Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE9AA66435C11EFAD92735E762E951A.roa
File: BAE9AA66435C11EFAD92735E762E951A.roa (raw, json)
Hash identifier: eyP5TaCow8GcyYCHT7QI3oXZ5osrw6MCMqez1BalYIE=
Subject key identifier: 1D:94:4C:DA:1A:35:6E:6D:29:1F:47:30:6A:17:21:40:75:9E:29:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE9AA66435C11EFAD92735E762E951A.roa
Signing time: Tue 16 Jul 2024 10:18:22 +0000
ROA not before: Tue 16 Jul 2024 10:18:19 +0000
ROA not after: Wed 07 Aug 2024 10:18:19 +0000
asID: 135097
IP address blocks: 156.245.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40129 (0x9cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:18:19 2024 GMT
Not After : Aug 7 10:18:19 2024 GMT
Subject: CN=669648ee-336b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:fb:65:47:c8:2a:df:2c:5c:53:9b:6f:f9:
7d:c2:fd:c8:a0:77:65:d4:2a:87:35:99:d3:67:2b:
fb:bf:4a:de:51:42:5c:13:07:db:a8:ab:13:f1:e8:
88:e4:4a:63:c1:ba:4e:98:00:6d:88:4a:ab:8f:2a:
09:4e:f4:38:8f:9a:43:a9:47:7d:43:28:10:b8:3e:
d5:38:04:36:f1:79:fa:3a:50:71:e2:69:f1:22:cb:
88:a7:c6:2a:61:ab:9c:98:e5:42:f4:53:23:0a:f8:
7c:38:63:f5:7c:45:4f:81:52:bb:23:36:aa:15:82:
b2:63:1c:cf:97:51:ce:3f:4b:99:07:37:c5:1b:e2:
f8:85:fa:a8:2b:bc:e0:6f:50:24:71:98:db:2c:9e:
07:5f:3b:e3:09:7f:be:72:0f:29:44:a8:ba:8a:8a:
17:66:00:83:64:7d:06:c8:fd:ba:dd:20:a9:b7:d7:
b2:ee:42:8f:56:f9:ab:a6:cb:db:6a:cd:3f:c2:a7:
cd:71:73:51:10:45:ff:7c:8f:7f:38:be:a7:bd:92:
28:e3:b2:ce:25:dd:64:88:0c:6f:dc:1a:7e:0c:88:
92:9e:f6:df:6c:4f:f3:c8:9b:69:ab:e7:8e:98:fe:
0b:21:f7:98:b1:ed:44:ec:df:2e:97:fe:6d:c9:99:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:94:4C:DA:1A:35:6E:6D:29:1F:47:30:6A:17:21:40:75:9E:29:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE9AA66435C11EFAD92735E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:ab:f2:58:22:a5:b2:70:ca:23:e1:14:e1:1e:2b:50:77:3e:
73:6d:7c:9e:44:2c:b3:a7:8d:57:60:dd:8c:60:70:8a:ee:e2:
ec:8f:d3:dc:ad:34:e3:a4:94:c1:b0:4d:9d:d8:14:6f:27:c5:
e1:81:16:8c:53:cc:f6:dd:86:52:2a:bd:75:2a:b6:c0:07:57:
d8:83:02:f5:b7:c9:b1:37:8e:c5:77:60:e6:0c:af:4a:c8:7f:
a6:ed:6b:c3:d9:89:4f:d3:06:84:0c:e3:56:66:ca:2e:08:94:
69:47:d2:08:67:34:da:03:fd:09:3e:a9:45:65:71:01:03:72:
b2:85:86:0f:0a:3d:cd:97:c6:f2:17:da:2f:bf:dd:b2:4b:d2:
60:78:17:ca:b2:c9:7a:81:ad:04:d3:87:16:bc:04:96:8c:47:
e7:00:dc:91:cc:71:8b:51:85:bb:18:2e:84:84:d7:b0:0a:ea:
00:29:5b:9e:6a:34:ea:bb:ec:ca:41:d1:3f:f7:a6:5b:33:12:
ca:88:65:16:29:bb:02:64:2a:9b:e0:d4:f7:9a:43:41:f3:37:
9f:7d:4d:61:1f:1c:c6:64:43:da:17:3c:65:87:62:ef:fa:45:
4f:d6:5c:67:5f:68:c7:08:8c:d5:51:37:ba:cf:cd:69:63:fd:
57:e1:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 03:13:56 2024 by rpki-client on console-fra.rpki-client.org