Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6CB95E644DE11EFB904F69F762E951A.roa
File: C6CB95E644DE11EFB904F69F762E951A.roa (raw, json)
Hash identifier: VKRw+TL9qSHN0DggpK2jkdUDituA+BfUKgFg9P7q7WM=
Subject key identifier: C9:77:C7:0B:FC:03:0E:B4:66:C6:D7:F3:AE:5B:06:34:60:9D:FF:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6CB95E644DE11EFB904F69F762E951A.roa
Signing time: Thu 18 Jul 2024 08:21:48 +0000
ROA not before: Thu 18 Jul 2024 08:21:45 +0000
ROA not after: Sat 27 Jul 2024 08:21:45 +0000
asID: 7018
IP address blocks: 156.249.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40273 (0x9d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 08:21:45 2024 GMT
Not After : Jul 27 08:21:45 2024 GMT
Subject: CN=6698d09c-8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:6e:1e:6f:5a:67:08:ed:91:24:f6:52:2f:
f8:3b:64:61:ab:d7:e4:4a:0d:11:3e:d0:7f:df:59:
7e:83:cb:59:76:fb:e6:15:24:60:cc:c1:c8:0e:1c:
1e:23:64:6d:13:bb:74:62:26:36:fc:d9:19:a0:89:
99:35:99:00:30:f8:c8:c9:6a:68:3e:11:1c:0f:f0:
5c:1f:1c:29:99:88:af:b4:07:9e:5e:0a:df:9e:a2:
5a:0a:95:42:bd:3e:f8:79:fa:80:b1:d9:77:b8:16:
cc:e2:13:8d:cc:c4:ad:85:18:e5:6a:70:45:b7:94:
fc:41:4e:26:f5:77:45:26:7a:2f:0c:77:97:fc:6a:
27:0e:c3:20:19:0d:1f:ff:21:28:85:2d:a2:b5:ef:
c5:3b:44:11:f6:93:c6:d3:d0:7a:ff:9e:62:84:a8:
da:1c:cf:92:63:18:a5:88:36:43:88:2b:40:4b:01:
bf:58:c0:1f:f6:65:bc:00:5a:84:d7:3c:ec:d2:1e:
2e:61:f5:bc:8c:42:a6:db:fe:c6:3b:e6:81:a8:ad:
51:8c:3d:46:cb:3b:53:00:36:ad:17:46:b1:f6:0e:
1a:1f:f2:cd:60:d0:93:36:e1:bf:f1:fb:32:85:16:
ce:c2:19:6d:5c:e5:e1:57:c7:ee:3f:18:36:60:74:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:77:C7:0B:FC:03:0E:B4:66:C6:D7:F3:AE:5B:06:34:60:9D:FF:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6CB95E644DE11EFB904F69F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.48.0/21
Signature Algorithm: sha256WithRSAEncryption
73:cd:17:7f:88:9b:ed:1e:50:ec:56:31:0e:ed:a0:19:2e:68:
fa:43:d4:2e:4c:1d:6d:fc:1f:5d:15:21:9b:f9:8f:20:5e:2a:
bb:c1:8c:0e:c9:7e:19:70:04:da:99:c4:20:2b:6b:85:d9:46:
f1:59:91:01:83:a7:7e:85:1f:32:f3:9a:4b:e4:ad:9d:77:ef:
df:84:b2:a2:ef:2b:1d:a5:58:77:95:71:02:ed:89:29:f5:44:
c0:04:f9:e8:f3:7e:a2:17:86:24:e8:a1:1f:85:08:5a:14:33:
fa:90:2c:f2:6c:cc:da:11:38:71:54:1b:c4:5f:6f:60:27:60:
f1:0e:9c:9d:9d:32:1d:ac:30:bb:ad:d2:98:bb:6c:7f:d1:7e:
0b:f6:89:5c:d6:9d:12:44:e6:e4:06:8c:c2:41:54:a7:26:97:
42:6a:53:00:05:f3:34:e1:10:ab:3e:14:82:af:72:b1:df:86:
d6:e4:06:00:45:50:7b:ab:58:3c:de:fb:38:3f:75:ab:29:b4:
4d:80:e6:41:01:e3:e9:93:d0:50:75:cb:d8:0b:18:e5:8a:e6:
43:3c:7e:81:04:ef:9d:13:9a:cd:f8:a9:47:48:e2:b0:b3:36:
5b:97:01:ee:1e:21:89:07:16:ee:ee:5c:d3:55:4c:68:44:63:
46:0c:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org