Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC83B4DC7F0B11EF880B1BBC762E951A.roa
File: EC83B4DC7F0B11EF880B1BBC762E951A.roa (raw, json)
Hash identifier: oPnFevoR2T3fPOfHRvvKxHe8Cz7sk578fYFhfHYArNE=
Subject key identifier: 44:06:81:30:06:54:85:92:F2:37:B2:2E:7C:64:EC:B1:54:EE:60:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BD9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC83B4DC7F0B11EF880B1BBC762E951A.roa
Signing time: Mon 30 Sep 2024 09:11:06 +0000
ROA not before: Mon 30 Sep 2024 09:11:02 +0000
ROA not after: Thu 21 Nov 2024 09:11:02 +0000
asID: 63139
IP address blocks: 156.229.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48539 (0xbd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:11:02 2024 GMT
Not After : Nov 21 09:11:02 2024 GMT
Subject: CN=66fa6b2a-ff3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:63:bb:b6:41:94:b4:53:60:e1:40:fc:72:1d:
0b:53:05:7b:0d:95:90:5e:04:af:25:52:f6:18:fb:
8a:77:f2:38:98:f4:ec:70:c0:37:e5:0c:04:e6:46:
ce:b7:21:a0:25:fb:a0:af:00:3e:c0:52:71:ab:f4:
58:07:f0:c0:74:2e:99:02:b7:15:fa:75:39:bb:71:
c3:b7:9b:e0:8d:48:6e:af:50:dc:e4:7c:f7:57:2e:
17:65:3b:70:b6:3d:fe:09:67:b7:8a:98:fc:e9:4a:
bf:54:ee:5e:99:dd:41:21:80:18:24:9e:be:dc:06:
b4:b5:5e:31:11:fc:15:39:08:06:30:0a:7e:4d:ff:
1c:5f:4d:92:1f:30:6c:35:ac:0e:79:bc:36:ab:c0:
bb:81:66:d5:fe:aa:3a:fd:42:12:76:ab:31:e7:92:
e2:af:4e:85:ca:4c:a5:3d:cb:77:c3:08:ac:03:f7:
76:e6:8a:df:10:b5:99:4f:b2:6f:e9:f6:c0:6c:e4:
13:63:b0:5a:51:03:99:73:81:8a:35:58:8b:cb:e5:
bd:3a:9b:70:ee:ca:31:3f:19:aa:ec:86:73:26:d0:
c3:de:65:e9:b7:ef:87:7e:75:2a:d3:2d:9e:59:54:
de:6d:08:16:f2:01:b2:4d:e4:f2:f0:1f:a2:9d:aa:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:06:81:30:06:54:85:92:F2:37:B2:2E:7C:64:EC:B1:54:EE:60:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC83B4DC7F0B11EF880B1BBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.40.0/22
Signature Algorithm: sha256WithRSAEncryption
71:09:31:bd:6d:5a:a7:c1:2d:21:a8:10:84:95:16:e3:78:dd:
84:1a:d4:97:59:bd:f0:fb:82:d2:60:c9:8b:d4:14:f4:7c:d8:
58:31:d8:fe:b3:2a:80:eb:a5:4b:5d:68:0e:f5:f1:22:92:7d:
de:17:57:65:e4:59:d9:4f:ff:34:be:b8:aa:5b:42:99:53:3a:
f2:fb:e3:2e:e9:be:7f:42:b0:01:19:91:85:15:79:7b:4e:c3:
54:91:4d:0f:31:a7:d0:7f:98:b8:02:11:dd:cd:e4:93:20:2b:
6f:3c:4e:47:bb:ba:2c:65:80:c2:03:3b:81:e7:d3:a3:68:f2:
d3:62:b9:f4:04:16:d1:46:9a:7c:1d:2e:15:42:28:d8:1b:32:
03:b8:3c:1d:0e:ea:e5:3e:fe:53:ce:da:8d:32:e2:29:ab:a2:
0a:57:43:f6:8b:84:14:4f:7b:fd:f4:04:69:fd:32:8b:4b:01:
9d:30:11:62:cc:03:ca:11:7d:c9:6d:bf:5b:21:f8:36:8d:fd:
09:ba:44:77:e5:61:77:91:fb:2b:43:d6:e7:5a:7a:8f:94:10:
3b:0c:09:21:93:17:75:2e:10:af:63:02:9e:97:e6:20:25:89:
cb:9f:e8:3e:71:47:e8:82:05:a7:a2:46:bf:23:52:6b:7a:42:
49:b6:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:55 2024 by rpki-client on console-ams.rpki-client.org