Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC35AA12440F11EF8D1EB8A0762E951A.roa
File: EC35AA12440F11EF8D1EB8A0762E951A.roa (raw, json)
Hash identifier: MVv/LJWmFdJPzOpcQfXUlSme364L2eD0LK2oax9/KC4=
Subject key identifier: 70:69:81:95:01:5B:25:31:2F:BE:CF:4C:46:99:20:DB:AF:BF:6F:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC35AA12440F11EF8D1EB8A0762E951A.roa
Signing time: Wed 17 Jul 2024 07:41:05 +0000
ROA not before: Wed 17 Jul 2024 07:41:02 +0000
ROA not after: Sat 27 Jul 2024 07:41:02 +0000
asID: 22773
IP address blocks: 156.242.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40180 (0x9cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:41:02 2024 GMT
Not After : Jul 27 07:41:02 2024 GMT
Subject: CN=66977591-9beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:ba:d5:09:7f:d2:78:e6:a5:ce:38:bd:47:
5a:7d:65:13:d5:66:2c:29:39:2f:bb:a2:f5:52:fe:
e0:6c:32:8c:05:58:31:c0:35:c8:db:c4:ed:d6:a4:
ea:9d:ee:77:ff:ef:10:fd:c6:f0:19:01:35:b1:f8:
69:66:09:56:69:85:69:51:36:61:5d:ca:40:f5:11:
58:f6:a8:cd:36:c3:44:8d:6a:de:19:94:e5:81:0f:
ba:46:99:15:fc:fc:9a:30:13:07:3f:6d:62:8b:6c:
a9:0e:d2:1c:a0:60:9d:c6:ed:d0:f3:b9:3e:92:01:
80:d0:54:37:8d:70:5d:d3:0b:74:09:96:b4:b3:ce:
0a:9f:c1:d7:09:a4:b2:6c:98:ca:2a:78:f9:14:72:
43:c9:c6:4b:5a:43:e0:c9:81:01:18:5d:fe:1e:96:
ac:69:9b:ae:b4:ca:4f:d1:97:4c:d4:87:5c:0a:e2:
cb:0e:31:af:68:b3:06:fa:75:1d:a2:35:19:8b:50:
a1:b3:54:af:01:52:53:6b:a0:39:d4:1a:4f:2e:13:
1a:92:5c:03:7a:ce:07:9f:e0:b5:fa:f9:90:75:e3:
e0:26:53:e3:58:6b:8d:04:0a:aa:76:dc:1f:e4:9f:
b2:f9:3e:17:cc:2c:c0:bc:1a:c8:3c:f8:65:ad:21:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:81:95:01:5B:25:31:2F:BE:CF:4C:46:99:20:DB:AF:BF:6F:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC35AA12440F11EF8D1EB8A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:02:03:db:61:5b:41:16:9f:dc:e3:72:b7:6a:11:6d:d3:8b:
3d:5c:8e:ab:c1:41:c9:4c:46:01:85:b5:f3:27:d6:be:b5:34:
37:b5:17:e9:a2:62:c8:fe:40:8e:9c:e5:61:38:8b:45:d8:99:
1d:0d:b4:5f:01:fe:9f:5d:85:8e:8b:e7:7a:6e:19:6f:cb:2b:
0b:4a:fd:2a:8c:95:12:84:29:e9:ab:4c:29:b4:e7:c1:cd:33:
f3:92:28:12:8e:77:bf:7f:dd:ed:46:eb:62:0e:82:83:b0:28:
12:c8:8f:61:4c:20:49:39:c2:e2:c1:07:5f:bf:9e:e8:0f:8a:
16:16:7c:53:4b:5a:ca:18:6a:a1:f2:3b:7a:f2:e0:71:de:19:
d9:36:55:26:e0:81:5f:49:bd:da:f3:f8:fb:2b:46:7b:8e:b4:
73:15:61:b0:3b:3c:35:83:f8:92:32:5c:8b:b6:99:07:08:32:
2c:5e:4e:4c:bc:3e:56:99:30:18:e1:ee:04:d7:73:c5:6c:41:
85:b6:75:98:e9:66:67:95:46:9b:d9:dc:ca:8c:91:84:7c:86:
0a:2e:91:3b:21:ec:18:25:68:e5:5b:4c:36:25:44:ba:b4:5b:
71:b3:dc:5b:85:e3:99:f6:15:f8:74:c5:d3:56:4d:a7:7c:60:
68:94:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org