Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCEB9C3044E111EFBA0CD8B2762E951A.roa
File: BCEB9C3044E111EFBA0CD8B2762E951A.roa (raw, json)
Hash identifier: po1CHw6nK0i1V5cUlKEkKUWGMJp6CwvePo5SZmhQjnU=
Subject key identifier: BD:C9:28:D6:6E:31:A2:E9:DC:98:60:29:E3:FA:BC:FC:DC:33:63:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCEB9C3044E111EFBA0CD8B2762E951A.roa
Signing time: Thu 18 Jul 2024 08:43:00 +0000
ROA not before: Thu 18 Jul 2024 08:42:57 +0000
ROA not after: Sun 28 Jul 2024 08:42:57 +0000
asID: 5065
IP address blocks: 156.252.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40291 (0x9d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 08:42:57 2024 GMT
Not After : Jul 28 08:42:57 2024 GMT
Subject: CN=6698d594-3213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:36:ef:ae:21:d8:45:d8:53:28:b5:48:58:
51:bd:4c:99:85:9d:fb:42:12:14:d4:ad:22:c0:2e:
f3:ea:23:cd:e6:d1:5d:04:07:0b:2c:85:78:b1:fd:
07:86:a2:cf:ee:3e:47:25:cf:8f:50:17:86:a8:ae:
00:d5:dd:87:d8:dc:0f:01:7f:3a:d7:20:89:41:ee:
32:c5:62:a7:24:bb:c7:1e:b2:12:17:ec:d3:ae:f8:
25:31:78:cc:f1:55:67:26:ef:17:de:18:55:f4:84:
e8:e4:d1:95:34:47:06:af:3b:12:c8:c9:dc:92:63:
8a:0d:12:34:16:fa:a6:64:58:49:c6:97:05:2a:81:
6b:29:21:d3:aa:ee:de:48:a4:67:be:bc:0b:3b:40:
4f:15:0b:78:3b:f7:71:0a:10:8b:95:0c:b5:5c:e9:
bc:d2:bd:8d:fb:3a:4a:36:4e:14:6b:27:11:0f:90:
98:ec:64:3c:a0:bd:6a:ea:dc:d0:95:60:c2:64:3e:
c0:23:a2:7b:eb:ef:fb:5e:f3:26:a1:a9:e3:51:52:
e3:c5:1c:1c:6b:ee:ed:6a:7e:1d:3c:d4:89:c2:58:
35:dc:26:64:0f:d3:d4:30:7c:d3:f0:67:51:a4:12:
5b:4b:6b:87:7e:44:bd:a5:44:d4:32:4e:dc:77:cd:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:28:D6:6E:31:A2:E9:DC:98:60:29:E3:FA:BC:FC:DC:33:63:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCEB9C3044E111EFBA0CD8B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:bc:76:2e:3a:fd:ef:9e:83:9d:9b:ac:71:8b:39:65:72:c6:
6d:5a:22:89:4b:32:3a:1f:73:90:5b:3d:0d:98:28:3b:87:cb:
ca:23:67:c4:76:e9:fc:fb:4f:3d:c6:6a:a5:31:cf:72:95:07:
48:53:e6:61:e4:36:2f:6f:59:ff:19:ba:7e:e2:0e:10:dd:91:
a2:ae:a4:d9:22:44:79:f3:d0:01:6e:68:e3:90:df:89:d0:76:
a7:6a:3d:eb:e5:51:57:4b:81:2a:a1:d7:6a:ea:66:4e:48:d6:
cd:be:5a:01:9d:2c:3f:71:1d:5e:84:32:0d:d7:e4:c8:d7:f3:
84:ef:32:99:fd:66:38:c6:33:6e:0d:e3:e7:8a:22:65:06:96:
1d:ac:fc:4e:8c:06:93:10:f5:d3:28:25:20:08:19:1b:c5:dc:
19:af:62:f9:47:2a:26:ea:65:90:0f:2d:13:ba:f3:aa:80:ee:
77:81:b0:bb:dc:27:34:8e:a2:22:5c:05:cc:a5:51:be:5e:80:
18:cc:41:1f:c3:4e:43:ac:ac:ce:9b:59:5a:04:eb:06:f1:dd:
65:e1:fd:01:6a:d8:44:d7:54:03:50:1e:ab:44:3f:50:d2:aa:
e3:ad:2c:1a:94:52:31:4d:5d:7e:ee:47:c6:8a:33:19:1b:52:
61:5c:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 03:38:52 2024 by rpki-client on console-ams.rpki-client.org