Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6A9C89848C711EF952595B2762E951A.roa
File: C6A9C89848C711EF952595B2762E951A.roa (raw, json)
Hash identifier: 0cNDfa/09/Qwbc4X55LrObt3N5/0rwqu/HtmTPfoo98=
Subject key identifier: 59:D1:4F:32:86:9F:3A:AD:50:90:D7:83:F1:A6:C2:83:E5:F4:1D:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6A9C89848C711EF952595B2762E951A.roa
Signing time: Tue 23 Jul 2024 07:47:14 +0000
ROA not before: Fri 26 Jul 2024 07:47:11 +0000
ROA not after: Fri 23 Aug 2024 07:47:11 +0000
asID: 202656
IP address blocks: 156.246.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40558 (0x9e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:47:11 2024 GMT
Not After : Aug 23 07:47:11 2024 GMT
Subject: CN=669f6002-f061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:ee:32:52:e4:76:bb:34:cb:90:81:da:7d:
47:b4:fe:71:55:23:26:d0:70:01:68:24:5a:bc:c2:
92:42:2e:3e:90:b5:24:b3:19:af:06:d6:b0:e9:c1:
60:54:c7:61:2a:86:90:bc:9a:98:9f:16:ce:69:8c:
6b:43:36:1a:0a:f3:9b:a8:27:ff:1c:db:28:2c:9b:
54:14:b9:a0:d4:5a:a3:42:c7:56:93:d8:be:f8:b0:
92:f7:97:eb:26:96:d9:d1:7c:8b:03:40:b1:cb:71:
a8:0e:bd:eb:1f:2f:cf:3c:4b:af:bf:ca:6b:0e:3d:
c3:de:80:9b:f2:7a:f7:57:7f:4e:54:ba:54:9c:ee:
48:f7:24:14:c3:d9:95:ed:24:08:00:ad:fb:1e:d4:
59:bf:d0:4e:40:f3:b5:f1:d5:6f:36:ae:04:67:96:
57:85:20:bd:08:ba:4c:5e:e9:1a:23:23:72:9d:17:
0a:88:79:d6:ca:de:95:48:e8:f6:3d:46:51:b2:f2:
6b:81:76:78:4a:e4:3b:03:cd:dd:29:62:34:4d:2c:
cd:d8:1a:ce:7a:52:f6:7d:33:7e:0b:d0:a0:d8:69:
8c:cc:d9:f5:e6:be:57:0b:dd:13:c5:fb:95:97:34:
21:0e:26:71:37:bd:c9:f7:78:53:07:ae:31:0f:96:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:4F:32:86:9F:3A:AD:50:90:D7:83:F1:A6:C2:83:E5:F4:1D:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6A9C89848C711EF952595B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:ce:0c:a7:59:08:9e:4a:c5:3a:d1:9b:e7:e8:65:1d:60:9e:
eb:ce:cb:a8:12:7b:37:6d:39:98:5b:0b:c8:dc:f9:0e:13:f6:
37:ef:fb:99:12:d0:b6:d0:71:68:10:f9:f2:31:8b:90:05:5d:
7e:40:a8:f2:7c:48:62:27:cc:ed:fa:d9:48:72:6f:7e:02:6c:
1d:ce:f9:14:4b:30:e9:f5:af:7c:46:8c:23:aa:fb:39:76:43:
41:9f:57:91:ca:92:ea:8d:b9:39:8e:81:6c:dc:de:e3:1f:37:
86:98:5c:71:86:f5:f5:31:d4:00:93:82:64:e6:78:33:37:dc:
9c:33:89:fd:27:c9:c8:31:ca:2b:f3:3e:0a:42:8b:96:e1:29:
18:2b:f8:92:e1:5b:85:44:01:86:da:4f:d3:9b:c8:af:26:df:
7e:1c:5c:7b:d1:7d:0c:71:21:3a:9c:fc:83:f5:30:1c:93:ac:
f0:08:c5:9a:74:c0:3f:25:2a:20:f0:9c:ad:e1:fd:20:1e:6b:
4a:92:65:68:03:a8:db:70:25:22:ea:e9:d8:57:ff:6a:c4:96:
9b:54:20:cf:be:88:34:ee:ee:b1:ce:b1:16:a3:3f:32:35:a5:
cf:cb:ed:be:be:df:ee:f5:c5:80:08:2a:e0:ca:ec:dd:e7:7e:
ac:15:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org