Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E052205EFB9411EEA5CEF85A017001B1.roa
File: E052205EFB9411EEA5CEF85A017001B1.roa (raw, json)
Hash identifier: 7zRpzx/usmCmSM52dQfCADQXa0lMklNYJAdDnvL2SsY=
Subject key identifier: FB:4C:E8:B4:A2:78:A9:E8:1A:73:E8:0E:8C:0E:EB:53:B5:B6:E5:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8279
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E052205EFB9411EEA5CEF85A017001B1.roa
Signing time: Tue 16 Apr 2024 01:58:53 +0000
ROA not before: Tue 16 Apr 2024 01:58:50 +0000
ROA not after: Mon 29 Apr 2024 01:58:50 +0000
asID: 141883
IP address blocks: 156.242.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33401 (0x8279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 01:58:50 2024 GMT
Not After : Apr 29 01:58:50 2024 GMT
Subject: CN=661ddb5d-e5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:a0:dd:6a:73:f6:65:36:49:08:3e:32:de:
a8:86:02:11:b5:0d:c4:9e:37:60:2a:3e:39:92:a1:
57:5d:ed:05:00:18:8f:34:a6:c6:a4:6e:db:88:d6:
b2:a1:60:e4:1d:56:8b:f2:53:38:5f:58:6d:04:1f:
a7:1f:49:56:cf:8f:32:e2:15:be:ca:a8:65:e8:3e:
48:22:4f:cb:57:db:40:31:e4:93:99:23:d4:cc:28:
03:82:f1:4d:fa:27:38:0f:c4:60:43:cd:c7:55:11:
a6:11:2a:7c:75:97:ec:18:45:7d:c7:c6:96:13:56:
a7:10:a9:56:47:ae:4e:1b:4e:50:7f:0a:03:16:a2:
f9:92:df:1a:95:b3:d9:9a:96:cb:ff:92:63:3f:eb:
c7:e0:bf:db:d5:f7:07:f9:f2:3e:cb:c2:f3:dd:a9:
02:e9:9e:80:5a:a1:16:35:73:8a:88:5c:66:d2:3c:
25:9a:57:c5:95:96:91:b6:69:a9:96:2b:1b:44:db:
1e:97:89:1c:bd:9c:81:97:fd:de:41:89:eb:1c:33:
e0:de:6f:68:1d:3a:da:c3:58:77:7a:4e:7c:01:59:
f4:d2:fb:cf:17:58:15:62:57:3c:4e:b7:0e:e9:18:
30:67:b5:bf:1c:d2:8a:0b:66:a2:0e:29:ac:e9:44:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:E8:B4:A2:78:A9:E8:1A:73:E8:0E:8C:0E:EB:53:B5:B6:E5:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E052205EFB9411EEA5CEF85A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.10.0/23
Signature Algorithm: sha256WithRSAEncryption
56:c0:cb:da:21:86:8b:db:e8:fc:e7:92:0d:ab:20:0a:aa:02:
78:13:46:f2:c2:d1:43:42:fd:5c:13:cf:23:59:5e:a5:3d:f4:
d4:3b:ac:aa:df:3e:d5:fa:ff:e5:65:4a:fc:93:1b:82:57:54:
66:97:7d:58:a6:cf:16:32:ac:38:36:1e:69:80:fb:4e:d4:f1:
ba:5c:2b:2a:59:8f:2c:1d:ef:3c:8a:99:78:41:ae:3a:07:66:
23:bb:95:75:7f:99:c7:43:92:4d:1b:2f:38:8e:56:2e:1c:7c:
db:80:e4:bb:a6:10:77:28:b1:7d:55:91:c8:ea:c6:50:20:ab:
23:c9:9d:53:27:eb:37:ab:af:6f:28:8b:84:01:e2:f3:12:4c:
0e:fc:aa:ad:a2:74:91:f2:fc:04:97:72:a0:19:b2:b9:17:15:
55:b9:32:a0:cf:1f:38:c1:b0:dc:e5:01:1d:d7:4d:75:0c:43:
85:ab:7f:50:12:19:b4:f8:ca:74:c0:f2:8d:8b:aa:2d:47:54:
f8:40:fe:ab:c9:77:51:bf:14:35:b3:25:50:26:e1:f1:0e:de:
2c:9e:27:1a:f8:1a:27:be:0e:ff:70:40:b1:4b:31:2d:6c:b4:
d6:31:1f:a2:19:96:dc:d7:b8:2f:56:6c:a6:5b:76:cc:df:90:
0e:63:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 03:01:26 2024 by rpki-client on console-ams.rpki-client.org