Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15945E03CD211EF8B91AD66762E951A.roa
File: C15945E03CD211EF8B91AD66762E951A.roa (raw, json)
Hash identifier: EeqT1bFuboduNIYMdCgkUCWmejrmg0B2/hRNlzrQca4=
Subject key identifier: D0:D8:64:B0:A2:5C:B6:A8:C3:D3:87:DB:69:D0:51:B1:75:00:0D:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9976
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15945E03CD211EF8B91AD66762E951A.roa
Signing time: Mon 08 Jul 2024 02:35:36 +0000
ROA not before: Mon 08 Jul 2024 02:35:32 +0000
ROA not after: Sat 10 Aug 2024 02:35:32 +0000
asID: 64267
IP address blocks: 156.248.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39286 (0x9976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:35:32 2024 GMT
Not After : Aug 10 02:35:32 2024 GMT
Subject: CN=668b5078-4872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:c3:c0:42:69:cf:23:e3:92:4c:14:0c:31:
3d:61:3b:02:d8:5b:0d:f1:ce:e8:66:d2:28:c5:06:
75:ad:8d:a0:24:80:e0:ea:b3:7b:2f:a9:ab:7f:a5:
cd:fe:71:a9:01:85:ff:a4:a9:1f:6d:20:a0:c3:4d:
df:24:0c:98:50:ca:f1:0f:26:fb:10:0c:96:1a:6a:
de:2b:03:a7:8b:8c:f6:fc:c3:48:d4:e9:d2:60:ae:
c5:10:ac:30:18:e1:bc:be:f1:c0:6d:2b:d1:de:ec:
c4:08:98:a9:5a:50:9f:26:4a:ed:99:55:27:c7:cc:
71:ee:c0:07:04:2e:2d:22:58:4e:94:15:67:82:59:
0d:ca:e7:3d:4e:94:24:41:c6:25:61:3c:ab:43:28:
8e:14:44:28:6d:7a:9f:4a:35:95:db:ef:82:93:ac:
1a:20:1c:e2:83:80:5d:fd:2e:36:b1:92:9d:df:38:
c0:4a:10:27:97:43:f8:df:e1:ee:e9:ca:fa:b3:1c:
37:49:2d:b2:a0:dd:bb:3f:1f:2c:c9:06:20:89:45:
a2:23:59:05:03:03:91:41:e5:3c:da:c5:7b:7a:fb:
c5:2f:35:d4:b8:7e:07:db:1a:1e:04:7d:55:ab:e0:
fc:ac:54:d7:e9:87:6b:14:18:eb:76:68:ee:b3:0f:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:64:B0:A2:5C:B6:A8:C3:D3:87:DB:69:D0:51:B1:75:00:0D:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15945E03CD211EF8B91AD66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d6:d7:d6:58:da:95:d0:c9:33:c9:ad:42:65:20:53:93:9e:
b6:e6:c8:f8:5c:f8:06:1b:d2:f6:96:8d:e4:bb:75:dd:d0:ae:
7e:d9:d6:4a:7e:58:26:76:9e:cd:1a:88:c3:9b:70:b3:91:81:
3a:a2:66:b1:0f:e7:d9:84:c8:6b:85:22:44:82:38:e0:6d:bd:
77:86:2a:66:c2:e1:54:b0:b4:da:fa:73:0d:4c:6a:83:15:5d:
e8:33:bb:51:25:e6:5b:3f:59:31:22:18:d8:60:36:a4:b2:11:
a9:87:77:26:09:c2:4b:4e:28:13:f8:0e:a7:0c:4b:1f:ac:99:
f0:0b:fc:d4:14:b3:ed:d6:3a:b0:00:c9:c7:ee:41:27:6b:7b:
0b:24:16:db:e0:28:58:69:1b:59:b2:1a:c6:d1:6e:c8:56:5d:
9f:8f:58:12:40:45:5a:2d:3f:f1:33:dd:f0:1f:41:70:b7:f2:
86:a8:b7:cf:79:49:e6:92:70:1d:93:c3:07:e1:9c:74:ef:1a:
1e:71:34:3b:b1:e6:42:3b:58:d1:5f:79:61:03:84:23:4e:4d:
65:54:32:31:93:f5:21:f6:ae:e9:31:5e:57:0a:50:2b:27:71:
90:19:a9:78:71:40:a7:43:74:02:35:30:79:93:30:ae:77:f1:
f7:af:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:32 2024 by rpki-client on console-fra.rpki-client.org