Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D02DA5483A9311EFAA93BFA6762E951A.roa
File: D02DA5483A9311EFAA93BFA6762E951A.roa (raw, json)
Hash identifier: hQHucSt7Vpfnwr+ZokZwA/YP3bOQK8FecuM5B7Opc0c=
Subject key identifier: 2A:E1:EF:CA:6C:06:9E:79:38:69:D1:B3:86:C7:E4:E5:31:67:7C:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9891
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D02DA5483A9311EFAA93BFA6762E951A.roa
Signing time: Fri 05 Jul 2024 06:00:00 +0000
ROA not before: Fri 05 Jul 2024 05:59:56 +0000
ROA not after: Thu 01 Aug 2024 05:59:56 +0000
asID: 7018
IP address blocks: 156.238.188.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39057 (0x9891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 05:59:56 2024 GMT
Not After : Aug 1 05:59:56 2024 GMT
Subject: CN=66878be0-74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:80:3d:ae:8e:92:91:69:8a:49:39:18:2c:
cf:cd:05:a4:25:68:59:f3:e9:37:f5:a1:3c:b7:3d:
11:17:4e:8a:2d:0d:53:30:18:50:f9:fa:d1:03:8b:
a0:7c:22:be:1c:5d:8c:6c:c4:42:91:39:74:27:88:
89:4b:84:a8:b4:10:20:38:13:20:9a:53:da:4b:ce:
69:8f:18:60:e4:9f:08:56:4b:ce:a4:26:6e:8b:fe:
8b:18:13:aa:a3:99:9c:a5:5d:f4:67:82:7d:14:07:
8b:b8:64:f7:58:ed:07:96:ef:41:f4:5a:a5:c8:f6:
ba:ea:e1:da:5b:02:cd:ad:88:7f:3c:12:95:52:f5:
72:77:48:25:5f:10:a6:d7:fa:d5:83:77:8c:a8:a1:
d4:3a:03:62:1b:73:9d:94:54:23:73:f5:3c:e8:d9:
0e:d9:a5:0d:87:2a:f8:cd:f8:15:5f:44:37:8d:55:
7f:e4:27:3e:c4:75:dd:69:e8:c1:b0:50:13:79:0e:
3e:c4:30:03:e1:c2:4d:76:84:56:6d:15:eb:98:7c:
dc:f3:4d:18:b0:85:81:7c:6f:04:ba:72:15:d1:de:
6a:4f:74:2f:d0:c3:69:7b:ab:cc:8c:d9:95:06:40:
7f:2f:36:1d:72:80:95:62:c5:54:61:cf:53:78:de:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:EF:CA:6C:06:9E:79:38:69:D1:B3:86:C7:E4:E5:31:67:7C:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D02DA5483A9311EFAA93BFA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.188.0/23
Signature Algorithm: sha256WithRSAEncryption
20:dc:a8:bd:67:8a:3c:7c:d3:c6:cb:05:28:b3:35:39:12:b1:
b4:ef:24:99:3a:fc:35:1e:53:ac:52:5a:0d:33:70:72:9e:a4:
0f:30:1f:80:95:b7:5f:c5:35:12:f7:b1:f7:53:21:4d:10:54:
47:22:96:e4:5d:76:3f:f6:7d:b1:6a:c1:1d:b7:0b:e0:ad:83:
80:91:49:a0:e5:e7:bf:d5:33:54:90:a7:82:51:7d:ef:bd:c1:
75:77:36:52:5e:ab:6f:e8:c6:85:37:8d:07:84:8a:64:94:54:
44:3d:ed:7d:56:c6:b1:e2:0e:d4:64:0a:60:c8:62:77:21:ef:
31:5b:81:0c:39:f6:08:e2:8f:aa:d1:d7:b4:44:09:6c:ec:9a:
13:2d:3a:52:5f:20:94:de:a3:67:fa:52:14:cf:30:eb:df:64:
80:84:a9:eb:0a:90:20:dc:4b:7b:b6:69:94:c2:e5:30:95:60:
38:63:10:01:70:87:c9:32:6e:87:11:8e:50:77:f3:4c:1b:ea:
06:92:81:4a:5b:86:4f:b9:50:76:79:80:2f:09:63:e4:bf:dd:
b8:8c:1d:69:43:71:d6:13:e6:15:f7:5c:b0:9c:5d:8c:2e:e2:
95:8a:9d:51:f7:a3:c6:fa:62:87:b7:1a:da:9b:c1:1c:84:f5:
9b:b6:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:33 2024 by rpki-client on console-fra.rpki-client.org