Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA4F18A2499511EF8D9CDEAA762E951A.roa
File: DA4F18A2499511EF8D9CDEAA762E951A.roa (raw, json)
Hash identifier: jbvTFBcKLMxuwY3NJNHTMs4x5PKdGxR4w5oJTyscELM=
Subject key identifier: E1:CD:26:9D:AF:3E:23:BC:BE:DA:4A:95:1F:02:4E:B9:08:C1:BC:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA4F18A2499511EF8D9CDEAA762E951A.roa
Signing time: Wed 24 Jul 2024 08:22:23 +0000
ROA not before: Wed 24 Jul 2024 08:22:20 +0000
ROA not after: Fri 23 Aug 2024 08:22:20 +0000
asID: 202656
IP address blocks: 156.246.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40717 (0x9f0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:22:20 2024 GMT
Not After : Aug 23 08:22:20 2024 GMT
Subject: CN=66a0b9bf-c6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:b7:b5:19:a2:34:03:47:48:03:70:c3:9e:
69:9f:64:b5:d7:6f:79:fc:82:c9:29:a4:d0:9d:40:
70:81:89:e8:e7:58:3a:fa:6a:65:1b:7c:9a:18:78:
5b:54:9b:b9:a8:8b:bb:c5:93:a5:e8:62:04:e6:9f:
db:6a:ae:1c:d1:26:bd:05:d7:43:e5:62:4c:6e:37:
c2:ab:b6:88:f7:68:f2:2c:bb:7c:54:f7:77:55:bf:
14:41:e5:1f:09:3e:52:09:82:9d:1a:05:07:fe:10:
af:b6:c7:21:19:3a:0c:58:10:5d:a9:0f:36:69:b9:
b8:f0:ed:88:7a:45:69:7d:08:48:7f:a0:bc:f6:93:
37:41:70:96:b0:84:fd:f1:29:a2:80:ac:6f:36:ca:
d6:70:f2:37:c3:aa:5c:83:d9:33:61:d6:ba:39:2c:
33:a0:2a:c5:77:28:8b:98:ad:9e:1a:04:c7:20:72:
df:bb:dc:2a:af:7f:ec:bf:d6:e3:05:87:9d:cd:01:
ba:54:46:a0:98:1a:d8:9a:af:50:07:3d:60:16:da:
8e:46:37:6c:af:c9:dc:1a:ef:32:0c:dc:24:66:51:
e4:05:6d:f8:63:13:34:79:a2:f5:c8:1c:e9:ef:f7:
3a:8c:84:f8:e6:49:d5:20:73:04:dd:34:27:09:d8:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:26:9D:AF:3E:23:BC:BE:DA:4A:95:1F:02:4E:B9:08:C1:BC:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA4F18A2499511EF8D9CDEAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3e:9e:eb:8d:43:93:5b:01:e4:d8:01:36:74:f2:77:8d:50:
4d:d8:4a:cd:92:b4:94:59:ef:19:d1:b8:a3:c0:6d:79:a5:b0:
85:70:6e:15:3a:bb:31:77:a4:ce:29:18:dc:ac:bc:dc:fb:e4:
18:9f:00:af:8c:6b:6c:54:2c:0f:eb:8b:f6:20:fa:18:fc:2f:
c3:ba:5c:f6:55:27:69:f0:3d:5e:f7:77:e1:87:ed:79:70:7e:
69:b7:5f:3f:80:1d:a0:c6:fa:10:a8:58:cb:70:5e:32:39:1d:
15:3e:bf:cf:f6:b0:2b:10:5d:cf:13:4f:2d:ca:41:61:f4:f1:
54:7a:d0:f4:b8:72:37:d9:35:d1:96:2c:68:e4:f1:d2:a1:0d:
16:c8:2f:60:c6:f9:be:a6:89:19:ac:05:f6:68:3e:30:1f:14:
24:23:13:67:3a:d0:4d:ad:f1:7f:a7:08:cc:a0:4c:93:dc:e6:
dc:a3:05:84:3e:99:d2:fd:64:c0:7e:c5:99:a8:99:03:e7:04:
ee:e0:78:1e:84:b0:14:08:92:dc:34:21:c7:aa:3a:01:44:37:
b2:36:a4:3a:7c:98:65:a6:5d:8b:02:4b:ef:b8:3a:18:15:0a:
30:a6:2e:50:89:b1:d4:f2:0a:cb:ba:35:eb:fd:94:09:52:11:
9a:b8:2b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:49 2024 by rpki-client on console-fra.rpki-client.org