Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD5B3202499411EFB77FDCA5762E951A.roa
File: DD5B3202499411EFB77FDCA5762E951A.roa (raw, json)
Hash identifier: swDWln5XgBwh81ekexgqWdNGedM/zVqbgxpSfbWbxPU=
Subject key identifier: FA:DE:67:C4:CA:7E:51:03:56:14:6D:E8:08:DF:4C:74:8E:32:02:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD5B3202499411EFB77FDCA5762E951A.roa
Signing time: Wed 24 Jul 2024 08:15:19 +0000
ROA not before: Wed 24 Jul 2024 08:15:16 +0000
ROA not after: Fri 23 Aug 2024 08:15:16 +0000
asID: 202656
IP address blocks: 156.246.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40701 (0x9efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:15:16 2024 GMT
Not After : Aug 23 08:15:16 2024 GMT
Subject: CN=66a0b817-24be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:1f:ea:0b:74:9e:c4:1e:d6:f7:eb:67:21:
b2:49:f7:e9:97:1e:4d:98:b8:e6:a4:6b:c5:f1:80:
ff:2b:05:0c:fa:38:09:fb:b7:e2:35:76:ae:9b:25:
b8:1d:6e:e6:e1:35:67:18:53:c6:d2:5f:9a:67:da:
d9:84:b9:5b:bc:21:92:a8:c9:c6:70:92:f2:e7:26:
0f:b9:60:60:77:9e:2d:2a:48:60:25:fa:9d:b6:a2:
ab:8b:a4:4b:ac:2e:27:b1:ae:1d:99:c0:31:06:76:
92:6d:0d:78:af:08:f8:ee:0c:25:a4:50:5a:2f:e9:
9b:56:73:0f:ab:25:f5:09:5c:69:52:67:ea:d9:86:
47:9f:31:85:c7:c0:fb:db:44:3e:55:5b:13:e5:09:
fa:3e:20:af:07:94:61:b8:b2:cf:e0:de:a5:c2:eb:
6f:04:d4:68:61:49:a4:74:51:f0:46:6a:6c:f2:a6:
a9:25:02:ad:da:58:b7:11:c7:1a:69:f6:56:8b:11:
82:97:8e:16:71:a2:e1:bc:b8:e1:62:02:01:4f:cf:
80:a2:9e:85:81:7f:74:18:8d:5b:54:c2:38:9d:07:
9a:a5:ec:78:46:46:a0:58:1e:e9:22:49:5f:0d:a5:
da:bb:f2:94:c2:55:4c:4e:aa:3d:08:42:9d:dc:21:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:67:C4:CA:7E:51:03:56:14:6D:E8:08:DF:4C:74:8E:32:02:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD5B3202499411EFB77FDCA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.173.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ec:7b:b4:5e:13:40:66:d6:40:3f:82:a6:2b:d7:60:0c:5d:
45:3b:29:7c:3d:b4:c5:3e:17:1b:1e:78:31:9a:ad:6f:5d:69:
e6:2a:e9:6d:0e:4e:61:ac:37:d6:d6:fe:33:66:08:45:0a:43:
97:be:5b:9e:b7:e0:f7:61:6c:d3:7e:14:7d:98:5e:28:a3:29:
b6:27:bc:d3:24:af:bc:85:bc:4d:92:91:4e:7b:b1:ba:2c:c7:
fb:a8:2a:70:21:fa:fd:9c:f3:49:c3:91:47:a4:1a:c3:74:1d:
e1:a3:ab:7d:fc:6d:7a:9e:2f:32:a3:f5:60:4f:ef:68:b4:77:
ea:20:13:1b:6e:f6:59:d9:c9:a4:ec:3e:7f:ac:99:a4:82:2e:
21:df:cf:d9:53:1f:ff:6c:1d:aa:fa:d1:69:db:d9:39:85:0b:
e9:b1:da:53:ed:ae:87:3e:ea:0e:5b:a6:a1:cd:c8:6d:50:31:
68:38:a8:f5:5d:79:93:cf:0f:23:ab:68:63:65:3a:ac:9d:71:
a3:50:c2:a3:c0:6e:65:0b:0b:ea:a4:fc:1f:42:18:15:4f:3b:
ea:25:91:b9:d4:eb:ff:eb:e2:79:e1:c2:63:36:02:0c:45:8b:
87:0c:e6:2f:f8:a6:cf:39:fa:7f:a9:01:50:77:e9:58:39:07:
24:1c:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:03 2024 by rpki-client on console-ams.rpki-client.org