Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD880FDE4A6611EFAB6135BC762E951A.roa
File: DD880FDE4A6611EFAB6135BC762E951A.roa (raw, json)
Hash identifier: IGUK2xh+QeR1CUwaz7uc/xF+ANm89/OA5vLxVC5mQE8=
Subject key identifier: F3:60:D1:E7:B5:B4:42:7D:DC:0A:EA:B1:65:90:CE:11:17:3C:AA:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A00B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD880FDE4A6611EFAB6135BC762E951A.roa
Signing time: Thu 25 Jul 2024 09:18:34 +0000
ROA not before: Thu 25 Jul 2024 09:18:30 +0000
ROA not after: Sat 03 Aug 2024 09:18:30 +0000
asID: 5065
IP address blocks: 156.235.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40971 (0xa00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:18:30 2024 GMT
Not After : Aug 3 09:18:30 2024 GMT
Subject: CN=66a2186a-de92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:8b:19:c8:7a:34:b1:04:a4:84:84:ea:ad:
99:82:17:d8:8f:38:dd:13:d5:f8:3c:f8:8f:1a:e6:
81:99:1a:c8:31:77:a0:7d:5e:7f:c5:5e:3c:e9:15:
2c:47:90:76:10:d4:1a:0a:80:2d:3c:00:55:2b:15:
05:6c:6a:ff:70:12:75:ed:8e:5f:9f:71:9f:0c:f5:
68:df:8a:e4:76:5b:6d:0c:45:0c:6f:33:1e:79:62:
d8:0d:23:79:89:9e:e1:b5:a0:50:b1:c8:f8:68:f4:
c9:29:1b:51:1a:ad:63:9d:59:86:fe:8c:f2:a0:c8:
16:83:64:6c:c6:ea:7a:18:0d:ed:54:38:38:19:1a:
21:6f:0d:d7:03:6d:83:22:42:de:f0:bf:76:6b:07:
2f:4c:d0:7d:93:16:b6:97:94:68:93:4b:3f:4c:84:
60:dc:94:fe:8e:83:77:7f:92:e0:98:b6:f8:bb:63:
63:98:5d:41:8e:c5:1b:1f:c6:85:79:e4:69:ba:0b:
26:e4:5b:79:0e:4c:21:3b:97:26:3c:a5:4d:e0:c9:
e4:03:39:93:6a:81:f3:b3:50:67:23:04:c1:14:61:
9e:15:c6:a6:15:fa:f7:30:d5:13:56:f3:d6:0c:31:
a0:26:8a:60:53:04:ce:a6:bf:bf:ad:88:df:89:b5:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:D1:E7:B5:B4:42:7D:DC:0A:EA:B1:65:90:CE:11:17:3C:AA:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD880FDE4A6611EFAB6135BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.21.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7a:5c:95:a0:fc:26:ef:d0:f7:0f:3d:75:99:05:42:7a:b3:
79:c4:42:b8:92:1e:f9:af:1a:72:a3:ca:80:4f:33:30:ff:87:
cb:e0:db:cd:ca:19:d5:25:02:51:b7:6e:68:4b:48:ce:df:3a:
5e:24:37:cb:51:4a:d5:0c:69:e5:e3:9d:64:6a:10:5c:21:5b:
c5:82:9a:85:ee:45:ab:6c:b0:0c:09:59:37:eb:b2:23:1f:0c:
ea:83:9e:a4:e8:2f:82:34:c7:ff:00:65:69:1c:6a:b5:24:60:
53:ec:d4:7a:dc:06:03:83:f9:bd:2a:48:fd:e8:4c:38:b7:cf:
40:76:13:11:64:41:5a:a8:63:96:94:10:39:7d:2a:cd:91:17:
ac:43:93:84:75:04:0e:5d:b1:18:81:0d:9a:85:9a:5c:78:77:
96:36:59:19:5b:d5:c2:05:90:4b:23:db:b5:39:19:7f:13:7e:
8b:bd:8f:31:cf:43:ad:fe:e6:e7:36:53:83:ec:dd:6c:d5:cb:
85:3b:ab:7e:cc:23:c0:db:4a:94:bf:92:8e:ce:27:d7:27:5b:
6a:36:5a:a4:47:23:99:bf:14:a4:5c:b9:fa:87:eb:90:92:c5:
12:6c:95:b6:c8:a2:69:b6:01:10:c9:4d:ea:47:af:4f:c9:4d:
b2:7d:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org