Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C884DC45A511EFA13AD56A762E951A.roa
File: F9C884DC45A511EFA13AD56A762E951A.roa (raw, json)
Hash identifier: 9rBs7TTFjwnRLvc6Ss3Q8sa9Kl57FfskRLGeF44OmHg=
Subject key identifier: 7D:5C:3B:40:10:93:2D:F1:D7:69:D8:27:A2:DE:CB:81:C1:E4:D9:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C884DC45A511EFA13AD56A762E951A.roa
Signing time: Fri 19 Jul 2024 08:07:43 +0000
ROA not before: Fri 19 Jul 2024 08:07:40 +0000
ROA not after: Mon 29 Jul 2024 08:07:40 +0000
asID: 151979
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40340 (0x9d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:07:40 2024 GMT
Not After : Jul 29 08:07:40 2024 GMT
Subject: CN=669a1ecf-7a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:e4:a1:24:49:06:58:dd:1f:b9:76:d1:79:
16:be:87:b6:2c:18:f7:05:02:93:c7:b4:f0:48:b7:
23:84:dc:56:7b:16:8a:02:46:96:d0:1a:18:51:02:
3a:52:ac:3e:2b:77:c9:0c:42:ed:96:7f:c3:7a:1d:
66:d7:20:fc:87:18:7c:6f:f1:60:d0:bc:94:23:ba:
74:b0:a5:3f:70:be:c8:f7:50:17:c3:2e:3a:5e:93:
d5:45:3f:2a:ed:11:9e:68:a2:e1:32:53:98:a4:77:
7e:03:23:7f:71:71:8a:ca:4e:fd:a8:2d:06:56:c7:
5f:9a:a6:79:e2:e1:47:99:b8:18:ac:1d:45:c3:ab:
ba:af:70:23:45:15:e2:38:16:81:19:b9:66:99:03:
ff:8f:92:67:57:08:35:d5:16:2e:28:8c:8c:f3:e1:
70:25:ee:4a:e6:c7:9b:f7:8d:19:76:68:be:5a:dd:
08:7a:67:e0:cc:32:d3:e2:32:1c:a8:36:ab:34:42:
c2:d7:8f:22:5a:8f:ad:c0:bb:fe:37:a4:00:4b:0e:
e6:b2:27:73:52:45:45:b4:b9:f0:7c:b5:63:ff:82:
48:b4:46:f7:60:d1:87:6e:3f:59:f4:38:58:f3:5a:
48:8c:6b:be:07:74:bd:13:34:8d:67:fd:28:a9:92:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:3B:40:10:93:2D:F1:D7:69:D8:27:A2:DE:CB:81:C1:E4:D9:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C884DC45A511EFA13AD56A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
34:4a:fc:82:cd:d5:a9:d5:ff:91:54:5a:b2:d7:27:90:e8:ee:
38:90:e0:b0:bb:80:d1:e1:5f:92:d5:a4:66:e6:98:de:28:9b:
9b:93:25:f3:bd:a4:08:0b:b8:6d:80:c2:c3:21:ba:c8:1a:2f:
6d:86:1f:41:42:c6:99:b2:e5:6c:1a:92:1b:c3:5c:d3:f9:b2:
18:45:cd:b3:c3:92:3c:66:3b:0d:d8:c7:4b:55:8d:a2:ba:bb:
74:c2:7d:99:fa:5b:e5:6d:f5:32:1e:0e:14:3d:c3:ca:4b:ca:
5b:bb:53:db:8e:22:42:d7:41:63:7b:00:60:45:e0:ab:57:f6:
d7:dc:8b:e1:94:40:dd:3a:be:90:89:db:6b:55:46:6e:39:91:
c0:73:63:81:09:6d:16:13:74:8c:33:ef:40:d6:9f:d0:16:5e:
83:be:82:19:d6:40:68:90:d5:f2:95:c4:08:cd:f6:fc:9e:d6:
84:62:9f:9f:6a:fa:31:24:d4:c8:e6:18:b1:a0:98:f5:77:dd:
68:6d:24:0a:e8:6e:ac:24:6c:b6:44:12:40:a0:53:a9:c9:ba:
1b:2b:71:05:e3:6a:d3:05:1f:63:6e:17:bc:76:cc:69:cd:35:
1b:02:9d:09:8a:f1:00:75:af:e7:4c:f8:04:84:90:6c:a6:6c:
14:9a:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:09:46 2024 by rpki-client on console-ams.rpki-client.org