Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBDED0BE021F11EFA259BC35017001B1.roa
File: BBDED0BE021F11EFA259BC35017001B1.roa (raw, json)
Hash identifier: MOIB0X19jeQ8vnGcMcm/HZ7qAuOOVAlriE+/11GP61Y=
Subject key identifier: 49:96:52:61:1B:D7:48:09:13:2C:C2:6D:8D:C8:C0:C4:AD:CD:09:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBDED0BE021F11EFA259BC35017001B1.roa
Signing time: Wed 24 Apr 2024 09:47:59 +0000
ROA not before: Wed 24 Apr 2024 09:47:56 +0000
ROA not after: Fri 03 May 2024 09:47:56 +0000
asID: 142062
IP address blocks: 156.232.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33996 (0x84cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 09:47:56 2024 GMT
Not After : May 3 09:47:56 2024 GMT
Subject: CN=6628d54f-e7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:24:83:e8:4e:ff:52:69:8a:83:2f:c4:86:
3c:d3:02:31:1d:d9:d3:98:33:7e:66:b1:c5:d6:9a:
ef:8a:cc:41:7b:f6:14:c8:5e:6c:4e:f5:51:7a:39:
07:98:2a:0a:de:c7:aa:22:c4:8e:5e:99:f2:d1:ef:
73:f9:fe:57:f7:6b:5e:0a:59:fe:ba:9f:fb:f7:fb:
e4:4b:fc:da:24:0e:7c:7e:9d:3a:40:19:81:f6:7f:
df:00:77:ef:3a:0a:e0:5a:e1:85:cf:0c:30:54:11:
79:f2:f1:31:a9:5a:46:e9:db:aa:70:16:30:30:f4:
17:de:63:00:53:bf:ba:3f:f5:d7:3d:ea:95:1a:82:
9f:25:ec:db:90:1f:b0:63:50:6f:3e:75:d6:cf:2b:
6c:7e:bb:09:6b:7b:e9:56:a0:55:22:d6:63:fb:e6:
ca:0f:ef:aa:f3:48:04:bf:9a:11:43:41:bf:13:c6:
e7:1f:b5:be:6d:2b:21:4c:28:ba:0b:d2:2d:61:68:
c8:45:e8:91:66:74:3d:1a:08:f5:72:1b:1b:f9:52:
a1:9e:36:68:a3:e4:3d:ca:47:b3:18:24:f8:57:1f:
25:53:ab:ba:77:0b:e4:1c:45:61:b0:7b:56:00:e9:
84:89:66:9d:11:79:74:11:4f:f4:87:54:9d:a5:c3:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:96:52:61:1B:D7:48:09:13:2C:C2:6D:8D:C8:C0:C4:AD:CD:09:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBDED0BE021F11EFA259BC35017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.32.0/19
Signature Algorithm: sha256WithRSAEncryption
80:fd:e4:35:99:a8:13:38:06:a5:fd:c8:bf:33:f0:cd:8c:c1:
71:c7:d8:38:0e:4a:23:65:af:e3:1f:4f:e2:c6:d0:bb:ea:c0:
8c:11:10:56:7e:f3:81:8f:6b:ef:de:1d:8a:9f:02:54:4c:4e:
e7:ae:b1:e6:6a:8a:c1:63:7e:81:8a:2a:bd:66:e7:6c:1d:40:
ff:ec:33:4e:55:96:35:16:61:ac:68:9f:00:fd:b2:bf:53:92:
85:22:34:44:40:82:18:f5:9a:30:21:9a:f1:0d:59:52:4a:66:
09:3c:49:a0:29:8b:3e:01:8d:a2:5a:a0:5e:50:ac:3b:40:cd:
0a:5d:6d:67:6a:72:8a:b0:6e:9a:b7:33:1c:f5:48:c5:bd:cd:
3a:b8:11:39:ec:ec:41:92:b1:d8:7e:19:6b:a2:5e:65:d0:41:
fb:f8:85:38:30:2b:07:4f:50:19:c5:7d:80:c8:37:f4:75:0f:
93:bf:17:c1:94:b4:45:dd:22:76:9a:36:25:e9:3b:3a:e1:56:
64:db:cf:34:d9:ee:ad:de:4b:4a:42:56:d5:50:ee:2e:64:1e:
1b:f4:c4:b7:57:9f:37:80:ff:39:df:0c:bb:72:94:03:08:3b:
cd:e5:22:24:7f:be:87:99:53:9e:d9:7f:65:fb:cd:98:e9:e2:
af:2f:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:15:34 2024 by rpki-client on console-fra.rpki-client.org