Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C44F304A4F11EF8C1598A0762E951A.roa
File: F9C44F304A4F11EF8C1598A0762E951A.roa (raw, json)
Hash identifier: D43vlyO1RWDWdLozTOSYroczagHgO48T9/lWn20hca4=
Subject key identifier: 7E:D6:CC:16:12:5E:4A:4F:48:64:45:8E:45:1B:3C:85:9A:C0:97:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C44F304A4F11EF8C1598A0762E951A.roa
Signing time: Thu 25 Jul 2024 06:34:43 +0000
ROA not before: Thu 25 Jul 2024 06:34:39 +0000
ROA not after: Wed 21 Aug 2024 06:34:39 +0000
asID: 63139
IP address blocks: 156.227.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40815 (0x9f6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 06:34:39 2024 GMT
Not After : Aug 21 06:34:39 2024 GMT
Subject: CN=66a1f202-8103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:69:f0:8e:04:eb:f9:d3:04:bf:72:8f:d3:
d8:e5:84:ba:19:9e:f1:a2:51:c8:a3:43:21:a2:0c:
f0:29:a8:36:ad:8b:03:72:10:18:77:33:c7:80:72:
34:ed:cf:37:8b:b3:b7:d3:bd:2b:a6:2c:f4:f5:83:
ab:f4:81:a5:96:9f:a4:ad:3f:e7:77:0e:2d:5e:a6:
86:4b:21:15:42:23:42:01:ed:c8:62:39:1d:af:ba:
05:5f:e4:a3:a6:93:14:55:12:f9:76:ab:04:75:15:
1f:fa:cb:81:36:ea:ba:58:40:97:15:10:56:f2:6d:
a6:92:65:6a:9b:94:16:06:66:54:63:49:04:8e:0b:
77:94:bc:da:78:b2:6a:66:7d:b3:a6:b7:36:bf:41:
b6:23:11:df:eb:19:6c:29:d9:99:34:bc:9e:88:96:
25:1d:0c:00:73:e1:48:0f:ff:b9:81:a2:e6:10:87:
82:4c:b6:cc:cc:8f:b0:73:89:bf:c7:0a:b1:bf:04:
8a:e6:0c:cd:f7:f8:90:65:dd:51:b0:5b:0e:a7:53:
71:51:22:5b:18:4b:61:a0:96:75:00:3f:e4:24:fb:
26:e0:16:cf:0b:07:54:64:06:2d:c5:77:3f:6a:27:
b5:02:68:a7:43:e0:3b:c3:4e:e9:70:92:ef:4a:ff:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:CC:16:12:5E:4A:4F:48:64:45:8E:45:1B:3C:85:9A:C0:97:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C44F304A4F11EF8C1598A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d0:94:ed:82:9e:fa:36:95:48:42:ee:8c:e6:b7:10:85:d9:
55:55:d9:db:b1:4b:40:1b:b2:a0:06:60:d8:31:07:22:98:a0:
40:f8:cd:27:f7:00:35:43:8f:9a:8b:d2:68:6a:75:3e:e1:ff:
82:0b:86:1c:41:89:13:22:e8:87:6a:45:35:84:9c:6d:fe:6a:
a9:16:42:08:9f:b9:d5:60:13:14:7f:1f:ee:16:40:fb:55:98:
d8:43:03:21:23:47:3b:a4:29:ee:06:e0:c6:12:fc:95:98:77:
3c:7e:11:95:db:9a:5f:5d:4b:a9:67:5c:cd:cb:51:05:52:33:
af:fc:3e:9f:13:a4:29:71:74:62:2a:2e:a2:12:15:ca:c7:cb:
c7:71:2b:a2:59:8d:17:40:b1:b7:54:29:e6:f9:45:4c:dd:d5:
bb:58:17:c2:39:8e:10:a2:94:65:b6:42:ea:39:87:35:0c:73:
39:af:b1:09:fb:75:c7:15:d4:80:dd:c7:15:87:a9:9f:d5:1e:
27:53:8a:fa:fa:6b:ab:a6:34:9f:b9:58:3a:f9:ed:99:b7:f3:
f9:14:b1:3b:32:32:e5:c9:28:fd:ac:d2:d6:7a:07:61:64:27:
87:7d:48:af:0f:ff:c2:c6:e1:da:64:7c:fd:7c:32:d9:b9:c0:
bf:f6:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 09:58:20 2024 by rpki-client on console-fra.rpki-client.org