Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C502459848C611EFB75E66AD762E951A.roa
File: C502459848C611EFB75E66AD762E951A.roa (raw, json)
Hash identifier: XM6BBqTQEm1TtrSBY70DjNbu+LedxRH0fJH9URThxCc=
Subject key identifier: A7:83:D1:B6:53:1C:F7:05:70:4A:75:DB:DB:6F:15:36:06:A1:58:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C502459848C611EFB75E66AD762E951A.roa
Signing time: Tue 23 Jul 2024 07:40:02 +0000
ROA not before: Fri 26 Jul 2024 07:39:56 +0000
ROA not after: Wed 21 Aug 2024 07:39:56 +0000
asID: 63139
IP address blocks: 156.227.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40544 (0x9e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:39:56 2024 GMT
Not After : Aug 21 07:39:56 2024 GMT
Subject: CN=669f5e52-b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:94:3f:f9:fc:4c:c4:60:d9:e7:1a:1b:88:
26:a1:2c:a2:98:b5:4f:74:f0:a2:70:12:db:47:7c:
76:2c:20:52:d8:67:e6:6e:aa:cc:6a:54:25:f6:a2:
76:4c:2f:8c:b1:e7:f1:00:2e:5e:14:2b:6f:18:ce:
e6:f3:b2:0a:b9:09:fd:72:41:dd:ab:00:0e:ec:49:
19:e4:47:58:d6:30:40:d1:9c:f0:fe:1d:f7:dc:63:
15:d6:7d:cf:5d:ed:1f:78:8b:9b:dc:ab:03:b3:ea:
fc:df:7a:e3:66:77:4a:72:0c:04:a6:d2:0d:0c:0b:
35:43:19:ca:2f:58:15:51:ac:91:db:a9:c4:07:66:
e3:99:3c:f9:f2:c4:16:68:36:80:2b:33:31:69:64:
10:3d:b3:27:6c:6d:30:0c:e1:95:d5:24:da:40:1a:
bd:26:f4:4c:d9:4f:61:ca:60:8a:ee:28:ed:ee:b3:
c8:4c:51:26:b9:94:04:49:65:e3:6e:86:4f:d9:1d:
f1:02:74:4c:b5:7b:16:ec:9e:a9:f0:dd:ef:ba:37:
b9:65:41:68:64:fb:a1:24:fc:57:4d:5b:db:a8:bd:
22:70:02:67:54:9a:46:41:a0:00:5c:02:bf:50:cd:
86:66:89:28:86:67:77:9a:1d:61:89:52:3c:39:81:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:D1:B6:53:1C:F7:05:70:4A:75:DB:DB:6F:15:36:06:A1:58:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C502459848C611EFB75E66AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.199.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1f:81:fd:b1:42:93:ce:38:31:1f:cd:d4:25:98:a7:f0:af:
91:fe:2e:83:3d:a5:61:5a:b7:96:e3:47:ea:14:2c:8c:b0:aa:
5f:eb:1a:63:26:ca:b4:a1:aa:8d:73:8f:8e:73:57:81:1c:3a:
09:30:6c:e3:2e:d0:65:11:35:86:75:b0:f3:e9:4c:4d:1b:d6:
03:f6:f1:79:44:c2:6c:16:9e:41:cc:a8:8a:43:05:6c:59:a6:
97:a7:97:dc:5c:a6:bb:4a:32:36:25:f2:78:9c:98:3b:2a:28:
88:22:21:1d:2c:b7:7a:9f:c9:b5:88:52:f0:fe:c6:87:2b:06:
df:ca:ab:7e:75:ea:fa:4e:07:ab:f8:82:1a:d4:c9:a7:df:44:
f2:f3:fb:cb:fb:f3:69:00:57:19:88:0f:5d:a3:70:c1:38:c3:
e4:b5:df:87:53:99:ad:4f:33:47:76:73:d5:bd:20:bf:bb:6c:
5e:2f:99:47:f5:be:6e:62:55:aa:05:bd:39:37:d4:0a:40:49:
ee:ca:31:72:d7:44:29:fc:bc:db:7c:42:48:9c:81:68:5f:f6:
aa:54:f6:2f:95:62:8d:85:14:0d:34:d3:17:fa:b5:98:91:04:
b3:b7:49:75:07:95:ea:28:62:d9:0f:0e:fc:ab:fd:94:b3:67:
37:27:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 09:45:54 2024 by rpki-client on console-ams.rpki-client.org