Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB93A454435711EFA24F01B7762E951A.roa
File: AB93A454435711EFA24F01B7762E951A.roa (raw, json)
Hash identifier: jbnNvQi+c+jsISfvTy+k5phz1M5AjCg42UIoYM26W+8=
Subject key identifier: 8C:57:BF:6F:11:0F:3F:F4:8E:04:6C:F2:93:49:D7:85:2C:EC:37:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB93A454435711EFA24F01B7762E951A.roa
Signing time: Tue 16 Jul 2024 09:42:09 +0000
ROA not before: Tue 16 Jul 2024 09:42:06 +0000
ROA not after: Tue 13 Aug 2024 09:42:06 +0000
asID: 138915
IP address blocks: 156.244.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40105 (0x9ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:42:06 2024 GMT
Not After : Aug 13 09:42:06 2024 GMT
Subject: CN=66964071-4d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:48:5d:93:b1:f7:91:e3:d6:0c:11:20:4e:74:
16:69:85:6b:b1:7e:d3:cc:d5:88:9a:72:15:bf:6b:
6c:69:b8:bf:f5:72:c9:a6:3b:60:f1:a0:80:f7:7b:
8b:40:6f:9c:5e:10:61:4d:58:6e:26:55:af:1c:de:
0c:1c:6f:46:e9:93:e4:02:11:a4:3d:92:66:27:9c:
90:0b:06:47:ef:95:b1:c0:0c:33:ad:d6:f4:4b:ca:
a3:94:3c:0e:27:c2:a8:cd:65:91:4a:e0:73:aa:29:
2f:51:15:0c:2e:22:81:1c:8d:9e:74:0c:e4:70:16:
46:89:06:3d:30:ad:bb:bf:69:8b:17:51:53:0d:5c:
ab:d3:c3:84:4f:3d:74:73:75:c0:0a:96:4b:bb:ff:
ff:55:db:dc:a4:8d:d8:ee:45:cb:23:4e:83:57:e8:
c6:c1:9b:0f:9c:3c:a0:e9:a4:24:91:27:fb:29:f3:
90:7b:d9:d2:1e:d8:a5:2d:b3:42:33:7c:b1:7d:f3:
8a:20:04:38:c8:83:b1:53:ed:78:c4:b0:d2:f5:d8:
3a:f4:64:77:91:5c:25:29:2b:90:81:f6:98:06:92:
56:55:68:58:2c:14:4d:27:75:34:b1:2c:df:9d:d0:
84:39:11:92:e2:d0:2a:2c:11:c7:18:ca:ba:a6:1f:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:BF:6F:11:0F:3F:F4:8E:04:6C:F2:93:49:D7:85:2C:EC:37:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB93A454435711EFA24F01B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:50:e9:c2:a5:9d:54:eb:15:ad:98:6f:2b:b3:fb:65:56:e1:
00:ec:86:3d:e4:ca:35:14:f8:a8:f7:29:c3:7d:61:65:21:55:
c5:05:a4:7f:9b:8f:c0:49:8b:1e:89:44:89:6f:af:7d:4e:07:
ad:2b:e0:29:37:ee:3c:40:ee:af:d8:a7:1d:d0:5c:76:d4:c9:
f7:61:b3:73:18:75:4b:2f:ef:34:44:74:0c:af:e1:84:5e:7d:
d5:a0:9a:1d:7f:51:29:c9:5e:2a:39:b5:c8:c5:1a:2f:da:5a:
1a:01:99:4c:0f:4b:c4:a0:d3:60:2f:c1:10:57:2e:ee:d2:b5:
70:ce:30:8e:d4:5a:9e:6f:ba:a8:d2:af:4a:a1:c1:94:8a:41:
0b:b2:bb:48:5b:1e:ad:ab:35:42:e0:9f:72:44:0a:50:df:b8:
a9:aa:cf:db:ff:9a:63:6f:3f:24:7e:9d:01:2a:a2:58:3d:c2:
68:04:e1:d3:ab:13:65:75:7f:c6:78:5b:ba:0d:a8:41:b4:d3:
04:37:d4:5d:a4:e6:a2:30:9e:d9:7e:60:8d:3f:78:db:e9:43:
eb:94:66:17:a4:de:ca:f1:24:c8:4b:50:50:ea:67:ff:4f:b6:
04:fb:4b:4e:20:a0:8a:a5:10:dd:b6:8e:10:bd:62:0d:78:fe:
19:d4:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org