Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38F2CF4384711EFB01995A4762E951A.roa
File: E38F2CF4384711EFB01995A4762E951A.roa (raw, json)
Hash identifier: Ls7csoN9hNt2N7xyY4ONHF1YC5o2XfZnr9GNg8oaH9k=
Subject key identifier: CA:27:B5:DA:CB:15:76:22:54:CB:D1:EC:03:61:74:02:92:77:53:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9763
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38F2CF4384711EFB01995A4762E951A.roa
Signing time: Tue 02 Jul 2024 07:51:28 +0000
ROA not before: Tue 02 Jul 2024 07:51:25 +0000
ROA not after: Sat 03 Aug 2024 07:51:25 +0000
asID: 141718
IP address blocks: 156.230.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38755 (0x9763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 07:51:25 2024 GMT
Not After : Aug 3 07:51:25 2024 GMT
Subject: CN=6683b180-c338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:db:45:7a:29:8a:ea:dd:59:47:e5:80:72:
43:eb:c6:01:41:5c:52:f6:63:a2:62:37:5d:f6:63:
a7:6b:50:a4:aa:3e:3a:c9:4a:bb:76:88:22:7d:ce:
a8:7e:5b:f4:ac:08:b5:8b:e6:0a:27:15:d3:c4:5f:
e0:35:44:7a:1d:ac:28:cc:f9:1a:61:74:d1:4b:fb:
68:fb:9e:c8:11:2b:40:00:b7:e5:de:8e:5d:f6:8b:
b2:f0:b1:5c:00:a7:6f:aa:a1:1b:76:67:8e:33:23:
4c:bd:53:01:83:90:6a:e7:7d:45:8e:0d:11:ea:78:
39:39:96:fd:1d:04:99:aa:bd:e2:f4:3e:bd:5e:3b:
e3:5a:9d:6f:11:75:54:9a:a3:6c:b6:a4:c0:be:10:
a3:71:8c:ab:fd:f2:1b:b0:e2:6c:8a:0b:10:c7:63:
15:8b:a7:e4:b8:f1:9c:02:91:e6:21:d8:89:16:c0:
7e:57:b5:af:a6:5e:e8:81:c9:d8:af:6e:86:d3:86:
21:d9:be:6e:20:aa:28:97:90:cf:d2:b8:0d:ea:9c:
f4:6e:80:e6:42:53:dc:93:a4:43:7b:51:b2:1d:e0:
6d:0b:13:7d:52:9d:51:cc:58:1f:83:a9:6d:59:0a:
81:68:27:bf:4a:51:e7:82:9a:9c:6a:62:3a:aa:24:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:B5:DA:CB:15:76:22:54:CB:D1:EC:03:61:74:02:92:77:53:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38F2CF4384711EFB01995A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:03:42:57:01:d6:28:02:5e:5c:94:be:24:c0:5c:20:ac:4a:
a4:53:0e:14:12:de:89:9a:35:89:6a:2e:c1:08:71:b3:3d:67:
22:27:6e:1a:b4:f4:02:46:23:66:1b:68:19:1f:71:5b:e1:16:
fb:d7:50:54:fb:14:f4:75:db:aa:af:20:26:47:9e:5d:ed:b1:
7f:22:b1:bb:d6:b8:27:0d:a1:69:ca:a2:d8:18:23:f6:2e:81:
3a:70:4b:5e:d7:53:aa:4c:0a:2b:61:fe:c7:ae:5e:55:00:4e:
fa:b0:01:fb:f8:44:93:e7:53:3a:19:67:e3:5f:24:d0:11:45:
e7:ac:ae:8c:e2:7d:15:3c:ce:c7:3a:03:51:ac:74:4f:12:b3:
1d:41:07:3b:77:1e:b1:f6:bc:c7:dd:4c:70:6d:82:8e:23:e0:
b5:f1:e9:92:9a:cf:33:66:30:78:7d:e3:07:91:65:2d:cc:30:
85:18:a2:96:fc:47:01:a0:4e:0d:fe:bf:2e:4a:ac:c3:bd:56:
4b:4a:6f:7e:a0:6b:77:9a:8e:39:57:17:de:e6:5b:cd:bd:6f:
da:f9:c7:97:b0:66:19:b1:60:a0:f7:b7:9b:9b:f6:51:89:a6:
1e:30:7a:d2:aa:74:0a:c2:97:0b:56:3b:a9:82:fc:13:4f:eb:
fe:7d:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org