Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2FFE61848C811EFAE5E37BB762E951A.roa
File: C2FFE61848C811EFAE5E37BB762E951A.roa (raw, json)
Hash identifier: iLUkSuHihHBld0GVVV5Z86nxLm2VuemsWa4uTSLy5q0=
Subject key identifier: 9C:C2:B2:FD:1D:0C:0F:61:56:58:9F:C7:B8:ED:64:23:DB:D1:87:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2FFE61848C811EFAE5E37BB762E951A.roa
Signing time: Tue 23 Jul 2024 07:54:17 +0000
ROA not before: Fri 26 Jul 2024 07:54:14 +0000
ROA not after: Fri 23 Aug 2024 07:54:14 +0000
asID: 202656
IP address blocks: 156.246.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40574 (0x9e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:54:14 2024 GMT
Not After : Aug 23 07:54:14 2024 GMT
Subject: CN=669f61a9-6c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:cf:5c:0d:ba:bd:de:2c:a7:d3:3c:a0:60:
25:4a:3f:d4:01:1d:61:25:a3:9d:e1:29:87:6d:e4:
b3:3a:e3:f0:68:37:1a:05:c1:ff:c1:d2:a1:3f:2e:
75:71:0a:1b:3a:da:70:ae:be:98:40:45:a0:51:68:
08:d5:1e:c9:5b:d4:42:1a:1e:57:42:b8:20:85:b3:
b3:c7:37:da:0c:3b:8a:72:bf:52:5c:05:c1:d1:ba:
3a:35:1d:0c:78:09:45:a1:09:58:15:83:a4:fb:65:
43:5e:11:47:d6:8f:31:0b:56:7c:00:da:4e:d7:8f:
af:45:45:61:65:92:35:8d:fa:6a:f9:78:d9:51:f7:
28:8a:a2:37:94:6f:6e:e3:ea:8f:4a:b7:a7:82:76:
da:24:f5:89:33:67:57:73:61:5a:40:37:98:f7:39:
82:c1:ac:c4:64:a5:36:18:e9:b0:f0:92:5a:59:f0:
b8:1e:b0:75:86:39:74:d1:92:d2:01:34:80:27:c5:
73:27:b4:62:ed:16:9b:a7:32:2c:d2:46:0d:13:cf:
fb:11:5c:62:ec:12:ab:67:82:4b:55:12:29:b0:1e:
4d:23:26:a0:d5:96:84:8a:26:0c:cb:6d:e3:51:5f:
97:ec:55:26:06:e8:a7:3a:b7:f6:98:ca:fc:11:32:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:B2:FD:1D:0C:0F:61:56:58:9F:C7:B8:ED:64:23:DB:D1:87:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2FFE61848C811EFAE5E37BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6f:e1:2c:80:63:18:b6:ed:b8:7d:10:74:32:c2:c3:66:d1:
3c:17:0b:92:58:e1:17:8a:fe:bb:ca:72:c9:ef:06:af:29:dd:
f4:56:3f:d6:31:b9:90:6a:86:3f:8f:02:52:4a:4b:50:78:3b:
67:8c:48:5e:0d:c8:13:d6:bc:6b:fb:6f:93:5d:c6:92:8c:33:
7c:aa:a5:9e:21:41:b5:65:69:da:95:26:a6:cd:6a:cc:75:4e:
a3:29:d6:d1:bf:a5:90:32:6a:90:38:99:ee:73:d8:50:84:84:
39:d9:bd:8b:f3:76:9a:01:4a:a5:75:90:30:8b:dd:e8:19:fc:
02:d2:e9:87:c4:8f:6d:45:44:d1:f2:17:33:bd:69:f6:42:74:
7f:30:60:cc:36:c8:28:f0:9a:7c:c5:5a:0b:71:13:12:04:eb:
a3:78:67:c5:a0:77:d1:5c:0f:aa:74:c5:76:38:18:e5:57:df:
ef:27:53:4e:2b:62:97:04:4e:b9:df:67:d8:e8:c9:35:54:f6:
9f:34:c6:8f:61:9d:81:1a:8c:99:36:b1:5c:d8:eb:39:ad:23:
bd:0a:f4:51:dc:34:aa:eb:d3:fc:5d:55:d2:9d:89:7b:fc:b6:
68:8d:ed:22:7a:04:59:de:dd:47:63:f1:9c:fd:b6:44:59:87:
db:f4:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:03 2024 by rpki-client on console-ams.rpki-client.org