Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F18255AC018811EFAC135A62017001B1.roa
File: F18255AC018811EFAC135A62017001B1.roa (raw, json)
Hash identifier: DcdILJeYA4olShyWd5WDWAYR8/ns9cig7tuNg9jw2tQ=
Subject key identifier: F0:0E:8B:F7:E3:C9:C4:90:1D:F4:15:EA:B3:7E:2E:2E:03:35:8C:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 849D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F18255AC018811EFAC135A62017001B1.roa
Signing time: Tue 23 Apr 2024 15:48:35 +0000
ROA not before: Tue 23 Apr 2024 15:48:32 +0000
ROA not after: Thu 02 May 2024 15:48:32 +0000
asID: 142062
IP address blocks: 156.245.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33949 (0x849d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:48:32 2024 GMT
Not After : May 2 15:48:32 2024 GMT
Subject: CN=6627d853-aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:44:1c:c9:75:fc:17:b9:f1:4a:5f:23:e9:
e7:71:16:c2:96:b8:29:3a:5b:d5:c5:d4:a6:e8:3e:
40:14:f1:05:e0:7a:d4:68:19:c9:06:f0:75:25:ee:
27:94:be:e7:b0:5b:43:b9:dc:9d:ed:8e:c3:23:ba:
d7:9d:8a:39:2a:db:97:d1:f6:4f:96:65:f6:00:02:
25:db:63:2c:24:50:94:16:e1:78:69:1f:87:ed:28:
b0:1e:ba:aa:7c:35:a1:e8:08:b4:08:5f:1f:83:3f:
5c:83:f1:78:71:b2:bd:24:bf:7d:f8:89:e7:8e:17:
77:5a:ab:e7:5f:1b:2e:f5:4a:07:b1:93:af:03:09:
b8:9a:db:f2:02:7b:60:05:03:06:3b:80:61:1c:5a:
1a:b1:a8:8b:16:d3:a2:8e:d0:93:c0:47:c8:0c:d7:
0c:d8:06:68:9c:17:1a:ad:2b:af:08:30:fe:c8:ca:
85:c4:91:1f:37:6b:12:35:f3:f6:37:20:8e:fd:a6:
41:ff:2f:17:98:2b:02:d6:31:ad:cd:1e:7c:4b:78:
6d:21:7a:9d:80:02:2b:4f:86:49:df:a9:bc:f9:ea:
d8:6a:3d:f1:67:ee:f6:8c:01:62:a7:90:e6:62:ef:
be:a9:69:56:a8:9a:fd:50:9a:81:09:7e:78:bc:9a:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:8B:F7:E3:C9:C4:90:1D:F4:15:EA:B3:7E:2E:2E:03:35:8C:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F18255AC018811EFAC135A62017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
87:f3:56:d1:d2:ae:07:8c:81:ed:a0:e6:96:72:db:2c:f9:3d:
09:af:02:cb:df:69:76:1f:52:18:bf:31:3e:ed:13:d7:36:e6:
81:15:66:36:69:99:17:3b:d7:4e:dc:77:59:52:4e:23:a4:f6:
b3:6f:ff:db:ae:b2:ad:35:3c:01:2e:1e:85:39:5a:c7:f1:0c:
74:cd:e2:0e:b4:15:4f:57:86:7d:0d:3e:30:de:06:c7:4e:23:
4a:28:8b:1c:6b:89:0a:19:b5:e7:ed:ed:30:79:e8:1c:9e:cd:
a7:23:1a:90:be:58:b2:99:2f:87:27:a5:c2:c8:d7:db:93:65:
77:d9:34:e9:87:e0:f8:84:5c:11:11:2c:e9:eb:7f:a3:d3:89:
18:dd:49:fd:ac:0f:86:11:65:1a:d0:1b:fe:a5:24:19:98:a5:
17:17:7f:60:60:8c:fb:ea:3b:b8:24:20:27:95:4d:1d:bb:77:
ea:4b:35:9a:81:ae:bf:5e:68:80:0b:95:12:71:26:ec:94:0c:
73:61:31:90:80:45:23:29:7e:e5:27:e8:01:31:33:40:97:68:
2e:42:02:0c:7e:82:cd:5c:85:b4:4f:2b:8c:0c:e4:54:2a:bb:
2b:a4:25:66:de:fe:23:26:11:a6:78:de:d9:50:8d:d6:95:9e:
b2:f8:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:32 2024 by rpki-client on console-fra.rpki-client.org