Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9CD8F164A5411EFAA5EA642762E951A.roa
File: D9CD8F164A5411EFAA5EA642762E951A.roa (raw, json)
Hash identifier: 8qK1dMhF6ykrgdIjDd5h2TGzHyiXEomL66Lwy++RxEY=
Subject key identifier: 26:F5:75:FB:78:E7:D5:F7:B8:5A:C9:D0:55:C8:A8:C4:8E:14:FF:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9CD8F164A5411EFAA5EA642762E951A.roa
Signing time: Thu 25 Jul 2024 07:09:36 +0000
ROA not before: Thu 25 Jul 2024 07:09:33 +0000
ROA not after: Fri 16 Aug 2024 07:09:33 +0000
asID: 151979
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40851 (0x9f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:09:33 2024 GMT
Not After : Aug 16 07:09:33 2024 GMT
Subject: CN=66a1fa30-75c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:28:0e:1d:23:43:9b:a2:39:95:35:31:64:22:
3c:70:d6:fc:4d:be:13:6b:45:7e:6c:28:86:b5:0f:
71:7b:97:21:18:7c:0c:fb:50:fe:5c:ba:df:d4:bc:
a0:34:19:64:ba:65:07:39:e0:21:32:b7:eb:b3:5b:
99:94:0c:09:1d:db:32:15:7d:10:de:08:5c:d9:a3:
af:83:b6:8d:70:98:3d:b3:bd:f9:bc:3d:e0:21:82:
ea:20:95:21:ef:40:18:24:4a:34:db:09:cd:e1:c4:
39:f3:32:23:7d:a6:77:53:cd:56:72:d4:ef:15:5f:
d6:2c:93:ae:d8:f4:95:c2:57:a4:30:37:30:e1:a4:
f3:c2:16:71:30:9c:24:14:07:11:31:41:2a:41:dc:
6d:2d:b5:56:bd:53:ef:52:94:b7:35:1f:25:a6:93:
79:1e:da:79:9a:fc:bc:f4:c7:8b:c4:e3:98:03:6c:
d5:68:70:e2:e1:62:14:a1:3b:c9:82:02:13:db:26:
3f:5e:3e:d3:53:ca:da:9d:fd:3a:2c:cb:1b:2c:56:
ce:a6:b3:ef:db:d0:2e:88:17:a9:42:cb:52:bc:ca:
4a:ed:52:82:24:6a:f3:e8:06:66:82:a2:d1:e7:b0:
ec:1f:79:05:5e:ac:4c:1b:cb:16:89:d6:8c:7f:bf:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:75:FB:78:E7:D5:F7:B8:5A:C9:D0:55:C8:A8:C4:8E:14:FF:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9CD8F164A5411EFAA5EA642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:47:b5:8a:02:06:bd:a4:95:05:ba:33:e4:45:cf:78:96:c9:
5d:de:94:76:13:6f:a8:fa:76:a7:f1:eb:62:19:65:4d:7a:96:
9f:a4:49:6a:82:f6:78:e3:35:ba:c4:8c:56:59:71:46:41:ee:
ea:14:a6:26:da:48:82:be:5d:6a:14:2e:19:d5:55:f8:6a:44:
cd:47:73:50:24:c0:16:73:ca:4f:ea:a5:5e:85:d7:a5:43:8a:
d8:a9:ff:3b:52:ce:4e:de:9f:3c:be:fc:2a:d1:ac:d0:b9:f1:
42:cf:fb:ed:fb:f6:62:96:54:1d:66:bc:a6:0b:6e:b9:e9:3a:
5f:dc:f0:c0:43:9e:84:e4:53:13:7f:fa:67:bc:a7:a5:a9:24:
86:33:6f:ab:3e:e3:04:60:40:27:8e:29:aa:45:c8:b4:af:71:
97:e5:f8:f8:dd:3b:b0:83:71:e7:92:17:1d:9d:5b:51:73:5f:
ed:4b:70:92:8f:b2:9e:27:e6:4c:16:83:eb:c6:26:62:e9:e6:
60:f3:2a:28:16:8f:85:e5:03:48:81:5e:18:e8:0a:7f:6b:40:
07:10:12:c4:d9:a1:41:fb:61:2f:4c:dd:e7:7d:87:9d:2d:90:
27:e4:25:4e:e2:bb:1d:36:0f:e2:dc:fe:12:63:9f:34:33:75:
9f:cc:59:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 10:13:43 2024 by rpki-client on console-fra.rpki-client.org