Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C98E7A263CCF11EF9D67B050762E951A.roa
File: C98E7A263CCF11EF9D67B050762E951A.roa (raw, json)
Hash identifier: vW5hOwIcuQhR3aAncrowd5bycJUOPMapPLiYTepoh74=
Subject key identifier: 16:6C:59:75:50:D5:C9:60:A0:CD:F9:82:9C:2D:2D:15:7C:D4:C9:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 995E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C98E7A263CCF11EF9D67B050762E951A.roa
Signing time: Mon 08 Jul 2024 02:14:21 +0000
ROA not before: Mon 08 Jul 2024 02:14:18 +0000
ROA not after: Sat 10 Aug 2024 02:14:18 +0000
asID: 64267
IP address blocks: 156.248.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39262 (0x995e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:14:18 2024 GMT
Not After : Aug 10 02:14:18 2024 GMT
Subject: CN=668b4b7d-ec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:d5:48:79:7a:b8:11:89:53:6a:ed:db:d1:
7b:c9:d7:9e:fd:ea:3b:c8:2a:c9:6e:3d:99:be:57:
09:d1:47:97:7a:81:6e:cd:3c:4a:99:c8:40:5a:41:
46:73:31:77:ad:77:db:a6:0c:06:d1:fb:de:91:f0:
61:34:ba:7d:ed:9c:57:c4:c3:fd:0e:e6:d5:d9:35:
72:03:34:12:c1:00:59:75:8a:c4:ea:44:c7:8b:fa:
44:6d:d1:a8:38:77:9d:33:d9:a0:c4:8b:5e:b2:d7:
22:e0:02:41:ef:eb:e1:13:d1:f0:13:37:9e:04:f3:
39:2e:d6:66:49:b9:e4:ed:61:08:83:68:6e:f1:67:
2b:f0:61:f9:4e:cb:e8:02:15:b6:d4:d4:38:26:cf:
f7:fe:1d:cf:29:e8:dd:7c:44:cb:d7:75:a5:cf:7f:
88:f3:ee:c9:40:b2:83:df:1d:9c:19:22:db:89:c9:
f1:5f:a3:4e:48:df:7e:6b:04:a9:b0:2a:6a:9e:47:
fe:1c:b6:16:45:bc:b7:58:68:ad:26:35:be:8c:c1:
62:b2:b2:76:ef:98:39:ee:ce:b0:98:77:95:43:20:
a7:29:f5:b7:a3:fc:e7:3d:e9:a0:76:86:61:85:76:
61:b2:5a:a9:cc:8d:64:75:0c:9a:13:9b:64:07:fb:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:59:75:50:D5:C9:60:A0:CD:F9:82:9C:2D:2D:15:7C:D4:C9:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C98E7A263CCF11EF9D67B050762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c8:6d:6b:dc:ea:d3:c8:2f:f5:eb:32:a1:87:46:b1:d6:e9:
ff:9a:6d:56:7a:03:6f:6b:2e:8c:06:b6:b4:61:3b:82:43:a2:
66:eb:a1:2e:bb:92:c5:7a:84:eb:54:f5:4e:9c:23:14:59:57:
38:d0:72:b6:74:8b:83:4d:ed:9d:b3:d4:7b:68:49:1c:41:be:
ee:af:7b:bd:10:82:8f:3d:8d:7f:29:ac:59:33:ee:ba:cc:c9:
02:da:b4:50:ae:8e:e9:b7:cf:4b:27:c5:fc:bb:c5:93:e3:17:
9a:d9:39:85:12:59:c9:b4:91:4b:bf:8f:b1:50:e6:3b:59:54:
a1:fe:08:ea:6f:5c:09:24:d4:16:4b:1f:19:c3:fe:78:ae:9c:
6f:24:c0:3b:80:6f:85:00:5a:7f:b1:0e:cd:bb:c2:d2:27:fd:
8f:d4:9c:15:d7:e8:30:ac:ee:cd:f8:f3:53:0d:5f:24:76:8d:
a6:0f:cc:be:20:fb:af:e5:46:08:d3:b2:9e:c5:73:d3:dc:0d:
47:18:5e:70:6e:ec:91:cb:cb:3c:b8:17:8c:05:ec:69:11:30:
1d:67:41:2c:66:50:70:18:01:08:98:c9:06:ac:35:d7:67:52:
0e:14:74:cf:ed:4c:e6:16:db:49:6f:66:41:bd:a0:d3:73:b0:
d9:8e:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:32 2024 by rpki-client on console-fra.rpki-client.org