Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C244BD02F0BC11EE92FFDA52775412E6.roa
File: C244BD02F0BC11EE92FFDA52775412E6.roa (raw, json)
Hash identifier: 7Yr2HxAv/3Blee3PClJGFMEvb6BkbkFTKYyBqcVNWkc=
Subject key identifier: 3A:34:65:E3:9A:4D:AD:9E:17:F4:48:D5:2F:FE:79:20:DA:0C:82:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8134
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C244BD02F0BC11EE92FFDA52775412E6.roa
Signing time: Tue 02 Apr 2024 06:46:40 +0000
ROA not before: Tue 02 Apr 2024 06:46:36 +0000
ROA not after: Mon 29 Apr 2024 06:46:36 +0000
asID: 139646
IP address blocks: 156.246.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33076 (0x8134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 06:46:36 2024 GMT
Not After : Apr 29 06:46:36 2024 GMT
Subject: CN=660ba9d0-cddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:94:12:a8:9d:94:9b:67:ac:24:78:2b:49:
6e:3d:4c:2b:b0:b3:1c:ca:c9:bf:6d:ec:7b:f0:90:
61:56:b3:cd:c2:6d:35:32:cd:e7:3e:f1:0a:92:12:
d9:ee:54:e0:38:0a:ad:4c:05:22:0d:a7:2b:8f:0d:
36:c4:77:b8:0c:a9:62:f6:54:0a:54:94:19:29:b0:
5b:d8:1c:98:4f:35:4a:9a:b8:d5:97:8e:89:49:76:
b4:b4:6c:42:f0:9b:b3:5b:11:e9:61:75:94:15:54:
f8:11:66:16:71:2b:c4:31:74:02:b3:b8:e5:9d:13:
68:7a:db:35:fb:f8:54:55:13:f7:dd:ad:0f:be:67:
2e:cc:3d:5c:92:b9:b3:4e:59:c2:9e:b9:26:d8:39:
a2:95:f7:24:91:cf:87:d8:4b:b9:d2:f8:fe:19:89:
35:da:02:18:43:69:17:45:d4:30:4d:97:ea:bb:d0:
fa:0e:54:8e:20:36:58:61:c1:a3:df:06:da:3d:70:
24:cf:7e:8b:c7:59:58:85:85:54:ee:b0:44:d7:73:
b3:27:32:01:71:99:1f:cf:8b:3e:29:b5:0c:66:73:
ba:93:d4:4d:da:0b:a8:7f:4e:e6:bf:ce:75:ca:0c:
e0:3e:0f:87:4a:5e:52:4d:9e:f6:6c:8b:e3:ba:4b:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:65:E3:9A:4D:AD:9E:17:F4:48:D5:2F:FE:79:20:DA:0C:82:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C244BD02F0BC11EE92FFDA52775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.10.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:f2:88:73:ee:65:cf:76:4d:2e:95:22:b2:a3:dd:bc:02:60:
5c:6a:25:2b:80:1d:9b:a7:4e:bb:4d:4f:37:7d:44:5e:a0:79:
e2:db:be:ae:7b:75:89:67:c6:98:2b:f4:57:73:19:22:1b:73:
e2:65:3c:9f:ed:57:20:9b:2f:45:e3:7e:ba:9c:da:31:6e:1d:
1d:e8:ff:07:f1:d1:74:94:61:1d:14:8e:14:d6:69:eb:ed:8a:
7b:e2:ad:48:2b:eb:8d:e5:bc:60:d6:33:e7:68:df:e3:7f:1b:
15:03:b8:c7:aa:dc:b2:50:c0:9d:6a:ec:4d:11:4e:71:31:cb:
e8:9b:5b:fe:7e:06:c2:44:a5:9e:67:ca:bd:83:db:c6:3a:98:
b5:7f:5d:41:35:2f:44:0a:8b:a5:b1:ac:05:74:a0:c0:76:47:
34:e6:ba:c7:5f:60:6b:4d:54:d7:3c:2f:6c:28:6e:c8:b0:fc:
c2:b2:56:24:e7:19:47:df:ce:1d:8b:8d:4c:38:d4:ce:0c:58:
c5:9a:f0:3c:f6:a9:7a:bd:76:54:85:79:f8:c0:e0:26:38:e6:
5c:50:4b:cd:f3:65:c4:fe:90:72:ee:4e:f6:97:eb:8d:35:da:
df:b1:d3:d3:f4:f9:52:bd:35:bb:84:f5:a3:c9:70:fb:81:84:
f2:8b:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org