Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF1395C4320F11EFBF333DA0762E951A.roa
File: BF1395C4320F11EFBF333DA0762E951A.roa (raw, json)
Hash identifier: MvXYHtwt55TmTpvuLn7VGmnlN1ttFAyUurKFp7uIv+I=
Subject key identifier: 83:04:83:2A:C3:5F:C7:98:EB:83:78:11:89:2B:EA:5C:F2:CA:89:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9455
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF1395C4320F11EFBF333DA0762E951A.roa
Signing time: Mon 24 Jun 2024 09:54:29 +0000
ROA not before: Mon 24 Jun 2024 09:54:25 +0000
ROA not after: Sat 27 Jul 2024 09:54:25 +0000
asID: 20473
IP address blocks: 156.236.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37973 (0x9455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 09:54:25 2024 GMT
Not After : Jul 27 09:54:25 2024 GMT
Subject: CN=66794254-9a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:93:6b:5d:a1:df:c4:76:a2:05:25:91:0d:
30:10:76:7a:60:e0:30:36:20:39:5c:f2:e1:3c:ce:
1e:a6:0f:1b:68:52:6d:ca:2d:94:0e:e5:e8:ae:21:
21:b3:93:a8:f0:66:66:c7:4e:f2:ba:25:53:d7:61:
75:72:20:d7:f9:8b:fc:5f:ad:7a:25:b0:3b:62:9a:
f4:e5:fa:13:75:af:a0:f3:95:61:06:00:d1:9c:9d:
28:4b:1a:f8:06:03:38:c2:02:1d:ce:2c:25:c8:4a:
ab:3b:d5:ca:44:b4:c3:7a:78:07:4a:33:06:81:b2:
d0:3c:22:13:91:e9:64:bf:fa:70:da:f0:ab:5c:4e:
91:79:45:38:4a:a8:4d:60:06:62:4b:5d:e8:ba:ba:
07:2f:52:9b:42:a2:f4:da:45:5f:b0:91:ee:1f:7d:
49:22:52:99:39:2a:0f:87:12:5c:99:41:03:eb:c6:
7b:34:6b:5c:07:ae:e5:95:0b:f6:9c:62:bd:9b:65:
91:cb:21:e7:d2:23:64:2e:fd:ba:a7:24:a2:5b:98:
22:01:56:3f:5d:b9:0a:6a:c2:6a:a4:ae:ca:db:ff:
9f:65:66:25:6b:70:ef:9a:43:6e:da:d0:09:2b:23:
5b:8a:f6:28:6d:f1:18:07:b4:2d:8c:dc:2a:c9:59:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:83:2A:C3:5F:C7:98:EB:83:78:11:89:2B:EA:5C:F2:CA:89:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF1395C4320F11EFBF333DA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.78.0/23
Signature Algorithm: sha256WithRSAEncryption
90:93:67:2a:c1:0e:06:06:1d:26:d7:49:fb:4c:80:6e:84:06:
e3:44:f6:6a:6a:c9:63:27:f8:03:50:29:ba:12:ce:a2:6d:a3:
c0:4e:24:94:8d:63:58:c6:25:cb:4c:d2:f9:c2:39:a0:e2:18:
1c:b1:9d:38:1a:94:e8:03:ec:75:25:f1:e8:e8:8a:ba:12:33:
79:58:fb:26:01:b0:02:4a:02:bf:d4:75:f5:bd:bd:16:16:ef:
d1:bc:f2:bb:b9:56:8b:6a:97:8f:65:d3:ac:75:c8:00:9e:d8:
be:f5:41:27:a8:63:51:5c:ea:cf:eb:06:ff:38:e8:c3:94:5c:
b7:19:27:86:81:fc:d4:d9:08:5f:5a:af:57:6a:3d:44:3a:93:
f2:0d:24:c3:17:31:f4:8e:4e:2f:03:46:fe:36:38:a3:7f:17:
46:3a:7c:14:43:d7:7f:e5:ae:c6:db:50:aa:a4:68:d4:ae:0d:
6d:b6:ae:76:53:a3:22:5c:20:8c:2e:df:6c:86:08:62:4b:13:
6f:07:73:23:c4:00:51:34:38:0b:d4:ef:e6:33:79:f4:7c:31:
a3:31:f4:cd:f8:14:d4:b3:d1:da:9f:b1:e8:1c:8b:1a:4d:1b:
09:da:35:5a:78:ea:88:04:8e:fa:7b:42:9a:7f:ed:ea:ef:5e:
91:23:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org