Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC70A2F84B1E11EF93B65C9D762E951A.roa
File: BC70A2F84B1E11EF93B65C9D762E951A.roa (raw, json)
Hash identifier: OY47MgUH+kBZ743XasOUhRFgReFy1ctPXMhH+nGhaAM=
Subject key identifier: BE:04:42:C2:88:66:B2:C5:C4:1B:C2:C4:B8:0D:FB:00:C7:89:C2:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A05C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC70A2F84B1E11EF93B65C9D762E951A.roa
Signing time: Fri 26 Jul 2024 07:14:45 +0000
ROA not before: Fri 26 Jul 2024 07:14:42 +0000
ROA not after: Sun 04 Aug 2024 07:14:42 +0000
asID: 131464
IP address blocks: 156.230.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41052 (0xa05c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:14:42 2024 GMT
Not After : Aug 4 07:14:42 2024 GMT
Subject: CN=66a34ce5-1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:f4:a4:dd:66:26:67:c3:da:c5:76:17:c6:
f9:96:1d:9d:f5:df:77:3a:f5:fe:b4:c2:87:f3:b1:
87:dd:b5:89:bd:41:79:90:76:f2:cc:08:9f:7a:1b:
7e:b9:03:53:b2:58:9c:0d:fb:d4:b3:fb:08:18:09:
38:5a:07:26:96:39:a3:79:9c:76:07:11:f3:0a:cd:
c9:29:69:46:03:16:21:ce:0d:d8:3f:a9:44:d7:77:
ae:07:a4:20:c8:0c:ca:94:96:e4:e5:81:85:11:ec:
12:86:4b:5e:96:db:fa:0a:65:0f:61:b3:93:7d:a3:
99:14:33:2e:cb:ca:9f:96:a1:fe:e4:b3:51:44:74:
c9:f3:ac:5e:ac:5b:97:c0:41:38:35:80:44:8e:bf:
b5:3e:b7:ce:8f:62:b8:43:c8:69:02:b2:e0:ed:61:
02:70:92:4f:fc:31:aa:27:af:ed:ff:ee:58:27:53:
3e:89:33:f5:dd:a7:d6:9b:87:30:6b:8c:e1:2c:84:
b3:36:07:aa:ba:4c:97:7c:63:5a:94:d0:25:3d:f9:
8b:08:14:f0:60:94:a2:19:18:ef:4a:45:e8:65:31:
ba:d1:16:86:23:01:7f:37:0a:ae:6b:3a:a5:d2:f2:
59:ff:0a:76:d2:08:89:11:84:35:5a:0c:b3:a8:6d:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:42:C2:88:66:B2:C5:C4:1B:C2:C4:B8:0D:FB:00:C7:89:C2:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC70A2F84B1E11EF93B65C9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.0.0/24
Signature Algorithm: sha256WithRSAEncryption
54:61:d9:9a:93:99:56:55:c9:bf:ab:5e:ea:b6:c0:37:41:2b:
05:a5:0e:2d:f6:64:77:2f:80:80:0a:8a:36:ae:ee:a4:22:79:
a4:b8:d3:e1:de:63:f6:dd:c1:65:0e:f1:46:95:b5:05:96:3f:
4d:40:7b:fc:53:9b:61:57:82:13:51:26:76:98:08:5b:f3:19:
74:cc:a6:d0:54:35:23:a3:8b:dd:fc:8d:92:05:63:ce:1a:74:
d7:b2:a3:af:ac:a5:95:b2:53:d0:87:52:e5:b0:39:d0:08:66:
aa:5b:c1:83:a1:f2:41:fb:53:1e:8c:c7:22:55:35:14:04:c0:
51:27:4b:23:5a:9e:ce:22:d9:6e:31:c9:e6:e5:2b:dd:4c:2a:
14:78:46:d1:3b:72:3d:3b:08:85:03:92:b2:df:cb:f3:f5:e9:
f1:f9:74:a9:6f:b5:eb:4b:6e:9b:62:22:a3:9a:bf:32:2e:7e:
62:af:84:79:09:cd:49:2d:75:52:80:3b:71:d5:87:a2:56:2a:
f7:3b:92:21:0d:c3:dd:bd:63:13:99:d0:fe:0a:04:9d:08:cf:
2d:d4:6a:0a:87:a2:04:08:68:e6:d6:30:0b:ec:41:0f:06:ff:
61:45:68:a0:a2:b0:5e:3f:65:ac:81:09:e2:b2:2e:42:7d:cc:
22:3c:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:36 2024 by rpki-client on console-ams.rpki-client.org