Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F0234E406811EF8E753795762E951A.roa
File: F4F0234E406811EF8E753795762E951A.roa (raw, json)
Hash identifier: xUTyxShBvGwJlP3hpbk1nU8mqhTzE+uroiKvKa340r4=
Subject key identifier: 6F:C0:0B:8F:62:A5:0F:AE:9D:48:D8:17:6E:CE:E1:60:F6:DE:B9:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F0234E406811EF8E753795762E951A.roa
Signing time: Fri 12 Jul 2024 16:08:20 +0000
ROA not before: Fri 12 Jul 2024 16:08:17 +0000
ROA not after: Tue 13 Aug 2024 16:08:17 +0000
asID: 138915
IP address blocks: 156.244.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39923 (0x9bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:08:17 2024 GMT
Not After : Aug 13 16:08:17 2024 GMT
Subject: CN=669154f4-2878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:88:c9:40:72:70:2d:83:d8:15:63:a1:4d:
4f:68:14:3b:70:9a:8b:15:e9:1a:9c:ab:50:a5:a1:
ab:01:e9:19:c8:f1:35:4a:cf:e2:ce:97:ea:38:47:
18:ec:8f:cc:90:ab:29:c5:f4:03:80:ac:f5:5a:81:
f5:75:98:35:18:cb:05:dd:2f:73:2b:ff:02:61:6e:
3c:65:c2:df:61:01:2c:14:4f:2a:0f:d8:2c:ba:7b:
e3:1e:c0:89:4a:57:45:9c:c1:e7:02:18:dd:cc:58:
88:d6:24:36:25:45:69:d5:1b:e1:8f:e2:6b:39:e0:
32:74:ea:88:6d:4b:2b:99:3c:50:20:81:ec:8b:8b:
0e:7d:ce:a0:82:3e:ac:8a:a5:bd:6f:33:ac:27:8f:
4b:2a:18:72:87:ce:0a:45:b7:cd:7c:71:16:52:9c:
ef:ab:29:10:4f:37:d3:5f:ff:f9:90:d2:6e:ff:1c:
30:f0:95:a8:49:82:76:e2:44:9b:5f:71:f1:8d:ea:
b7:58:ed:d2:54:38:8a:75:f0:43:f2:7d:f0:5e:e4:
bb:67:68:fc:42:1a:a6:97:5c:ec:2c:63:6d:57:1f:
a8:a3:8b:26:a1:ad:c7:e4:f4:3d:53:1f:0d:2b:b2:
e8:bc:ce:3c:8f:3a:5f:c5:ef:46:6e:13:55:31:57:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C0:0B:8F:62:A5:0F:AE:9D:48:D8:17:6E:CE:E1:60:F6:DE:B9:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F0234E406811EF8E753795762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.15.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3c:51:2f:31:61:bb:1c:9e:6a:c0:fd:db:98:3b:8c:aa:d4:
6d:47:9f:1f:f9:88:d1:2f:a4:b4:fa:af:a6:6e:6d:cb:ac:41:
b4:b7:56:59:27:22:26:2a:b7:d8:52:1d:49:c8:5c:41:69:e6:
79:d3:e6:b1:8b:e0:1c:4a:87:db:62:b8:61:6f:dc:21:04:6e:
ae:37:10:a3:e1:12:d4:12:0d:41:b1:5b:dd:4f:fa:09:81:bd:
c5:3d:87:87:b9:66:c6:14:15:ac:a7:bc:14:a0:70:57:b1:24:
4b:e6:74:f8:13:b3:3e:42:81:69:bb:2d:bf:90:a8:4c:08:01:
59:64:28:fa:55:46:f3:f0:dd:19:8f:26:02:2c:d1:9c:10:04:
7b:ec:32:45:b5:23:6d:94:27:dc:4f:e3:31:18:01:15:5e:0e:
39:dc:1e:dd:73:b5:4b:23:95:37:3b:a8:f9:ec:97:be:92:52:
e9:da:df:e9:2f:0e:af:51:be:79:74:a8:ce:1c:c9:f0:3c:27:
a0:b1:13:62:ce:ae:3f:cc:0f:24:aa:68:0e:42:5a:79:d9:8a:
b8:33:2b:b2:64:37:55:ea:42:f3:20:c6:66:72:26:f8:55:ae:
d8:db:ac:cf:61:b0:5e:8b:61:d8:c4:cd:b8:68:85:e1:49:33:
68:bb:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org