Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D204C1A848E411EF817BF779762E951A.roa
File: D204C1A848E411EF817BF779762E951A.roa (raw, json)
Hash identifier: 6i0WVLoeeUSHvfaTpcOU+wymDRdSAJF6cC5cCQk2ZT8=
Subject key identifier: E1:F0:74:77:8A:D6:9A:65:1D:6C:F9:DD:D6:43:F8:7F:53:45:C1:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9ED2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D204C1A848E411EF817BF779762E951A.roa
Signing time: Tue 23 Jul 2024 11:15:08 +0000
ROA not before: Tue 23 Jul 2024 11:15:05 +0000
ROA not after: Wed 21 Aug 2024 11:15:05 +0000
asID: 136744
IP address blocks: 156.231.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40658 (0x9ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 11:15:05 2024 GMT
Not After : Aug 21 11:15:05 2024 GMT
Subject: CN=669f90bc-2a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0b:29:80:55:11:99:05:e8:b2:a7:a8:e7:56:
fc:70:3a:e1:e7:54:49:4e:e9:80:81:08:d1:1b:47:
74:e4:29:b9:35:8e:ea:e6:f1:11:02:58:b5:60:e6:
0d:8b:a9:59:6f:62:38:ee:29:ae:78:4d:54:c2:a4:
09:ad:f0:77:00:82:e1:ec:4a:44:49:fe:11:36:13:
7c:eb:12:71:2e:90:0a:36:d3:ae:77:cc:c6:be:7b:
68:72:28:93:61:6c:6e:7b:c1:be:6b:07:47:c5:ba:
40:37:b9:c3:b1:bd:07:3c:3b:a2:8e:2f:f4:68:ae:
b7:51:bc:cb:ca:28:49:f7:c0:66:17:22:40:0c:cf:
55:9c:3f:9b:6c:01:26:0a:67:33:d0:2a:84:30:4c:
f6:97:f0:ec:87:24:dd:a5:04:30:6e:b9:81:63:50:
70:24:ca:89:c2:04:6c:ee:cd:0c:ba:bc:50:94:60:
a4:4c:ce:61:66:b1:76:0c:07:0d:c9:a4:d1:ea:05:
b5:ec:6e:e1:9a:9a:44:b5:ee:45:03:9b:9a:a2:82:
54:bc:e7:9f:49:4b:67:04:42:e3:b8:0f:7d:5d:38:
fe:6d:15:07:b0:98:ca:3f:74:ea:35:bb:52:b5:04:
fd:f6:98:41:0d:8b:a8:2e:62:dd:ff:9f:5c:53:de:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:74:77:8A:D6:9A:65:1D:6C:F9:DD:D6:43:F8:7F:53:45:C1:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D204C1A848E411EF817BF779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:27:8e:a6:24:2d:bc:08:39:e5:cd:9a:3c:fd:67:aa:30:c0:
62:85:c9:1d:37:5a:26:11:89:e1:ca:32:40:2b:d4:05:10:a8:
d7:66:c7:bc:cd:26:c5:42:73:95:d0:a2:b7:a5:67:45:d8:dd:
4f:72:d3:0e:a3:d5:12:bc:de:09:85:7a:06:d5:97:fa:5d:5b:
dc:b8:08:35:34:85:e5:19:21:7f:c8:0a:9f:9d:db:51:15:5c:
76:91:4d:95:11:25:63:f9:33:86:91:34:24:58:51:ed:0c:1c:
7a:6d:24:c7:38:22:76:4c:ff:01:59:7a:3e:50:c3:13:47:84:
3d:47:57:1e:d8:bc:f6:20:a5:94:f8:f0:85:87:9f:5c:7c:ad:
d1:34:7b:3e:f2:94:e3:0c:1b:fb:01:61:d9:a3:9e:04:b5:c7:
31:3d:ba:1f:f6:f4:6f:51:e1:6a:aa:ed:b6:83:70:57:d2:61:
e1:00:be:1a:18:db:86:7f:f3:86:e4:88:9e:ea:ad:f5:26:c6:
23:7c:f2:68:7e:d7:61:b9:11:d9:86:4a:02:f6:cc:a6:a1:f3:
1d:c2:c4:3e:92:50:5e:f4:c4:9d:80:10:03:53:c3:b5:49:12:
1a:2a:a9:c0:6f:4a:1f:df:6f:78:22:5e:44:1d:d6:f1:de:2e:
bc:17:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:18 2024 by rpki-client on console-fra.rpki-client.org