Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5E17F60404111EF87752590762E951A.roa
File: D5E17F60404111EF87752590762E951A.roa (raw, json)
Hash identifier: n9+QFjAoYOMgff3mdhttykG7wILMeE1UHLHYYVu2U+c=
Subject key identifier: 04:71:1A:A7:4B:91:04:27:60:31:6B:71:71:ED:F5:DC:02:39:9C:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5E17F60404111EF87752590762E951A.roa
Signing time: Fri 12 Jul 2024 11:28:18 +0000
ROA not before: Fri 12 Jul 2024 11:28:14 +0000
ROA not after: Tue 13 Aug 2024 11:28:14 +0000
asID: 138915
IP address blocks: 156.244.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39901 (0x9bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:28:14 2024 GMT
Not After : Aug 13 11:28:14 2024 GMT
Subject: CN=66911352-8446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:34:bc:e3:05:58:99:93:84:0c:29:03:98:
b1:2c:78:fb:31:79:4b:a8:7d:ba:5a:c3:87:7a:cf:
cc:bb:65:3d:37:ff:fc:2e:02:2f:1f:7d:33:30:e3:
b8:5f:67:46:81:d2:2c:24:93:f0:d4:ec:02:d2:bd:
44:83:09:2b:1e:aa:17:f3:e5:dc:99:aa:ea:78:31:
ae:62:35:80:f8:a8:fe:92:56:85:98:9a:38:f0:92:
37:68:51:70:9f:1f:54:2d:d9:aa:03:30:e9:15:82:
44:fd:ce:c1:a6:3c:ab:ad:71:78:13:53:54:15:62:
74:73:c6:41:8a:bc:af:88:de:bd:c4:55:79:97:0f:
f1:37:ca:7f:f2:8f:f7:7c:4a:18:dc:c6:9c:b3:9b:
3b:4f:0a:1f:da:90:a6:a3:73:2a:be:0a:f0:b8:4d:
c6:8c:27:69:2c:5f:42:12:de:6b:64:ac:87:a1:7e:
de:82:84:24:8d:9e:a7:ac:ef:f4:5f:21:36:e4:5b:
af:2e:4f:e7:1d:e9:0c:8a:02:dd:77:03:7e:2b:4b:
a8:71:18:2a:c2:ff:4a:80:74:84:41:32:a9:5d:f6:
62:5a:fb:ee:b2:d4:55:8f:c2:23:a1:e7:15:03:d3:
38:5e:5e:0d:8c:28:0a:02:cc:41:a4:01:02:58:61:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:71:1A:A7:4B:91:04:27:60:31:6B:71:71:ED:F5:DC:02:39:9C:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5E17F60404111EF87752590762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fe:65:24:c1:de:22:6b:61:9f:dc:e9:14:e3:0e:38:6c:16:
7c:ea:ee:de:3a:36:58:d5:a6:ff:a2:9d:1b:d9:c7:e6:29:62:
8c:b7:8d:2c:db:9c:e9:ee:81:1d:c9:2a:cc:27:7c:eb:09:cf:
5e:40:c5:91:07:30:65:73:7c:46:ce:08:5d:c9:72:d4:dd:2e:
aa:01:8f:a2:d8:dd:53:1b:2b:ed:87:ef:23:bb:70:8e:8c:8f:
0c:dd:6e:79:9f:07:7b:01:0a:7b:e6:87:95:6d:d5:83:79:0e:
c6:dd:49:34:07:d6:d8:f3:bb:d8:96:ee:c9:17:6b:17:09:e7:
dc:e6:e6:40:f6:12:51:c2:91:ac:57:16:04:7f:47:07:1f:94:
02:90:13:3c:df:5c:b3:77:e9:8d:36:1f:a5:88:e1:7c:ca:a1:
85:a2:02:0a:04:d8:83:99:57:86:c6:31:99:43:5a:4d:ce:9c:
a3:4d:0e:cf:e5:5d:14:7f:7c:10:19:c7:8f:e4:e0:33:4e:55:
52:7a:bf:b7:64:9c:07:bc:19:0c:d9:b8:cc:0c:f1:24:2d:f3:
83:07:ff:54:3e:72:cc:be:4a:35:23:b1:b8:65:ef:56:cf:85:
ba:34:3d:41:2c:66:b2:14:57:b7:fc:00:a2:b3:dc:3e:d0:73:
ac:2a:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org