Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC6055A435E11EFA0CDCC68762E951A.roa
File: BFC6055A435E11EFA0CDCC68762E951A.roa (raw, json)
Hash identifier: EXI4nzHTBjRnKCW0ULQMgiDub3DAmQif3moCiNHA1Fs=
Subject key identifier: FE:81:B7:CB:8E:D9:2D:F2:6D:37:8E:32:AC:BD:4D:F8:A7:A8:7F:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC6055A435E11EFA0CDCC68762E951A.roa
Signing time: Tue 16 Jul 2024 10:32:49 +0000
ROA not before: Tue 16 Jul 2024 10:32:46 +0000
ROA not after: Sun 18 Aug 2024 10:32:46 +0000
asID: 62240
IP address blocks: 156.229.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40149 (0x9cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:32:46 2024 GMT
Not After : Aug 18 10:32:46 2024 GMT
Subject: CN=66964c51-37ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:28:33:f9:d5:93:c4:ce:55:4b:f9:5c:27:
32:37:e4:fe:f1:f4:a5:72:ce:0c:e7:11:d0:9f:34:
d1:9b:ad:33:af:5b:a2:de:f9:b5:f4:af:39:ff:6b:
22:90:3a:55:3d:a1:1d:92:b0:df:27:ff:4f:ac:40:
96:3f:05:fb:70:ab:95:d3:b3:0c:5f:7c:a6:1d:0a:
95:a5:11:03:d2:b1:70:e6:aa:62:55:f6:ca:eb:57:
78:9c:f3:a6:68:4e:32:20:57:03:ed:c6:7d:1c:b2:
a6:e4:8e:43:61:1c:9e:a5:b1:4e:95:a5:36:23:65:
b5:5e:98:32:a1:56:37:4d:39:87:00:ab:ea:50:1c:
24:01:80:0a:7c:cf:7a:73:72:0e:93:81:01:6b:c6:
96:88:fc:3c:f7:55:a0:f3:59:aa:ba:5b:07:fc:ab:
fc:39:29:f7:97:eb:78:c0:e2:24:6a:cb:cb:d9:3d:
85:8c:eb:c0:df:a6:e7:fe:1d:56:c7:e8:fb:77:b2:
99:de:d2:2f:c1:15:79:3f:db:e4:a7:13:8a:9b:55:
2d:7c:e1:ba:a9:4b:da:2f:ed:7e:18:f6:22:66:4a:
9d:28:dc:38:dc:b7:b7:14:39:d0:06:7f:3b:16:65:
7c:be:c3:61:4c:0f:fc:8e:e2:2e:ea:67:bb:85:c6:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:B7:CB:8E:D9:2D:F2:6D:37:8E:32:AC:BD:4D:F8:A7:A8:7F:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC6055A435E11EFA0CDCC68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d6:fd:0d:35:68:1c:89:96:3a:da:ad:6a:14:d6:45:4b:57:
06:76:58:ac:d2:af:80:8a:17:ef:87:a3:b7:bd:42:8f:bb:74:
27:ab:e4:bd:0c:4b:6c:63:f0:5c:5a:2b:61:4f:6e:e5:5f:c6:
00:bb:51:ea:19:be:5c:03:99:da:1c:10:a4:52:35:d5:30:c8:
3a:5a:8b:2a:52:e3:5e:b7:f5:e7:34:00:c6:d7:81:12:7d:67:
5f:99:83:a2:45:21:82:79:df:81:3b:19:54:7a:e0:57:37:49:
ff:44:c9:64:b8:a9:20:ff:93:ff:dd:6a:45:02:2e:5f:6f:cb:
9c:10:62:dd:0a:13:ec:4f:f6:b3:12:1f:4d:14:9e:77:3f:aa:
d1:e4:01:fd:81:86:53:14:22:17:be:ce:b1:0a:89:23:54:f4:
36:32:5b:bd:a6:b5:c5:0c:4e:29:20:4a:8a:b3:c8:17:27:95:
93:0d:a5:f1:bb:00:89:1b:89:6e:5a:6a:e4:11:56:29:9f:16:
db:da:3a:1b:58:b9:e7:53:10:87:b8:50:9e:ca:14:64:5f:ab:
8b:20:2d:b6:0c:79:56:f1:47:74:32:2b:64:04:5c:06:6d:1f:
c7:80:f6:e5:18:c8:1f:bf:70:b9:37:3b:b2:0d:e1:cf:eb:fc:
10:b0:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 05:23:05 2024 by rpki-client on console-ams.rpki-client.org