Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1ECD10202F411EF983071FC007001B1.roa
File: B1ECD10202F411EF983071FC007001B1.roa (raw, json)
Hash identifier: +tgUwJxUKYIUCUJCjZdGgJllf3u8Vsi5G9nJIQjQ5Ys=
Subject key identifier: 6E:FE:8F:5D:D3:37:06:28:9B:35:46:AC:A1:21:EC:5B:C9:BC:FD:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1ECD10202F411EF983071FC007001B1.roa
Signing time: Thu 25 Apr 2024 11:12:25 +0000
ROA not before: Thu 25 Apr 2024 11:12:22 +0000
ROA not after: Sun 05 May 2024 11:12:22 +0000
asID: 39600
IP address blocks: 156.226.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34041 (0x84f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:12:22 2024 GMT
Not After : May 5 11:12:22 2024 GMT
Subject: CN=662a3a99-6a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:94:f1:6e:96:87:82:e1:b8:d2:18:20:66:
a9:c6:96:93:b7:88:38:d2:16:2d:57:7f:16:da:28:
de:29:4f:4e:81:08:52:2d:f3:aa:09:e5:5f:44:86:
94:91:f6:f5:1b:92:ff:f1:4c:88:a7:4e:17:61:d5:
e2:1b:db:e6:d3:66:9b:a1:3a:70:dd:a6:85:fb:e2:
a4:43:2a:6a:3a:54:75:8b:d1:a3:2e:bd:aa:b5:0e:
10:32:69:11:d4:c7:e7:54:1f:19:88:2f:21:98:5b:
1e:d9:89:54:3e:9f:d5:b6:c6:1b:1e:e8:b2:09:41:
21:6a:be:a9:f5:64:62:46:9d:5e:ba:cf:6b:10:72:
72:d3:42:9b:ae:fb:06:0e:e8:f3:03:38:fa:d0:e2:
7d:23:42:89:da:84:7d:fa:a8:4f:a9:59:bd:46:91:
3b:6f:26:98:d1:b6:6d:fd:b5:a1:33:7c:94:08:8a:
d7:92:96:ec:68:6c:a9:9b:ae:10:f6:d4:90:b0:9d:
52:6b:4f:65:ab:c4:1a:68:c3:50:27:94:c2:3f:e0:
c6:d4:1a:b4:78:eb:ed:08:81:10:e0:b6:43:22:b4:
91:a0:4d:e3:3b:b3:5f:2d:c2:75:71:ca:ea:47:fc:
d9:ad:e9:4e:5c:29:37:e9:25:70:5d:52:4f:e5:aa:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:8F:5D:D3:37:06:28:9B:35:46:AC:A1:21:EC:5B:C9:BC:FD:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1ECD10202F411EF983071FC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.8.0/21
Signature Algorithm: sha256WithRSAEncryption
08:29:7c:dc:c3:0e:1c:cb:fc:31:54:2e:2c:b9:1a:c7:17:e3:
27:95:0f:32:af:d7:a7:60:51:ce:e0:4e:72:81:3a:b8:1a:b0:
f8:4c:16:13:ab:b8:57:6d:f1:d9:13:21:80:a4:57:0d:4b:2c:
f8:bf:6a:d4:13:e8:3d:43:46:97:cd:98:b1:16:97:45:26:32:
8a:db:ca:16:71:0d:3e:4b:ac:63:ca:a4:94:c9:a1:25:92:23:
9a:3f:9c:61:68:10:96:cd:83:cf:9f:0f:27:9e:42:22:de:98:
0f:dd:98:c3:c8:c1:25:a1:23:f4:14:bd:51:9a:cc:98:fe:85:
cd:9e:0e:41:c1:26:c4:df:e8:f8:57:87:51:15:2a:a7:a5:30:
8c:cb:2b:2a:80:a2:f0:e7:9a:03:2e:f9:a8:c0:45:d9:f4:28:
8e:b0:7e:37:87:3b:f1:38:0f:b5:e4:90:62:fb:ba:c4:de:bc:
fa:48:3f:6c:98:1d:a6:4c:96:13:be:6a:c4:c1:62:56:a9:b1:
bf:46:69:a3:70:0b:32:be:d7:07:bc:e1:56:da:a5:51:7d:58:
ec:4c:2c:7d:7b:68:41:18:fa:b6:00:05:9b:3c:53:ce:d5:97:
45:64:ac:59:1f:57:00:fe:44:e9:df:88:26:93:62:ba:60:4a:
b3:4a:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org