Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA55A3CC440F11EFB62438A0762E951A.roa
File: AA55A3CC440F11EFB62438A0762E951A.roa (raw, json)
Hash identifier: nHC2xymptgxaC7eSHWlwD1G9Ply6kw3FA3EP7Pz4UP4=
Subject key identifier: C3:A8:77:F8:E2:EA:5D:1E:30:91:87:2E:3C:7E:67:2F:89:40:3D:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA55A3CC440F11EFB62438A0762E951A.roa
Signing time: Wed 17 Jul 2024 07:39:15 +0000
ROA not before: Wed 17 Jul 2024 07:39:11 +0000
ROA not after: Sat 27 Jul 2024 07:39:11 +0000
asID: 22773
IP address blocks: 156.246.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40176 (0x9cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:39:11 2024 GMT
Not After : Jul 27 07:39:11 2024 GMT
Subject: CN=66977522-b026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:81:74:cb:56:4e:04:63:8a:fc:a4:2e:3c:
bb:e7:47:e4:c8:99:7c:1a:84:df:0e:0c:9a:7e:d6:
f0:ec:71:07:d9:d3:f0:f9:15:4d:0f:69:3a:07:f4:
b6:bf:5f:75:b9:4b:03:ad:e3:32:78:6b:cb:bb:87:
c5:4c:49:8d:d8:39:79:33:a2:29:94:d3:e5:48:74:
ce:eb:59:13:fe:a4:0f:b5:63:09:9a:83:03:df:2f:
98:e6:d6:c1:f6:8e:b0:0d:3e:46:50:f8:d2:ec:d8:
9e:20:54:80:3c:4d:37:1f:85:38:2f:ad:ad:c1:b0:
92:3f:52:0c:19:e8:e3:58:0d:74:9b:ec:da:6c:df:
32:02:39:ab:d2:ed:c1:20:29:d8:cd:dc:c3:d5:4f:
07:55:dc:e8:4e:d9:39:e0:b7:78:e2:01:a8:83:33:
36:5f:7d:00:f1:17:c0:0b:06:78:56:b5:42:b3:c3:
41:06:22:01:54:18:26:33:bb:6f:cc:7e:49:e1:ac:
5d:7c:1a:63:e7:24:f8:b2:10:26:d8:f5:53:7b:7c:
60:d2:bb:5e:84:d0:3c:ce:2c:62:b8:d5:a5:61:94:
fa:da:11:83:b1:62:eb:25:b3:76:e6:e5:d5:38:7a:
26:ac:86:15:72:06:de:98:2c:1e:00:52:6a:7d:21:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:77:F8:E2:EA:5D:1E:30:91:87:2E:3C:7E:67:2F:89:40:3D:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA55A3CC440F11EFB62438A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
37:18:52:02:19:20:35:10:34:fc:fa:46:d7:fa:aa:47:1a:2c:
9c:10:d8:31:59:3f:cc:a9:13:35:24:8a:08:29:88:76:9b:a0:
ff:f1:75:d0:1b:33:1e:42:95:f1:f8:92:9e:61:bb:e2:8c:cc:
81:03:07:c8:c0:5b:47:43:15:60:df:89:d1:67:e0:fa:7d:fb:
44:b5:21:0a:02:6e:0c:bd:ee:01:da:b7:4c:d1:23:2a:ae:00:
83:5f:37:eb:47:dc:6c:d9:90:e9:20:97:0a:76:f0:2a:12:73:
33:47:19:37:e8:6d:34:e7:13:af:e8:1c:1d:ae:7b:fe:7a:83:
2b:e1:ce:65:64:a9:49:16:06:23:e8:5c:12:e8:1b:01:2e:49:
f7:ca:fe:e1:98:5a:8c:4e:30:87:20:e0:95:f4:d1:22:91:e1:
21:34:d8:a8:30:17:d4:65:fb:ee:4b:d8:a2:3d:61:51:d0:5a:
97:e4:12:c0:6c:19:5a:13:4a:a6:98:d7:0f:ad:e5:dd:95:01:
77:ce:0c:68:9f:20:f3:29:96:1e:73:50:25:d5:d0:e4:fe:50:
3a:5e:1e:9d:9d:63:5a:c1:f5:0b:1d:6e:76:00:7a:00:1c:ed:
2a:38:40:48:42:b8:31:7d:63:0e:33:20:b5:80:d0:e6:b9:f1:
80:37:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org