Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9CB481A47D411EF896AF3BE762E951A.roa
File: C9CB481A47D411EF896AF3BE762E951A.roa (raw, json)
Hash identifier: WStgZXlP3uKhmqooxFTodSASszU91ivemnlPUkdIAmk=
Subject key identifier: FB:FA:97:37:EF:51:8C:71:8E:99:A0:76:13:7B:FE:D1:52:D2:DB:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9CB481A47D411EF896AF3BE762E951A.roa
Signing time: Mon 22 Jul 2024 02:47:52 +0000
ROA not before: Mon 22 Jul 2024 02:47:48 +0000
ROA not after: Fri 23 Aug 2024 02:47:48 +0000
asID: 44559
IP address blocks: 156.246.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40397 (0x9dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:47:48 2024 GMT
Not After : Aug 23 02:47:48 2024 GMT
Subject: CN=669dc857-e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:c9:fe:35:df:b9:1b:52:11:53:87:00:a0:
f7:3d:23:02:24:d2:dc:8c:0e:3b:30:df:4a:5f:9a:
b4:b6:1a:71:85:9f:95:5d:d7:4f:a4:fc:38:a5:23:
17:1d:5e:e3:a3:a9:fd:f2:9f:0b:9f:03:d5:07:5f:
80:95:cd:a0:02:d3:37:a3:02:83:8d:ed:5b:0f:a1:
c6:c0:97:1d:1d:ef:73:7c:c9:cc:20:ec:e7:f7:be:
c7:15:42:49:40:4a:7e:ea:bf:fc:18:9b:72:af:d2:
fb:aa:5f:21:1b:dd:2f:7d:4c:78:98:49:44:75:fb:
9f:d1:a2:61:aa:27:dc:8f:04:cb:34:e4:94:7b:96:
f9:51:ba:2e:84:63:f8:98:a8:b7:f0:5d:18:a6:33:
1a:9a:81:3d:a8:eb:d7:ee:30:72:ea:0e:1f:f0:58:
e1:d4:7b:99:fc:17:62:2c:48:6c:da:00:e2:d0:71:
15:dd:0f:3a:70:01:5a:c6:11:73:00:31:37:bd:4d:
60:d5:9f:54:9b:d4:3b:df:10:71:56:02:27:94:f9:
af:95:82:f0:b0:60:36:a5:72:a0:b9:a8:67:6c:8f:
b8:97:7e:24:5f:88:34:53:96:70:d7:4f:2c:e6:60:
49:46:a1:f4:70:ec:a5:82:40:98:77:a3:f5:32:a9:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FA:97:37:EF:51:8C:71:8E:99:A0:76:13:7B:FE:D1:52:D2:DB:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9CB481A47D411EF896AF3BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.248.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4d:17:8f:7c:9e:2d:62:73:96:d8:bb:28:2d:14:34:2f:6b:
e5:13:a5:e4:63:60:d1:8a:f6:a1:db:04:2c:6b:ee:ff:40:9e:
cd:80:d3:08:30:d8:5a:25:4e:9c:6c:df:8b:30:03:e8:35:df:
cc:0b:03:f0:87:b8:fd:da:4b:b6:9a:e1:9f:83:67:61:d0:97:
7b:3a:a4:fb:32:de:74:0e:c8:7b:68:74:06:33:a2:35:f6:76:
ab:76:c6:e2:98:c4:11:22:31:cf:48:91:b7:f8:a0:a1:6b:6d:
e7:a8:a9:c7:82:25:bb:42:e9:06:a6:b0:2a:fc:97:56:1c:2a:
86:2e:a9:08:88:d1:18:53:22:4b:a9:20:32:36:66:23:07:78:
98:41:18:d6:3e:40:df:3f:97:db:b3:f4:67:c0:4c:fd:6a:f0:
d4:7e:7f:30:86:ac:93:65:c4:c4:58:9e:a7:6c:98:ac:40:f5:
13:40:aa:20:1e:4f:cc:a4:e7:65:10:fd:50:01:7b:3f:56:08:
28:92:44:2d:f1:c4:26:99:e4:79:dc:89:a4:9e:79:38:1d:eb:
79:73:5e:81:2a:9a:a5:99:45:75:71:bc:45:ad:32:3e:49:c0:
b2:14:8d:80:87:7d:a8:d6:b3:ac:50:49:40:80:b3:7d:9c:70:
c3:4d:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org