Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA377DC03F5A11EFB05BF974762E951A.roa
File: FA377DC03F5A11EFB05BF974762E951A.roa (raw, json)
Hash identifier: x4SLUqNfS5Caj8h5aQO8XkIY8FRIc3npQ8KtrIxV4ss=
Subject key identifier: D8:41:B2:A9:8A:29:6E:03:8F:EB:DD:EF:EB:9B:8F:3D:01:9B:DD:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA377DC03F5A11EFB05BF974762E951A.roa
Signing time: Thu 11 Jul 2024 07:55:45 +0000
ROA not before: Thu 11 Jul 2024 07:55:42 +0000
ROA not after: Wed 21 Aug 2024 07:55:42 +0000
asID: 63139
IP address blocks: 156.227.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39860 (0x9bb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 07:55:42 2024 GMT
Not After : Aug 21 07:55:42 2024 GMT
Subject: CN=668f9001-d08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:8e:5b:75:6f:da:eb:7c:71:1d:ec:95:b3:
a0:58:50:20:43:b1:77:25:d0:45:12:33:32:dc:2d:
88:11:82:30:e5:45:da:68:2d:4a:1d:f2:8d:92:4c:
16:69:a7:ba:e4:83:32:4b:e3:58:7d:f9:90:b4:e2:
52:79:ad:de:13:87:9e:80:dd:6d:70:37:a5:60:7f:
b8:e3:e7:89:ba:58:db:43:6f:d0:90:75:58:01:6f:
ef:71:10:a8:5b:75:35:72:47:54:69:66:84:32:bd:
4a:7b:49:e6:aa:8b:5c:66:70:0a:1e:4a:4a:5b:8c:
b2:01:b0:46:57:38:ae:69:7d:5f:3b:1b:3e:06:c5:
3b:4f:33:4b:3a:32:d0:74:9e:ad:04:db:19:64:45:
ab:5f:02:4d:0b:a7:f5:23:1d:98:d0:d5:13:90:aa:
6c:f9:0d:71:2b:bc:1c:d8:51:8d:7c:81:1f:a2:cc:
2e:4c:e8:ef:02:34:a4:a8:bf:ee:99:f1:00:76:a0:
3a:b7:af:3c:5d:a7:fd:19:09:48:b5:81:29:e5:48:
b4:12:a0:4c:82:5b:4b:72:2c:d7:2d:ab:5e:ad:0c:
8e:42:c5:11:75:d7:ac:32:54:30:fd:a5:44:a8:86:
c2:22:32:93:72:13:15:53:be:15:9d:79:90:ee:c2:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:B2:A9:8A:29:6E:03:8F:EB:DD:EF:EB:9B:8F:3D:01:9B:DD:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA377DC03F5A11EFB05BF974762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
76:92:cf:96:87:ed:31:99:f3:b5:0c:40:f5:25:b8:5c:66:9f:
5b:26:03:60:cc:c7:8e:7b:8c:85:4b:49:ea:88:28:69:94:42:
88:57:42:3f:bf:e4:3a:3e:7e:b7:7e:d7:6d:f4:b4:94:23:48:
54:5d:8a:c6:f3:c9:99:86:70:68:78:7b:82:2b:e8:ea:5c:6d:
b7:47:41:6a:18:a8:f8:46:d3:07:15:d7:52:59:b3:e8:e6:9a:
66:8a:3a:64:1b:d5:c5:79:d6:04:c0:da:76:e1:3f:5f:dd:9a:
a5:94:a8:36:cc:73:81:9c:ae:43:53:43:51:42:66:91:f7:a1:
50:9c:00:d3:20:e9:b7:41:2d:d6:96:89:1a:2f:76:45:6b:35:
10:41:48:bb:c8:7e:80:0a:cb:ec:86:18:7f:4e:73:b8:e0:51:
bb:a6:63:ff:ee:b7:c1:a5:31:f7:a1:42:05:9b:aa:db:2f:00:
6f:dc:13:ae:8f:4a:da:c6:6a:c4:2d:74:17:6c:61:31:83:e1:
7d:0a:60:9b:d2:f2:7c:2d:96:0c:76:3f:03:0c:5d:8e:9d:b4:
17:f0:f7:83:00:fe:f0:92:d2:b0:78:8b:5a:b5:90:d6:52:9f:
a7:b7:60:e4:5a:06:85:0c:08:60:d0:4c:88:fe:fe:bf:ff:e1:
0a:f1:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:19 2024 by rpki-client on console-fra.rpki-client.org