Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B70BC3D4404111EFB0D32C8E762E951A.roa
File: B70BC3D4404111EFB0D32C8E762E951A.roa (raw, json)
Hash identifier: AVEKFV2YiuAZbv5YROfbD6O/zSLJ3FmDVfMRdKOUf44=
Subject key identifier: 76:AE:F0:F6:BF:3A:B2:26:9D:F3:74:5E:41:5E:D7:F1:31:7F:C4:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BDB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B70BC3D4404111EFB0D32C8E762E951A.roa
Signing time: Fri 12 Jul 2024 11:27:26 +0000
ROA not before: Fri 12 Jul 2024 11:27:23 +0000
ROA not after: Tue 13 Aug 2024 11:27:23 +0000
asID: 138915
IP address blocks: 156.244.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39899 (0x9bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:27:23 2024 GMT
Not After : Aug 13 11:27:23 2024 GMT
Subject: CN=6691131e-10e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:b0:07:2f:d9:25:e0:d1:56:29:b1:c4:d1:
2a:d8:c1:88:58:32:dc:6b:d0:82:96:da:5d:39:68:
bb:46:81:93:20:7c:80:62:d6:cf:f2:e9:bf:13:32:
4b:5e:34:90:44:23:d7:93:dd:0d:9f:91:ec:62:ff:
b6:89:a8:54:45:95:c0:7e:d1:43:6a:df:89:da:96:
24:fb:1c:40:27:39:fd:43:82:4e:81:3d:a5:32:29:
63:4e:63:43:65:13:a2:58:80:47:47:5f:27:37:f7:
dd:ff:33:81:6b:a9:79:bb:ee:52:79:21:78:7d:d2:
fe:af:67:d8:30:1e:c8:0c:d8:02:88:a2:26:23:29:
3b:fe:70:3a:e6:5b:fc:b8:b1:9e:05:d2:44:4d:08:
f1:e6:a1:74:86:de:1e:72:8c:f9:fc:f8:72:eb:a8:
ed:00:a5:f6:e8:ec:b6:1a:73:72:09:73:ad:c8:e5:
91:5a:37:bf:2f:58:9e:e5:54:de:a2:59:98:8b:2b:
c4:bd:f6:5b:4b:24:12:03:22:47:22:03:dd:4b:73:
15:46:03:ca:93:5d:47:ba:fe:46:af:ab:df:37:64:
bb:cd:cd:5e:aa:ff:cf:a9:80:9c:07:93:57:6f:cb:
9a:39:8a:5e:9d:0f:5c:d1:c0:8e:bc:5c:f1:ae:f0:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AE:F0:F6:BF:3A:B2:26:9D:F3:74:5E:41:5E:D7:F1:31:7F:C4:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B70BC3D4404111EFB0D32C8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2c:2d:62:e9:e5:de:29:0b:d4:40:90:55:24:69:b3:ca:95:
34:e5:7b:73:74:0b:d2:34:f7:54:f6:a8:9e:be:1f:46:f4:26:
02:c5:82:67:73:8d:b9:05:92:4f:bc:64:f9:98:41:17:31:ad:
57:41:9e:70:87:25:e4:6d:35:fc:fe:df:05:38:fd:6c:93:90:
f7:20:f5:8f:c4:35:e2:95:fd:54:29:94:13:b0:f0:d2:e7:00:
67:f9:a0:b4:d2:23:00:80:b0:01:99:87:58:82:24:27:d1:22:
a7:43:e6:ae:e2:9a:3c:7c:25:bf:fa:55:43:74:49:34:b3:c3:
e6:12:1a:46:0e:a8:53:bd:c9:6b:66:47:52:e3:2d:69:4e:57:
08:77:d6:c0:32:2e:ac:b6:c9:fe:2b:d4:a2:b7:f9:1c:49:47:
16:8d:48:28:f7:37:86:2f:ed:5c:eb:16:5b:53:fd:ce:db:23:
7f:f2:e3:7e:60:c8:1f:b5:cb:71:20:4c:4b:54:71:5b:d6:cd:
e8:ce:bc:ed:c3:28:f7:a6:e1:ca:9a:c5:73:34:9f:83:d1:0c:
57:3b:11:1a:ce:e2:57:70:da:9c:50:d6:d9:fa:26:a2:7b:cf:
43:75:ea:af:77:10:ab:c3:c0:71:32:c9:9f:58:5d:ae:99:4a:
bb:89:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org