16:27:e5:f0:b8:84:de:4d:b2:57:08:39:07:31:da:
95:82:5f:2b:60:8c:27:4e:30:9a:cc:15:65:f6:0d:
83:34:5c:33:c5:2d:4a:da:2a:b9:33:a1:a0:c8:82:
8b:eb:c3:ef:80:fa:65:1a:16:a2:7c:22:48:2d:aa:
87:05:c7:15:eb:cb:a9:af:b9:89:f6:21:18:42:9c:
a6:e9:fb:b9:20:f0:fd:63:fd:8b:5b:f5:0a:ab:6b:
d0:80:8f:27:db:2e:70:e0:bc:23:2a:e8:39:fa:cc:
a0:1b:0a:9d:d5:87:7c:45:7b:25:b8:60:75:36:19:
2d:1d:65:f4:41:7a:ac:b9:b9:44:be:d7:f7:4d:85:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:3B:59:60:C7:80:61:24:A7:13:CD:C5:EB:D0:86:6A:C3:04:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9332AC602F811EFAB45131D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:a9:3f:f2:73:b8:4b:e9:ca:f3:b3:38:d9:80:9d:51:50:b2:
98:a5:58:4b:e3:2c:b8:eb:b5:82:d2:77:b3:f5:4a:7b:2f:cc:
95:32:a6:2d:a1:ee:1d:2d:48:6b:f9:9e:66:a0:64:92:8f:dd:
7b:a0:9d:8c:a9:b4:29:cd:ff:ed:c1:69:e4:01:3b:2e:29:77:
53:ef:04:d2:d0:68:87:1f:a7:28:4f:5a:fd:0c:44:a0:78:79:
5d:bf:c6:88:3b:e3:41:ef:62:e7:68:b4:e4:ab:35:f1:e9:ab:
72:d8:a8:1b:ba:99:0d:7c:94:df:56:01:27:6b:1c:24:a4:bc:
c9:c7:0f:65:3a:0c:eb:73:84:6e:24:1a:3d:06:d7:fb:3d:1e:
7d:02:55:bd:d7:42:34:66:e5:13:1c:4b:6c:7c:ca:ea:d3:d5:
84:57:b4:82:74:50:bb:32:21:a7:da:3d:33:6d:cb:48:9c:e9:
1e:26:d8:f6:24:4b:7f:3c:c8:32:81:b7:5d:98:2c:43:89:33:
04:d7:2a:a6:a4:21:04:60:9b:93:fe:40:99:9c:8f:cd:73:9c:
40:2f:f3:55:c4:f8:d8:6d:6c:0a:3d:c6:fa:54:1b:05:29:10:
74:19:fd:06:25:64:a2:19:31:cd:d6:43:bc:47:f3:0c:fd:a0:
37:43:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org