Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8DADE6440FE11EFB391588E762E951A.roa
File: E8DADE6440FE11EFB391588E762E951A.roa (raw, json)
Hash identifier: 9N7abyB1DLlEmPghiErh2qve8Wm+tTCU5q9OiolTSHA=
Subject key identifier: 6E:D6:75:C2:66:F0:5F:FD:CF:5D:E1:55:47:67:13:C0:6B:04:C8:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8DADE6440FE11EFB391588E762E951A.roa
Signing time: Sat 13 Jul 2024 10:01:44 +0000
ROA not before: Sat 13 Jul 2024 10:01:41 +0000
ROA not after: Tue 13 Aug 2024 10:01:41 +0000
asID: 138915
IP address blocks: 156.244.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39972 (0x9c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 10:01:41 2024 GMT
Not After : Aug 13 10:01:41 2024 GMT
Subject: CN=66925088-5d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:b1:31:9b:95:51:74:0c:0a:95:31:f5:4d:
ad:54:fa:e9:ef:81:3d:87:3f:ca:12:2a:27:9c:16:
16:82:91:9c:bb:a2:4e:35:05:12:1e:c4:55:6a:89:
09:39:fe:74:c1:a3:01:ea:66:57:64:cd:10:c0:42:
20:a7:78:5c:e4:25:4e:19:3e:cf:1d:d4:45:32:6e:
4c:fd:9b:03:41:c2:74:31:47:b5:4c:29:aa:ea:b3:
71:48:b4:ba:2e:73:58:b5:f9:67:a4:36:6b:0c:f6:
46:6f:67:74:f6:d3:90:fa:3d:aa:6a:37:1e:cc:1c:
a8:9b:04:d2:ac:7b:d5:69:46:1b:69:5a:79:f0:84:
67:42:41:4f:0c:ee:71:e0:27:ba:0f:bd:8c:fa:71:
8d:3a:52:0e:13:a7:42:b6:47:1b:f0:27:75:7f:2b:
3c:43:db:88:a7:30:40:78:42:a0:b2:97:18:54:a2:
83:96:5d:4e:d5:3f:61:e8:e1:42:54:06:2e:fe:76:
9c:de:4e:56:95:23:9c:a9:48:54:f2:d7:86:32:6f:
fc:ef:f7:70:d7:b0:f3:65:5f:ce:8b:e7:7c:3c:5c:
0e:4b:ed:30:44:36:8d:18:25:a8:c8:d9:39:78:57:
45:3d:69:35:d4:dd:ae:ed:80:df:e5:b2:80:26:dd:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D6:75:C2:66:F0:5F:FD:CF:5D:E1:55:47:67:13:C0:6B:04:C8:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8DADE6440FE11EFB391588E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1e:0f:72:01:98:50:dd:a7:79:a9:c2:71:5e:c6:c5:fe:58:
7a:e9:60:fe:02:3f:38:03:c1:cd:fb:cc:19:67:5c:c9:08:34:
db:51:99:b4:af:18:9a:0e:d1:82:64:c3:80:11:3d:6b:3e:41:
8c:75:25:f3:5d:f6:6b:d2:fb:11:09:9b:a7:96:b2:35:26:20:
dc:36:32:6f:2c:ee:59:07:22:74:8e:cf:a0:bc:dc:07:bf:67:
62:fd:f3:cb:00:9b:b9:47:4d:6d:fa:26:b3:86:fb:c2:67:c7:
0b:04:36:94:da:7c:9e:0d:72:b9:20:7f:99:e0:59:6f:e2:c4:
49:ee:59:f2:17:a8:4c:74:8c:27:91:d2:09:6b:38:79:8e:07:
45:3e:76:db:e3:7d:47:b8:3f:30:51:5d:1b:a9:f7:ca:44:de:
c1:da:47:7b:ca:62:f7:9c:05:d7:72:6b:c2:ba:91:d5:5f:2d:
b2:16:c6:66:26:fc:56:de:fe:b6:16:9a:7b:36:8c:43:9b:85:
47:ad:3d:b1:61:e8:00:c1:20:fa:3b:25:ed:e0:6b:32:ae:07:
df:7d:23:49:1e:75:86:dc:a3:8e:33:42:47:62:21:36:b4:88:
c2:c3:71:99:af:cc:cf:65:11:af:55:41:03:1e:4a:07:16:4a:
a4:e2:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org