Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB01073A47D411EF9F3FB7BE762E951A.roa
File: AB01073A47D411EF9F3FB7BE762E951A.roa (raw, json)
Hash identifier: 06sYRcK4hD1SSieYOKYvj14q5sOvqdu0NOEjs8l7TfY=
Subject key identifier: EC:72:88:75:DC:97:87:32:90:13:BE:1E:5E:CC:68:C1:7F:BE:04:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB01073A47D411EF9F3FB7BE762E951A.roa
Signing time: Mon 22 Jul 2024 02:47:00 +0000
ROA not before: Mon 22 Jul 2024 02:46:57 +0000
ROA not after: Fri 23 Aug 2024 02:46:57 +0000
asID: 44559
IP address blocks: 156.246.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40395 (0x9dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:46:57 2024 GMT
Not After : Aug 23 02:46:57 2024 GMT
Subject: CN=669dc824-f3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:a1:12:56:29:fa:55:70:13:fb:d7:a4:fa:
a0:23:9e:ff:10:1f:39:8c:72:cf:86:a0:1f:cd:00:
e4:4c:f7:75:80:64:f3:4d:8e:32:07:94:81:2f:ed:
a4:51:7f:65:ad:6c:5e:5f:1c:51:53:21:94:83:f6:
26:19:d1:87:0b:52:d7:9a:a6:27:a7:aa:ed:bf:ae:
c0:31:8f:99:a8:c6:7d:08:b9:56:36:b7:cc:69:60:
36:f4:b4:b0:f1:e9:e5:f1:c6:2a:88:47:ef:cd:fb:
db:4c:e5:7f:2e:75:37:59:d0:21:71:1d:67:2d:82:
d4:3b:9c:f7:f7:c9:73:d7:98:c8:48:d2:23:a5:92:
a5:55:d3:1e:da:e8:cd:4a:86:23:79:2d:7a:70:03:
dd:56:92:1c:97:cf:7d:d3:b0:6a:9b:3e:d7:b2:4e:
2e:31:50:47:99:5e:e3:a0:7d:0c:e2:8b:53:91:d5:
ed:23:f6:a4:3f:26:36:be:ed:6c:7a:5c:30:16:e5:
b8:87:ed:96:fe:89:c9:18:35:51:8d:95:75:7a:b3:
eb:92:ca:09:85:12:9d:ac:6b:d2:51:6a:3b:a0:cf:
17:fe:94:0b:de:1e:17:df:eb:57:d1:e1:ab:cc:10:
e9:33:77:0a:0e:91:b8:d0:8f:17:74:17:b3:d9:0b:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:88:75:DC:97:87:32:90:13:BE:1E:5E:CC:68:C1:7F:BE:04:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB01073A47D411EF9F3FB7BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.249.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7d:68:44:e2:b0:68:b5:4b:f1:f3:9e:4e:97:70:41:ed:e2:
48:3a:a3:f4:26:53:f4:f6:e9:78:9a:da:f0:9f:f0:cf:37:6d:
f4:8e:a6:cc:b7:7f:a7:38:b3:06:b8:0f:1a:d5:f4:34:c3:04:
3e:10:22:54:30:c7:4c:37:aa:60:ca:3a:b6:26:cf:f0:d2:95:
db:5e:ad:f9:32:bf:c1:c6:e6:c9:92:b7:ef:86:f5:b2:54:c7:
f5:ad:30:7f:a4:92:0b:cb:e1:15:5e:41:1c:68:13:c6:71:6d:
b6:3d:f6:38:60:8a:8b:9d:4a:73:73:63:d9:3d:58:0c:7d:7a:
8c:26:b5:c7:37:83:5f:11:60:e9:3b:a5:b7:2e:eb:cf:10:57:
2b:11:e8:f2:39:00:f5:13:8f:c9:29:69:e2:03:0d:34:ca:cb:
6d:6c:52:87:cc:db:74:85:34:fd:82:d7:0c:03:29:19:86:8c:
89:2c:9b:af:2c:c8:77:14:0b:de:7f:e4:b8:6f:ac:b3:67:37:
64:94:bf:0b:7c:c1:49:19:87:b2:d4:5f:d5:79:ee:24:d1:e5:
62:f6:9b:df:af:4f:72:3d:bd:d9:6d:59:63:62:c0:a7:c2:c5:
51:3b:f5:65:ee:07:55:8e:e7:6d:29:f0:4c:5b:1e:53:b9:23:
9c:ae:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org