Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE9D1F7002F611EFA569CB10017001B1.roa
File: DE9D1F7002F611EFA569CB10017001B1.roa (raw, json)
Hash identifier: tPdRouWY0IQvKPJWwcgsYY/stDwLfGl8g/fb7vInXzc=
Subject key identifier: BF:04:33:E7:83:89:DF:26:FE:48:B2:12:DD:F1:7C:3F:F6:DD:07:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 850B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE9D1F7002F611EFA569CB10017001B1.roa
Signing time: Thu 25 Apr 2024 11:27:59 +0000
ROA not before: Thu 25 Apr 2024 11:27:56 +0000
ROA not after: Sun 05 May 2024 11:27:56 +0000
asID: 39600
IP address blocks: 156.235.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34059 (0x850b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:27:56 2024 GMT
Not After : May 5 11:27:56 2024 GMT
Subject: CN=662a3e3f-cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:a0:b2:b8:cb:3b:56:c7:88:07:d3:f6:6d:
9b:0a:50:e2:89:8b:fa:1a:33:ea:dd:0e:1f:62:67:
1f:df:8c:6d:3f:0e:fe:e5:ae:08:3b:22:c5:33:11:
f8:b2:96:cd:fc:cf:d1:4f:59:da:db:23:2a:4b:89:
21:4d:e2:81:13:64:2c:3d:b0:69:9b:78:c8:cb:ee:
a5:21:e4:94:cf:53:92:4a:b6:98:db:ba:bf:e1:37:
41:88:2c:3f:40:9c:07:e2:e1:ed:99:f2:68:76:0f:
77:9d:34:34:25:9a:76:43:1f:37:ac:3e:ed:c0:26:
36:21:a7:fa:79:f5:a0:3a:df:24:03:ab:c0:ab:91:
17:ca:54:89:4f:d1:7d:a1:0c:f2:f8:97:f4:2d:c5:
da:00:b1:c5:49:3b:c6:bc:e7:68:ad:40:cb:5a:f8:
a3:69:a3:88:24:f8:66:1b:73:3d:af:a1:d6:54:4e:
3c:c6:d7:68:49:19:b2:1c:7a:b1:2d:fc:5f:56:c3:
df:ea:03:a9:59:e0:b1:96:55:95:d2:88:7a:29:ce:
52:73:14:8f:76:e9:06:9c:6d:6a:70:5d:50:3f:bd:
db:c2:f2:5c:39:d0:1b:02:9e:9c:c8:f7:c9:d9:37:
64:66:8b:df:25:a2:3f:93:58:51:9b:fd:34:81:58:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:33:E7:83:89:DF:26:FE:48:B2:12:DD:F1:7C:3F:F6:DD:07:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE9D1F7002F611EFA569CB10017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.80.0/21
Signature Algorithm: sha256WithRSAEncryption
74:81:49:c6:1b:72:4d:29:d9:9a:fa:02:88:3b:a9:fc:e9:69:
8f:51:c6:3a:5f:09:b6:9a:32:f7:0f:76:03:6f:8b:cc:dc:d2:
c9:0e:20:02:5d:8f:1f:05:9e:3c:dc:b2:10:db:f1:95:d9:94:
9b:c9:8a:d3:d3:41:ba:4e:f5:51:57:27:e6:3d:3c:ee:18:b1:
3a:35:34:96:6a:a3:d7:15:ad:08:1b:71:c1:46:ca:5a:65:e5:
93:a0:22:9d:b0:d2:dc:59:d1:f9:a4:99:86:b2:56:eb:04:2f:
34:f5:64:f1:31:cc:88:53:bc:28:77:64:8f:9f:52:41:70:33:
2f:56:fb:42:f3:2f:ec:81:3e:14:b5:d1:89:49:13:71:8b:cf:
5f:a7:ee:7d:52:96:cb:ea:ca:df:39:02:b0:dd:19:6f:15:c8:
24:11:5e:e3:6c:6c:8f:81:06:bc:d5:41:42:12:3f:63:25:ed:
7e:e1:15:60:eb:af:05:91:14:85:61:24:cf:75:ae:57:fb:1f:
14:7e:a2:58:fa:c6:02:c1:e3:be:83:40:85:30:11:f6:63:49:
97:12:14:09:e9:e6:af:b4:f8:84:1e:33:53:38:f5:bb:04:9b:
54:74:76:23:df:d4:ad:b4:cf:8f:8f:ab:c1:21:b4:bd:07:2d:
b4:05:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org