Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9CE78D440FE11EFBE18ED8D762E951A.roa
File: A9CE78D440FE11EFBE18ED8D762E951A.roa (raw, json)
Hash identifier: bWwiD3i69jjHmHca17KmhRGvM9Ft4Bgo3gAjvOOfUl0=
Subject key identifier: 36:03:60:6A:7A:AF:93:05:27:49:00:0B:27:11:50:92:48:B7:B4:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9CE78D440FE11EFBE18ED8D762E951A.roa
Signing time: Sat 13 Jul 2024 09:59:59 +0000
ROA not before: Sat 13 Jul 2024 09:59:55 +0000
ROA not after: Tue 13 Aug 2024 09:59:55 +0000
asID: 138915
IP address blocks: 156.244.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39968 (0x9c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 09:59:55 2024 GMT
Not After : Aug 13 09:59:55 2024 GMT
Subject: CN=6692501f-b83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:ed:eb:f3:d4:90:28:c1:23:1b:e1:c0:b5:
08:b8:a4:b4:f8:aa:95:56:f3:b3:66:e0:05:f1:89:
1b:8a:0d:b6:e2:1e:fc:07:d9:1e:3d:7b:cc:86:90:
d9:fa:fc:26:b6:b8:3e:6f:1e:b8:eb:b0:0d:03:a5:
0c:3a:ea:67:45:21:22:41:70:74:13:bb:55:16:4e:
78:68:02:8b:05:4c:54:20:4d:0c:f4:7f:55:e6:9d:
74:2a:27:7a:98:1a:b3:b2:6a:3f:3f:c3:84:d0:f1:
4a:bc:13:58:99:db:00:49:30:1a:b4:19:7c:af:1f:
70:89:e2:5f:d1:53:09:b5:af:07:61:44:25:08:da:
3e:84:df:20:7a:a7:09:59:32:68:b8:cd:02:04:e0:
d4:a4:bb:49:fe:7c:b3:49:ac:44:17:f8:ea:8a:29:
28:a7:36:64:4e:d1:94:19:79:80:d7:b3:8e:f6:76:
89:b8:24:6a:76:2f:09:0f:e6:9c:c8:ee:9d:0d:0e:
5c:d3:33:bd:1a:44:7b:a1:57:a1:5f:08:23:6d:5c:
0c:42:38:be:a0:b6:a0:21:56:42:9c:83:5b:bf:1e:
39:22:0f:d2:07:fc:7e:be:d0:0a:6e:c3:05:94:a8:
f1:66:77:fc:78:8c:77:be:87:9d:17:e2:52:c0:6d:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:60:6A:7A:AF:93:05:27:49:00:0B:27:11:50:92:48:B7:B4:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9CE78D440FE11EFBE18ED8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.10.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2d:9e:a8:4b:a0:a2:30:0c:0b:e7:2f:e0:8d:d6:ba:bf:23:
35:68:e5:8c:89:79:3a:87:88:b0:da:b0:f1:ac:49:a6:68:a1:
9e:ba:16:d3:8b:c4:59:de:07:0d:61:15:cf:aa:66:74:6b:df:
4b:11:00:45:0f:d1:15:91:96:ce:d4:e5:c5:65:0e:12:b4:61:
06:fa:0c:72:74:b8:44:12:ff:73:7c:92:c7:1a:75:25:b4:48:
b9:f1:a3:04:9a:24:05:ba:11:c9:b1:03:4a:41:1f:99:89:7c:
26:25:7f:7b:a3:18:94:49:4d:03:33:11:a0:21:12:61:8c:55:
ec:ac:cc:5a:63:d7:da:f1:26:6c:f9:0d:e6:36:37:c2:9e:4a:
c9:d8:94:9e:78:36:b6:17:9c:6d:08:64:ab:db:82:c0:17:40:
96:57:0d:d9:59:c7:c6:80:74:9d:ac:68:e4:e5:24:4a:d3:be:
72:6d:e7:6b:2b:f8:b5:2e:cd:e1:52:3c:9d:ba:8d:63:a3:3b:
9f:a2:1e:4d:2b:cb:d6:43:a4:a1:1e:ae:3e:ed:83:df:06:b5:
db:7f:b1:9a:c4:e1:c2:b1:5b:70:13:97:51:41:7a:b3:68:ff:
04:98:ee:a5:8f:da:41:fc:55:34:49:19:31:b2:5d:1e:dc:c1:
4b:23:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org