Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA48495A435D11EFBA8EAC63762E951A.roa
File: AA48495A435D11EFBA8EAC63762E951A.roa (raw, json)
Hash identifier: AB10kpj+a39FvdFBPyZtJzkTK2kaUIqMoefTDcRVtJ0=
Subject key identifier: 0A:78:31:EF:1B:24:E9:DE:42:1A:68:C4:E2:2E:93:15:63:E9:14:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA48495A435D11EFBA8EAC63762E951A.roa
Signing time: Tue 16 Jul 2024 10:25:04 +0000
ROA not before: Tue 16 Jul 2024 10:25:01 +0000
ROA not after: Mon 12 Aug 2024 10:25:01 +0000
asID: 398993
IP address blocks: 156.231.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40137 (0x9cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:25:01 2024 GMT
Not After : Aug 12 10:25:01 2024 GMT
Subject: CN=66964a80-d776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:7a:d5:4c:dd:42:58:80:cd:bf:f3:01:79:
ae:c8:83:0b:10:56:cc:48:4d:b9:41:3a:fa:eb:b3:
01:63:d4:e2:92:d2:5c:1f:55:db:68:8f:cb:56:4c:
13:54:da:cc:75:c3:b6:dc:69:52:8f:6e:53:2e:d8:
f1:89:75:9d:1d:b7:02:94:76:d2:be:3d:12:b7:bc:
22:c0:74:3d:a8:ee:6b:94:dd:10:e7:12:b8:ed:98:
fb:ee:6d:e0:9c:0a:52:3b:14:11:04:32:d2:02:c4:
85:79:19:02:64:ad:c7:06:f0:18:5f:2b:19:6c:6b:
7d:38:04:da:62:b9:5a:33:86:4d:f2:fd:10:de:f7:
bd:5e:f1:1b:08:75:9c:a5:0e:6c:c8:10:4a:db:ef:
ce:4e:0f:8e:ad:1c:a3:8a:d5:c4:d9:e0:69:c9:22:
f2:9e:5a:bf:c9:4e:b1:3c:e8:89:d2:19:d7:b8:92:
8e:1f:ee:6e:58:7c:ed:98:4e:58:e7:bc:6a:af:fe:
7a:b8:80:4c:d3:33:5e:4b:20:38:4e:53:7e:4e:39:
8a:9d:29:d6:d1:45:53:cd:c7:43:bd:92:91:00:1f:
87:bd:0d:ab:81:47:4f:c5:77:78:01:48:19:3c:68:
d9:77:87:46:24:42:b0:ae:c0:3e:de:04:c9:1d:da:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:31:EF:1B:24:E9:DE:42:1A:68:C4:E2:2E:93:15:63:E9:14:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA48495A435D11EFBA8EAC63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:5e:89:fb:8a:ff:c1:4d:94:cd:2b:e9:7e:48:a8:15:7b:28:
9c:bd:77:fa:ef:e6:b2:6c:3d:27:dd:ac:e1:c4:23:90:da:0f:
20:d8:89:09:b9:56:24:e0:ad:bf:0b:40:30:55:db:0d:db:0a:
79:7e:a1:cc:30:73:9f:58:07:84:98:72:c6:d3:c8:27:0d:92:
88:19:8c:18:c7:5a:ce:ad:c8:9c:76:89:75:34:67:28:ae:1f:
6f:2b:c8:20:51:89:51:cf:b1:10:88:2d:dc:e7:fa:f7:de:da:
e9:ec:bb:d2:11:22:07:84:ec:17:3e:8a:fd:32:6f:e3:41:1c:
fc:45:4d:df:fa:2a:6d:78:b2:60:e1:40:6f:bb:b8:78:12:46:
2b:a0:58:3c:2a:a9:8d:55:f5:5a:d7:4a:9a:d7:ed:46:ff:e3:
a2:99:47:cb:e3:b5:d9:0d:0a:72:7f:db:24:e2:bc:96:4c:76:
92:22:9d:7a:53:6d:29:25:80:9d:1f:73:16:c0:24:2f:9f:b2:
0b:5e:76:fd:0c:c7:75:35:54:45:74:5b:9d:84:10:3c:3e:d2:
85:bd:e7:61:c8:5f:5e:e6:ac:ce:ae:b0:38:41:4f:a8:c1:0a:
f2:94:9b:62:65:df:20:66:8e:2a:1c:85:12:4a:99:bd:33:cb:
7f:2c:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 04:44:31 2024 by rpki-client on console-ams.rpki-client.org