Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E20B60B448C811EF84AD98BB762E951A.roa
File: E20B60B448C811EF84AD98BB762E951A.roa (raw, json)
Hash identifier: jIgWQ6n7Z4DNnPQwnwzZ3QhT/+c1vq/2/xbUqaucknE=
Subject key identifier: 3B:DD:8C:24:F0:16:F0:55:69:DA:72:E4:E4:04:BD:5A:B4:27:00:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E20B60B448C811EF84AD98BB762E951A.roa
Signing time: Tue 23 Jul 2024 07:55:09 +0000
ROA not before: Fri 26 Jul 2024 07:55:06 +0000
ROA not after: Fri 23 Aug 2024 07:55:06 +0000
asID: 202656
IP address blocks: 156.246.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40576 (0x9e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:55:06 2024 GMT
Not After : Aug 23 07:55:06 2024 GMT
Subject: CN=669f61dd-ac27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:a1:32:b6:11:d7:dd:a2:e0:3c:90:b3:96:
fc:7d:61:9d:90:da:a5:f0:56:7b:c9:85:21:d2:5e:
3c:b7:f5:22:09:12:9d:65:e5:a7:26:01:12:8d:1e:
02:c4:43:dc:2f:91:27:64:0d:89:2b:e9:bd:e9:f6:
7a:c2:71:d6:4c:b9:94:1d:2c:29:2b:1e:aa:57:fa:
bb:ac:36:b8:d9:23:98:ad:b5:f9:cb:05:b7:f5:45:
5f:97:ba:f9:42:9a:48:67:c0:a9:76:ea:63:7d:aa:
39:da:d0:ef:58:ff:0d:d9:50:1e:b1:b9:2b:db:8b:
1c:21:13:f1:55:b7:3c:da:d1:1e:01:42:22:d5:9e:
60:66:9b:cf:b6:a6:0a:6f:63:a1:6d:54:0b:f9:b2:
3d:06:e3:47:ea:35:7e:74:88:49:cd:68:4c:af:a9:
44:96:2e:93:87:d2:4d:3e:3d:b1:31:26:89:7c:72:
bd:5d:be:20:72:f0:eb:45:01:7f:07:37:0c:61:ed:
39:24:e7:59:3b:36:54:13:eb:b6:6f:13:de:8c:28:
55:81:d1:24:49:c8:db:53:2f:cc:70:83:24:a4:d1:
26:b5:b4:ea:c6:01:14:4d:c5:2e:16:66:72:26:5e:
b5:a1:04:4d:dc:94:03:e9:a6:9d:6b:43:81:94:0d:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:8C:24:F0:16:F0:55:69:DA:72:E4:E4:04:BD:5A:B4:27:00:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E20B60B448C811EF84AD98BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d3:65:fe:a6:aa:16:cb:14:db:5d:88:27:bf:75:26:b3:6a:
44:09:bd:47:73:20:09:10:90:64:d1:11:8d:e6:a5:15:86:64:
f5:a8:bb:56:5c:98:1a:6f:8e:d1:d6:80:8a:71:cc:cc:05:2f:
f1:60:b9:25:6d:26:15:d5:55:9a:25:20:0b:6b:c5:0c:50:3a:
d5:64:1d:3a:4c:3f:82:d2:18:a7:0d:36:5c:84:10:86:0e:0a:
e6:b7:3b:60:b6:99:d8:9e:32:dc:40:79:09:65:03:41:28:99:
12:7c:23:c5:c1:7c:67:e4:61:3b:57:f8:a5:74:f3:eb:1a:44:
38:85:3c:cf:f8:e1:27:49:0f:96:42:7a:07:f3:93:ec:3c:86:
10:26:75:21:cc:7f:c1:93:39:e7:3e:42:f5:e9:af:e4:1e:7b:
09:51:e5:9b:5b:aa:a9:26:01:82:5a:f9:4c:91:d9:e1:48:02:
e2:99:fd:c5:ae:7e:5a:8b:0b:e3:41:35:c7:1f:b9:a0:ed:8d:
6b:16:8f:8d:8a:6a:2e:c1:1c:8c:03:51:38:c2:35:73:34:b7:
13:21:4d:eb:4d:ab:af:40:92:19:8a:00:8c:82:b3:de:ff:62:
65:4e:1a:52:c4:3d:24:d7:62:dc:2c:a0:1b:b0:aa:e4:35:de:
f1:36:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:03 2024 by rpki-client on console-ams.rpki-client.org