Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA079A6C47EC11EF85107D67762E951A.roa
File: EA079A6C47EC11EF85107D67762E951A.roa (raw, json)
Hash identifier: OS+OllaEYrYuPGi2zkP0IBm1YEO0uOEtvXGU+Oy6rYM=
Subject key identifier: 00:C5:92:CE:1A:8C:DC:97:0F:79:3A:09:FC:8C:09:DA:AE:0D:35:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA079A6C47EC11EF85107D67762E951A.roa
Signing time: Mon 22 Jul 2024 05:40:34 +0000
ROA not before: Mon 22 Jul 2024 05:40:30 +0000
ROA not after: Wed 31 Jul 2024 05:40:30 +0000
asID: 133522
IP address blocks: 156.227.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40497 (0x9e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:40:30 2024 GMT
Not After : Jul 31 05:40:30 2024 GMT
Subject: CN=669df0d1-129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:72:66:7e:bb:f3:3d:47:f4:98:29:89:9c:
27:84:7e:b6:09:df:cf:fe:e2:c7:49:e4:09:70:e3:
3c:6b:d7:4e:ee:65:ec:d1:cd:d6:42:2e:be:bd:32:
e3:69:a0:16:94:86:14:da:f7:b6:d6:b0:6d:e9:4e:
59:10:ce:9c:e5:44:5d:54:09:03:4b:e9:aa:49:9d:
0a:eb:03:8d:45:2c:c6:fc:14:a7:7b:7d:b0:7f:a6:
e2:af:73:5a:d6:17:74:52:81:8d:0d:1c:7e:d7:ec:
55:a0:09:6c:2d:a8:19:35:c6:8c:4f:0e:27:90:28:
02:6f:97:3b:43:a1:c8:ea:ad:e8:99:d0:c1:43:42:
4c:be:ff:ae:48:68:62:f6:fe:74:b1:31:21:92:dc:
d3:90:79:1f:f4:36:bd:65:e4:71:91:a7:c4:b5:ec:
70:a3:e9:0d:a8:9c:1a:cc:5f:83:c3:5c:82:ef:2c:
06:e4:da:e9:90:99:e8:c1:c4:ab:2b:76:86:a7:d7:
4a:7b:ff:df:42:82:f6:60:b8:0d:bd:58:27:40:72:
c8:02:12:3d:71:93:99:1e:8d:af:fd:ff:39:a8:b6:
ed:e8:5a:8e:0b:4a:f0:f3:c4:36:88:92:08:6f:73:
83:ee:26:e7:5c:65:1e:d7:5d:69:89:b6:c2:82:1f:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:92:CE:1A:8C:DC:97:0F:79:3A:09:FC:8C:09:DA:AE:0D:35:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA079A6C47EC11EF85107D67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:99:a0:cf:49:71:7e:03:95:47:15:24:51:5d:6a:8b:1c:ed:
70:33:23:f9:68:30:bf:d5:90:d4:f4:f4:5c:87:fc:ed:16:c9:
f4:6e:92:d0:52:13:23:ad:be:77:b8:09:59:cc:bc:a8:71:9b:
e2:f2:c2:f3:9a:6b:30:06:77:b4:4b:86:78:22:ee:f7:6f:81:
d4:a5:77:b9:fb:bb:dd:76:38:30:e2:1d:86:0c:3a:e3:f4:3d:
55:69:1e:4b:a4:4b:49:90:d4:c6:1f:24:0d:8f:6c:26:e9:fe:
b9:5f:73:54:e4:be:b8:b9:12:88:5c:7a:46:c0:da:38:68:e5:
ec:8e:1a:f7:08:2b:4d:2b:4a:7b:d3:8a:14:48:f5:1b:e9:ec:
c9:57:f0:85:0c:2d:58:fc:fe:14:29:4c:cd:02:b0:f9:c7:7b:
de:4e:fc:14:8f:3d:57:92:c6:37:45:cf:34:5d:10:63:43:96:
88:df:82:5b:03:1b:25:2b:b5:92:66:40:2e:5a:7b:ba:85:5d:
c6:b6:65:1b:39:f6:96:7f:3c:c1:16:41:25:9b:0e:33:90:64:
59:b4:14:38:2e:92:04:2c:5a:97:66:b0:06:6e:6c:2a:10:ff:
f9:0e:6e:26:a6:8f:51:4e:00:b1:27:30:a3:30:36:36:7d:f2:
e6:14:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org