Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4BBB98048D011EFB6A26A70762E951A.roa
File: B4BBB98048D011EFB6A26A70762E951A.roa (raw, json)
Hash identifier: JJJydUJ4Uw6yj3cufIecotoXog2LH6Rr+ZPLTl5LdME=
Subject key identifier: 12:42:2B:85:1C:9D:DE:C4:4A:C7:65:73:2B:7C:06:0B:03:9F:1A:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4BBB98048D011EFB6A26A70762E951A.roa
Signing time: Tue 23 Jul 2024 08:51:09 +0000
ROA not before: Fri 26 Jul 2024 08:51:06 +0000
ROA not after: Fri 02 Aug 2024 08:51:06 +0000
asID: 44559
IP address blocks: 156.236.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40620 (0x9eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 08:51:06 2024 GMT
Not After : Aug 2 08:51:06 2024 GMT
Subject: CN=669f6efd-eb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:6a:d4:8a:22:34:9e:2b:8d:9e:65:53:c0:
4b:9d:ed:ac:fb:18:fd:a8:0d:e7:67:87:12:c7:6c:
70:ee:61:aa:9b:4d:05:d0:92:f4:e5:92:f7:49:21:
0f:ea:6d:c1:25:5c:08:5a:1e:bf:a0:87:50:7f:02:
91:b9:18:7a:d8:a5:90:15:62:35:53:21:fe:81:a3:
ac:d7:8d:3f:e1:0f:75:dd:0d:cf:ce:49:7f:8b:67:
e0:45:04:f8:94:4b:5d:0e:4f:09:02:a9:a4:95:48:
52:f1:21:e1:6e:80:a7:ff:b3:b3:0d:13:dc:86:aa:
a9:8d:42:70:5f:f9:06:b3:93:37:4e:ff:d2:12:48:
7d:0f:4f:4b:db:1f:82:93:22:23:8d:16:4e:c1:a6:
19:20:c8:b6:17:bf:ea:df:14:a3:8b:37:a7:45:13:
68:9b:f3:87:82:5b:bc:37:ca:70:c3:fe:00:01:f5:
82:02:6e:3f:d0:ae:bd:c4:7b:b4:31:97:4d:f8:93:
9c:cb:90:c6:36:e0:87:c5:7e:30:9a:da:f9:ec:e1:
ff:d8:f6:6f:83:ee:fd:dd:0f:0e:7c:d1:23:2f:40:
e9:9f:93:fb:ae:09:a8:c0:1d:40:bd:2e:5c:cd:da:
40:45:45:1b:79:ad:a1:d0:0f:4c:0f:99:a5:c4:a5:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:2B:85:1C:9D:DE:C4:4A:C7:65:73:2B:7C:06:0B:03:9F:1A:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4BBB98048D011EFB6A26A70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2b:33:27:cd:20:d5:21:7d:c0:de:84:bb:3f:c9:3f:66:7f:
23:54:79:40:b4:e7:78:8c:04:72:ca:1a:b0:42:4e:2c:c4:1f:
fe:dd:1a:b3:59:e2:33:ce:05:0c:6a:55:b7:a7:80:ea:34:d4:
52:8c:a5:47:1c:63:79:bd:84:a4:38:97:d9:21:fd:da:29:2b:
de:7f:30:25:a9:98:9d:15:7f:6d:50:79:c9:21:36:c9:c1:70:
f1:05:3e:27:9d:8e:ba:76:68:6f:6a:75:b9:c0:ff:7e:1a:7a:
f8:20:8a:cc:2c:1c:4b:a7:63:03:b6:ac:90:e4:1d:f1:4d:12:
72:b1:d7:9d:a3:ac:37:da:10:f7:b8:48:51:0c:a0:2d:c8:0d:
73:1f:a8:ee:cc:3c:ad:89:08:c6:2b:a4:0b:32:8c:94:ed:c2:
e3:d7:0a:05:6e:65:f3:17:b4:82:d0:e6:53:aa:04:23:c4:fc:
4f:5d:25:0b:83:4b:93:b7:d2:06:1f:d4:d5:64:4d:2f:91:f1:
5d:00:a9:b0:f5:47:ab:a1:a5:f3:35:0c:3f:2a:4e:3c:5a:07:
a5:88:65:70:0b:80:de:70:a9:93:94:5d:28:60:50:02:72:ab:
97:e9:25:41:eb:46:61:c4:44:e7:e8:f0:0f:77:49:9c:80:95:
9a:8f:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org