Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59457A47ED11EFA095536C762E951A.roa
File: CF59457A47ED11EFA095536C762E951A.roa (raw, json)
Hash identifier: V6PV0KpvbKOG6XjbpiNhrZzfEUcmquQEplZQNXP41Bo=
Subject key identifier: 59:24:95:04:0B:82:31:30:B7:D2:CC:93:55:B6:46:F8:60:25:7E:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59457A47ED11EFA095536C762E951A.roa
Signing time: Mon 22 Jul 2024 05:46:58 +0000
ROA not before: Mon 22 Jul 2024 05:46:55 +0000
ROA not after: Wed 31 Jul 2024 05:46:55 +0000
asID: 137547
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40509 (0x9e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:46:55 2024 GMT
Not After : Jul 31 05:46:55 2024 GMT
Subject: CN=669df252-25c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:2d:24:10:7f:ba:47:c2:c2:5b:ad:ac:f0:
34:58:dc:62:45:da:34:a2:af:af:2c:1b:ec:02:f6:
9d:51:c8:f4:e0:9f:64:21:7a:6b:cc:be:27:2d:13:
2c:b4:98:aa:28:c2:50:7e:29:06:e3:af:57:7e:eb:
4a:02:4d:bb:02:83:e6:7b:ea:d8:b6:c4:8e:f7:13:
d3:b2:f9:53:5f:67:36:9a:08:99:c5:df:09:c3:3f:
52:f0:df:ba:29:03:d4:4c:72:a8:1e:b3:1b:d7:e2:
fb:53:f7:d1:ea:07:8d:62:c9:ba:ea:d0:4e:60:13:
1f:32:7d:07:3e:36:f6:7f:d5:91:7f:e0:08:d3:73:
e6:4c:8c:6b:95:d4:11:68:98:d1:ff:70:44:e2:e3:
09:d0:12:10:67:12:75:32:d6:78:85:fd:3f:d0:aa:
aa:d1:43:bb:68:f3:b2:bf:8a:dd:cf:03:9c:c5:f5:
83:f9:90:30:52:37:a5:b4:6f:63:6d:0c:39:1e:a2:
fa:4a:5b:9b:2b:23:e6:be:20:46:29:19:fb:ce:0b:
d3:6d:ec:fc:01:0b:2b:59:b1:fb:ff:be:47:9f:13:
02:dd:7d:a1:59:12:bc:df:ba:eb:2a:45:06:ec:93:
f5:3d:ba:0c:3b:19:64:a7:5e:17:7c:8d:50:02:80:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:95:04:0B:82:31:30:B7:D2:CC:93:55:B6:46:F8:60:25:7E:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59457A47ED11EFA095536C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
63:ae:4d:34:b7:38:2e:3e:9d:05:2e:d7:43:c0:7d:dc:44:fc:
60:cb:62:36:86:52:4f:aa:f5:a6:08:0b:51:41:e1:11:83:21:
2e:1c:66:56:b9:54:76:c2:02:5a:0b:f7:da:c6:35:96:5e:88:
88:1b:d4:f4:eb:d3:bc:89:b8:50:b2:aa:db:04:75:d1:db:a5:
d3:ad:db:0f:37:02:5f:95:83:e1:d5:4a:b2:62:77:1f:85:6c:
1c:70:99:14:f3:a1:74:ff:59:52:a0:86:ef:0a:31:02:94:7b:
de:ad:52:04:7d:6e:fb:73:28:08:d5:85:88:25:c1:d6:be:4f:
cb:3d:db:cd:47:30:f2:91:2f:86:1e:82:11:90:68:62:47:06:
f4:b9:47:7a:86:4f:15:73:d3:d9:f1:fd:2b:dd:56:ff:b0:bb:
1a:66:45:a3:65:82:e0:47:c2:08:c7:4c:21:f8:8e:98:de:b1:
e5:66:1a:02:3f:47:7f:32:fd:27:4d:2b:7b:48:4b:cb:02:5f:
63:00:0c:6e:61:8c:68:68:d1:ab:9e:17:c8:8d:8e:94:c9:26:
da:3b:bb:cd:dd:db:a6:bc:2f:d7:eb:8a:a9:d1:1a:71:92:74:
fb:c4:03:f5:c5:dc:87:0b:ab:9a:7a:67:c5:e9:0a:3b:0e:88:
81:3d:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org