Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28A7D3C7F0C11EFBE7ADB41762E951A.roa
File: B28A7D3C7F0C11EFBE7ADB41762E951A.roa (raw, json)
Hash identifier: xwaFxoMROAH6Z5FwyXcDXtI83C5oQc2m2AYm7e5VL5o=
Subject key identifier: F5:E7:6F:CD:62:C9:32:0A:E2:3B:54:51:51:CC:D5:D3:86:65:73:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28A7D3C7F0C11EFBE7ADB41762E951A.roa
Signing time: Mon 30 Sep 2024 09:16:38 +0000
ROA not before: Mon 30 Sep 2024 09:16:35 +0000
ROA not after: Thu 21 Nov 2024 09:16:35 +0000
asID: 63139
IP address blocks: 156.227.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48551 (0xbda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:16:35 2024 GMT
Not After : Nov 21 09:16:35 2024 GMT
Subject: CN=66fa6c76-b356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:45:d6:d4:82:98:30:cd:29:2f:88:97:b6:
67:31:26:da:9a:b4:ce:22:96:ee:3d:92:db:24:57:
06:02:09:41:6f:94:ef:58:1d:c6:6e:98:a1:09:e8:
c7:76:df:09:35:04:d3:5e:44:c3:9e:b9:01:39:cd:
09:44:97:3a:b1:85:5a:1c:db:fe:d4:45:05:fb:77:
6d:72:f0:fb:2a:70:a1:48:ad:41:dc:43:ab:e8:e8:
8a:a3:de:e2:1e:ad:cf:07:ad:bc:16:b0:b3:16:b0:
7b:03:61:51:a2:77:78:fb:d7:2c:63:18:9b:58:13:
92:89:3a:03:89:3a:e4:23:53:1d:16:6e:fb:8e:a1:
1f:cc:f3:d7:a8:e4:ca:b2:d7:47:db:94:62:3b:92:
f9:2e:22:62:26:7f:39:05:60:0a:ec:3b:57:1a:7c:
c7:fc:88:80:19:81:04:e5:06:8e:a2:e9:83:2d:50:
48:1e:33:94:ab:b0:b1:38:b6:60:b7:6c:e5:47:00:
d7:a6:3f:1e:44:b6:ab:09:a2:98:d2:dc:5e:7a:bb:
e5:21:1c:9f:a6:af:71:fb:a4:b9:28:26:35:06:24:
d3:4c:b2:b1:6e:0a:95:58:3e:82:2f:7a:f8:b4:2d:
7d:b9:d5:14:2d:9f:41:03:af:d4:0f:8f:0f:1c:8a:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:6F:CD:62:C9:32:0A:E2:3B:54:51:51:CC:D5:D3:86:65:73:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28A7D3C7F0C11EFBE7ADB41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:1f:d5:1c:d7:6a:1d:9d:aa:4b:5f:e8:99:e2:69:39:8e:c4:
cb:96:33:1f:8c:80:73:d9:a6:8b:30:0b:ef:90:41:e2:28:1d:
48:7d:db:a6:36:85:f8:a1:71:e5:28:39:ab:9c:49:aa:34:87:
4f:2b:d9:64:b3:68:9f:06:e6:01:f8:0c:89:e0:e9:27:c6:bc:
1a:ca:85:fe:bf:8d:af:65:13:2b:81:97:67:42:e9:6f:aa:59:
40:b7:11:95:ad:7c:9c:25:20:29:ff:06:cb:cf:86:b7:2a:ef:
bd:f3:e3:66:62:48:8c:df:a9:0f:92:5a:81:f9:34:19:01:71:
07:85:92:64:dd:e4:a7:91:4f:c0:df:e2:e9:64:68:0f:6c:ca:
ae:4b:5c:88:b2:94:ee:65:b4:32:af:6d:cd:5b:15:d8:58:0f:
c2:81:78:e4:65:32:dc:c8:8c:f5:e4:ce:06:5a:f6:44:20:fe:
78:ea:9d:86:a3:53:77:30:42:e0:e5:83:bc:80:0a:7a:5e:5a:
a6:55:f3:60:85:7e:9a:9c:46:b9:db:b7:52:a6:98:9d:fa:8c:
83:1c:41:fd:2f:b8:7f:c2:63:bd:14:d3:21:82:33:a5:3c:91:
9e:20:08:29:23:a0:63:1b:6f:fa:6e:e1:98:c5:68:63:9a:05:
b4:82:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:45 2024 by rpki-client on console-ams.rpki-client.org