Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B51168124A6F11EFB99D1076762E951A.roa
File: B51168124A6F11EFB99D1076762E951A.roa (raw, json)
Hash identifier: BO7pqptPlxezyFVxBpDioSgWOO7UbbP9F5TKp+AhZpg=
Subject key identifier: 40:A6:36:A5:AF:65:D3:EC:E1:10:CA:F0:91:39:CD:B9:4F:34:59:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A031
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B51168124A6F11EFB99D1076762E951A.roa
Signing time: Thu 25 Jul 2024 10:21:51 +0000
ROA not before: Thu 25 Jul 2024 10:21:48 +0000
ROA not after: Sat 03 Aug 2024 10:21:48 +0000
asID: 5065
IP address blocks: 156.246.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41009 (0xa031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:21:48 2024 GMT
Not After : Aug 3 10:21:48 2024 GMT
Subject: CN=66a2273f-f8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:84:07:70:9a:b8:9a:99:9d:86:99:ed:1e:
af:7f:43:67:20:7f:51:b0:ee:7a:38:2e:a3:63:d6:
c0:8f:68:ee:1a:26:be:d5:f5:cb:30:7b:c3:cf:0f:
9d:e8:21:18:41:52:59:be:0d:dc:b4:9c:ef:56:4f:
fe:a3:47:10:7b:26:7f:4c:89:95:1d:6f:8d:86:7e:
be:9f:3a:51:37:fa:16:b1:b4:64:f3:52:43:d4:50:
54:15:49:7e:6f:b5:84:e4:4f:0e:2e:1d:d5:3b:e5:
21:75:ad:aa:0f:b1:cf:e2:d7:72:f4:e6:a9:71:0f:
82:be:67:6d:3d:e7:19:8b:ed:87:fb:1e:83:3c:f7:
06:ed:1e:a6:f1:39:03:06:ac:7e:16:ee:f9:08:b1:
10:4a:93:c9:b8:86:e3:b9:de:62:88:61:5a:1e:a9:
f7:52:ec:0b:07:b4:ee:1d:ea:fe:46:45:9a:af:67:
03:ef:28:ef:87:d4:a2:9f:00:c7:21:09:e6:b6:e1:
38:63:1b:0b:bc:55:0c:72:ad:a6:a6:75:59:d5:0c:
35:5b:9d:e3:22:9f:86:5a:a5:af:01:88:36:eb:a5:
ff:42:b6:7b:a8:db:be:d4:32:58:e9:bc:1a:d8:83:
4a:d9:1f:79:7b:30:aa:5d:c0:98:50:0c:21:0f:87:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:36:A5:AF:65:D3:EC:E1:10:CA:F0:91:39:CD:B9:4F:34:59:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B51168124A6F11EFB99D1076762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.87.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ba:a2:c8:e8:34:23:78:fe:e7:ee:16:5f:42:d8:35:24:51:
df:e2:c2:fc:30:19:58:47:23:46:6f:12:92:b2:0a:ef:03:cf:
44:c7:b0:e0:10:d0:07:df:ee:74:b2:73:7d:ae:f8:12:43:e7:
b7:85:ff:04:db:4b:35:5d:41:3b:5f:e7:95:96:41:f6:62:c4:
48:f2:80:ac:2f:ae:34:a8:36:bd:97:69:58:4e:12:36:e6:3d:
67:4f:dc:56:8d:8f:cb:bb:ad:66:58:2d:c9:04:09:4d:41:09:
ba:f0:38:44:11:d4:15:85:0c:e8:4b:52:3c:4c:b5:bd:85:7e:
05:09:a9:a2:c4:86:c2:64:d0:4f:49:08:fd:ed:8e:9d:af:ba:
1a:a9:21:6c:f3:21:70:71:d7:97:6a:45:3c:14:50:b7:4c:ce:
d0:c0:aa:b2:c2:f9:04:c8:44:d1:45:bf:06:ed:05:fb:7d:33:
77:fa:d1:20:5a:eb:98:bd:f5:75:b4:d9:43:48:fd:61:54:9a:
0d:60:72:ce:55:16:2b:bb:22:f4:f2:84:09:d8:fd:f4:af:a5:
36:66:ec:2d:18:f9:ff:e1:54:68:73:8d:f4:37:40:26:11:30:
1d:b8:8c:c7:0d:11:ca:8c:3d:90:19:ea:32:cb:ea:bb:10:5f:
37:0e:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org