Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAEA2182435611EFB97D3BB2762E951A.roa
File: FAEA2182435611EFB97D3BB2762E951A.roa (raw, json)
Hash identifier: GVXzkgHLsgEHA6oJr/NaJDCnuB1Sew8QBtY2SA/PXEE=
Subject key identifier: 75:C5:8B:66:C3:37:D8:67:4A:D3:0A:F2:03:41:4A:4D:AC:F5:F3:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAEA2182435611EFB97D3BB2762E951A.roa
Signing time: Tue 16 Jul 2024 09:37:13 +0000
ROA not before: Tue 16 Jul 2024 09:37:09 +0000
ROA not after: Sat 10 Aug 2024 09:37:09 +0000
asID: 9009
IP address blocks: 156.248.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40097 (0x9ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:37:09 2024 GMT
Not After : Aug 10 09:37:09 2024 GMT
Subject: CN=66963f49-20ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:20:95:44:56:52:13:02:2e:14:a0:b0:87:dd:
11:63:50:43:cc:90:7c:b3:d8:82:af:82:02:39:c7:
49:9d:bd:1d:c0:83:b9:9a:2c:55:c1:8e:5f:a3:e5:
c5:cd:0c:86:cc:aa:f2:9d:81:a4:9f:5f:d6:7f:0a:
81:e5:36:6f:17:52:b4:e2:9d:f1:12:7c:9b:0a:2f:
f2:be:be:0b:7a:00:28:97:85:cc:0e:16:04:bc:c8:
94:82:85:ed:87:11:72:4f:b0:90:8a:96:b4:0d:9c:
bd:a8:e1:86:75:27:b1:92:c0:2c:ba:0b:64:43:05:
bb:bf:65:5f:00:48:c9:d8:c3:ce:28:fe:11:a1:b6:
d7:63:a5:45:c0:7f:15:6c:66:bb:9b:7f:e1:54:9a:
5c:32:33:c5:f7:7c:84:27:49:48:7d:1f:d7:6a:ac:
15:8b:03:e8:72:8e:13:7b:66:fb:7c:13:43:d1:7f:
0f:e1:7e:89:77:59:eb:d4:eb:78:b4:c2:8c:94:cd:
66:f0:a9:44:86:90:36:89:59:97:96:37:b3:3b:11:
3a:d5:6d:bc:56:6f:1d:98:79:40:f2:89:23:74:44:
3c:a5:59:4e:7e:dc:8a:65:d2:1c:79:3e:a6:f8:31:
22:64:c2:49:9f:16:3a:6e:d2:32:07:08:0e:5b:5d:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C5:8B:66:C3:37:D8:67:4A:D3:0A:F2:03:41:4A:4D:AC:F5:F3:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAEA2182435611EFB97D3BB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d7:42:19:8d:33:cd:63:5f:1f:d3:34:13:da:88:89:9c:3b:
5b:4c:c8:37:02:1a:b6:2e:a8:34:44:8a:d4:4d:3a:bb:2b:e8:
be:d8:e5:57:15:08:e7:e0:aa:f3:75:f4:d8:8c:95:22:88:c1:
4c:7b:e8:82:8b:9f:8a:ae:3a:c1:88:d1:d5:96:9a:39:04:26:
ef:11:77:26:fd:d8:cb:55:96:15:ae:02:0d:07:bc:a3:bc:42:
ae:d9:43:df:d4:16:33:18:e3:5a:05:8f:41:b6:2c:10:62:42:
bd:f9:44:f9:6b:87:f5:1c:67:47:d8:29:22:24:14:ea:4a:63:
f0:9b:96:20:e5:f5:f7:90:7f:d6:c4:80:11:db:5e:71:57:71:
f5:3d:c1:dc:fa:af:7c:9c:61:e6:f6:15:32:d9:cc:76:93:06:
fe:3e:24:84:bc:78:27:24:c9:da:5a:04:fe:9a:41:36:c3:a6:
74:c5:ed:02:b8:64:15:a8:f1:99:f9:8a:f2:74:13:ae:8f:d1:
19:96:da:f0:23:35:77:81:59:c6:64:1f:41:69:d9:b9:17:7f:
b2:74:7a:06:8a:47:47:f7:72:ff:7b:19:3a:59:b1:a8:97:22:
57:01:19:7b:c6:a8:86:64:03:e3:10:87:29:0e:c9:ce:d3:7e:
67:cc:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:33 2024 by rpki-client on console-fra.rpki-client.org