Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD49CAC63F5B11EFA66C9E79762E951A.roa
File: AD49CAC63F5B11EFA66C9E79762E951A.roa (raw, json)
Hash identifier: q4si+uZHblu1trA/Wg8a8SusuZvyLx3t+NanmhVUfcY=
Subject key identifier: 4C:10:E5:B2:00:07:7B:1D:F5:74:54:E2:5F:2B:C9:C1:6C:0D:D5:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD49CAC63F5B11EFA66C9E79762E951A.roa
Signing time: Thu 11 Jul 2024 08:00:45 +0000
ROA not before: Thu 11 Jul 2024 08:00:42 +0000
ROA not after: Wed 21 Aug 2024 08:00:42 +0000
asID: 63139
IP address blocks: 156.225.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39870 (0x9bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 08:00:42 2024 GMT
Not After : Aug 21 08:00:42 2024 GMT
Subject: CN=668f912d-ae69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:6c:48:82:88:06:58:aa:88:28:03:48:f0:
e4:cb:27:4c:1a:f1:50:d1:69:7a:3a:b2:1b:63:03:
ea:f7:7f:ba:c6:86:98:bf:e1:5c:eb:69:96:4a:c2:
cd:a8:52:21:a6:d5:47:e1:83:63:67:6c:47:da:61:
da:ea:5d:30:ae:12:7a:0f:14:d0:0f:1f:6c:9b:ae:
5c:19:bf:35:78:82:c3:85:eb:14:0e:aa:0a:30:36:
33:65:ff:5b:37:6e:a3:21:f2:12:47:25:8c:01:d8:
c7:39:e1:22:40:70:45:9f:c0:ba:1c:19:f4:05:8f:
05:b2:c3:04:10:2a:d4:03:e8:75:8f:26:3b:b4:3c:
02:a4:e5:2a:5a:e0:f2:b9:81:a9:eb:d9:5f:e4:b5:
26:7e:0c:2b:4d:bc:c3:c9:6b:42:02:09:85:9a:62:
4e:a2:af:65:9f:cd:0d:0e:c7:51:9f:e1:e1:f2:a2:
3c:14:c2:3a:fe:bc:d4:dc:34:ef:1c:a9:a2:83:cf:
0a:48:6a:9f:18:5e:e6:ab:6b:23:09:e4:f5:52:ce:
b1:33:5b:47:a0:e1:20:d7:a0:ee:d2:ac:c6:de:87:
26:33:33:49:bc:09:3e:9c:e5:96:53:f8:27:6a:cc:
68:74:90:6a:67:b4:4a:67:61:83:fc:af:e7:1a:7f:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:10:E5:B2:00:07:7B:1D:F5:74:54:E2:5F:2B:C9:C1:6C:0D:D5:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD49CAC63F5B11EFA66C9E79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:36:9b:b6:1a:1e:85:aa:26:fd:1e:ed:7b:f2:71:a3:0a:6f:
a1:9a:fb:45:76:0c:f8:7c:41:d9:d3:4d:51:99:44:0d:61:21:
bf:b3:09:14:e6:80:7a:84:53:ad:6e:44:df:d5:db:d3:94:a8:
40:a3:2e:c8:33:53:0f:38:b0:1b:13:06:fa:7e:95:2e:bf:67:
13:29:11:d3:f5:db:0f:0e:01:29:43:e6:47:91:d1:9b:45:ae:
f6:2d:c7:aa:7d:a5:92:21:f2:3c:b2:22:3e:fa:d1:6a:32:7e:
22:6c:c0:42:69:e6:74:65:46:da:a7:2b:27:d5:9d:c6:51:89:
e5:f8:04:f4:67:71:bb:b7:28:33:00:ee:c0:2c:de:45:0f:aa:
a1:8a:b4:e0:80:36:fa:04:78:44:ee:73:9f:95:92:ea:39:0e:
44:86:4b:9f:e2:3b:be:5e:79:ce:7b:4a:e8:cf:c4:4f:f8:c3:
6e:04:c4:fd:9f:48:89:d8:91:35:d4:08:4b:04:76:00:15:0b:
c9:14:2f:b9:8a:d8:d3:a4:a6:98:3c:46:85:e4:34:0d:55:b8:
e8:95:16:77:07:cc:56:5a:68:d2:5a:5d:eb:c4:4a:62:34:70:
f7:27:30:f1:06:e5:1c:2a:81:57:e6:12:70:2a:03:6a:8c:c5:
ea:03:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:18 2024 by rpki-client on console-fra.rpki-client.org