Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC8F933C134F11EF8968954C017001B1.roa
File: AC8F933C134F11EF8968954C017001B1.roa (raw, json)
Hash identifier: tW+C096LuA7iUFLGjChGLYcOpVtMkSzgw6QxAKkFYQI=
Subject key identifier: EA:83:BA:C9:36:9B:B3:6F:8E:C5:F0:D8:91:EE:13:EA:49:A0:E4:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC8F933C134F11EF8968954C017001B1.roa
Signing time: Thu 16 May 2024 06:43:59 +0000
ROA not before: Thu 16 May 2024 06:43:56 +0000
ROA not after: Fri 31 May 2024 06:43:56 +0000
asID: 44559
IP address blocks: 156.233.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35466 (0x8a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 06:43:56 2024 GMT
Not After : May 31 06:43:56 2024 GMT
Subject: CN=6645ab2f-f0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:04:35:f8:ff:16:50:06:6e:b4:ff:42:e3:
17:7d:5f:f5:f0:f7:32:6e:d4:57:e7:65:d7:5d:20:
f4:82:65:1d:23:d7:3b:b3:1c:28:76:b6:97:ef:9a:
b1:32:a1:88:7d:5a:c7:b4:d2:7f:f5:43:05:e0:a4:
6f:a7:cb:41:d1:7e:f4:6c:18:07:c5:6e:af:e3:fb:
c5:fd:b2:a8:87:b6:79:df:d4:4c:6d:5b:d4:87:f8:
b1:5d:6d:f0:3a:78:69:ee:ff:0f:1e:dd:96:4b:31:
9c:0c:53:59:9d:88:c1:f3:26:aa:73:8f:0c:4e:23:
af:6f:bb:06:e9:96:f0:58:4d:38:84:c3:2f:13:e0:
87:09:73:c5:89:10:55:0d:b3:f6:d9:3c:3e:53:5e:
ac:f5:90:fa:25:38:f6:0a:2b:a6:2d:e3:ed:6d:5b:
89:e3:b8:52:4e:4c:b6:2f:04:aa:4e:3e:64:fd:4e:
3b:f8:c4:d8:b5:56:b5:31:f0:a2:ec:54:07:c5:a2:
fe:9d:a2:ab:e3:ff:ef:71:c3:77:d8:28:f6:a9:80:
af:4e:42:20:a8:55:34:29:e2:a2:bc:ea:d2:12:a7:
01:3e:bf:76:2b:b2:29:ad:a2:47:fe:99:e1:eb:47:
80:4f:ad:42:fe:fb:db:c0:33:d0:a8:de:5b:12:75:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:83:BA:C9:36:9B:B3:6F:8E:C5:F0:D8:91:EE:13:EA:49:A0:E4:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC8F933C134F11EF8968954C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b6:92:ab:ca:9d:51:8d:74:df:d1:b5:c4:b1:c1:06:a0:55:e5:
d9:17:32:df:6b:6c:a6:2c:07:09:ed:8d:a5:c3:d7:f2:11:77:
bd:0b:1c:47:b2:ce:3a:13:79:d4:83:b6:ec:27:56:08:07:6f:
17:e8:92:86:4d:2c:38:77:52:aa:30:80:c9:96:72:2f:9a:64:
e8:66:da:7b:f7:9d:72:1f:64:38:e0:9b:c0:93:af:36:77:42:
f8:77:64:ec:31:c1:30:cc:a4:1d:cc:62:bc:ac:df:1e:eb:0d:
94:66:62:b2:54:46:86:77:23:4a:95:1b:58:e7:9e:d9:42:a4:
46:43:a9:00:f9:d0:c8:87:29:8a:e4:4c:d2:e6:00:ac:af:14:
3e:3f:a7:48:09:c4:45:6e:81:a5:26:cb:fd:83:68:35:f5:81:
82:57:5d:86:4e:63:63:f0:8e:ab:cf:01:cf:b6:22:5f:ce:dc:
0f:b7:32:41:2c:70:3d:52:7f:b6:d7:4f:87:40:e8:cd:27:3a:
2b:df:80:a2:9c:39:f2:fc:89:06:4d:4b:3b:2b:28:6a:da:9d:
ba:96:fc:c0:da:c2:61:05:62:e6:7b:9c:92:2c:02:30:2e:5f:
4b:42:1a:ef:4b:2d:a3:0d:20:8e:0c:2f:55:a8:ee:47:43:16:
a4:d3:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:30 2024 by rpki-client on console-fra.rpki-client.org