Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF749DDA039211EF90768808017001B1.roa
File: FF749DDA039211EF90768808017001B1.roa (raw, json)
Hash identifier: gOjLzJD378ym7hrjmanj6oEpXyZqxDAvZeMaFev4mqk=
Subject key identifier: 9E:15:62:40:21:F9:2F:59:13:2C:6E:B4:39:78:96:5F:D8:08:C0:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8633
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF749DDA039211EF90768808017001B1.roa
Signing time: Fri 26 Apr 2024 06:05:36 +0000
ROA not before: Fri 26 Apr 2024 06:05:32 +0000
ROA not after: Sun 05 May 2024 06:05:32 +0000
asID: 139646
IP address blocks: 156.240.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34355 (0x8633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:05:32 2024 GMT
Not After : May 5 06:05:32 2024 GMT
Subject: CN=662b4430-6be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:c9:2d:f3:4c:3f:f2:18:c1:98:7b:16:fa:
85:d5:ce:07:8b:cc:be:f6:9e:fe:f9:5e:84:e3:79:
9d:1c:ff:e5:ba:71:57:8e:16:4f:08:d5:10:b3:78:
25:9b:1f:21:dc:5a:b3:67:7b:3c:f7:2c:a8:e9:6d:
17:78:2f:0c:fd:ee:5b:a0:60:6b:1e:3e:8f:e3:91:
e7:9c:a3:50:3c:db:be:0f:c4:8d:8e:47:38:3d:57:
21:73:27:b7:c0:43:26:3f:23:89:42:65:1a:6d:2d:
4b:9e:eb:37:6b:f8:92:a6:65:cc:0a:32:64:04:80:
fd:ed:3f:07:1b:a2:c4:0b:73:d6:f8:f2:2b:b4:92:
83:43:9b:fe:91:1d:23:da:3f:a9:97:e7:bb:1d:36:
7c:05:bc:d0:da:1c:49:2c:6a:75:bc:8a:b4:8b:80:
5b:4d:a8:fb:e3:33:6f:de:29:a3:2a:22:3d:44:4d:
3d:99:b1:9d:e7:2c:e6:9a:7c:d9:0a:39:6b:83:cc:
df:35:d6:5a:20:d3:8b:84:9e:4e:bc:f9:aa:4c:b6:
d2:f2:6e:54:92:9c:58:4d:69:63:5a:59:de:94:37:
fb:82:d0:a1:b0:74:d6:fd:97:14:8e:95:d8:04:80:
fe:d5:6b:84:f7:d5:13:20:58:f5:32:9d:42:30:12:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:15:62:40:21:F9:2F:59:13:2C:6E:B4:39:78:96:5F:D8:08:C0:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF749DDA039211EF90768808017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0/19
Signature Algorithm: sha256WithRSAEncryption
56:cd:74:59:32:91:c3:dc:55:65:f0:ad:87:7f:8b:a7:3c:0d:
48:ee:26:1d:4c:bd:52:50:95:5d:99:6a:82:de:03:6d:d0:50:
0a:13:40:de:df:8e:4b:28:c1:dc:87:58:46:ff:5e:38:9c:3b:
6d:0b:c4:8a:1e:15:5b:11:10:9c:15:ec:6c:7a:7c:3c:6c:0d:
00:1b:03:32:7b:48:e3:c0:00:72:e6:1e:f1:75:8b:d3:b0:df:
81:d2:78:89:fd:e0:db:8f:06:76:ea:07:d3:d1:b9:49:31:56:
b8:dd:cf:6b:bc:4c:49:08:41:dc:c0:6e:a4:57:fd:eb:18:19:
20:3a:25:a9:22:a0:48:b3:c1:17:18:ec:f6:ce:30:6b:e8:97:
8d:c9:29:75:8b:9f:52:4b:c2:0d:12:ec:4e:54:85:9a:fa:fb:
d7:23:e9:f0:31:8a:de:74:74:5d:7d:44:4b:b1:72:bd:03:4f:
b9:6a:31:e6:92:af:b4:ad:bf:d3:21:01:db:a9:aa:81:46:9a:
3e:1c:84:f5:cc:b2:b0:74:3a:88:27:a9:af:ea:00:0b:67:ac:
49:8d:3e:bf:18:6c:cd:e7:ce:60:05:c6:ab:2f:d9:be:f3:0e:
1f:6d:7a:ae:5b:c6:16:14:17:f7:2c:80:06:e8:d6:9a:e4:8a:
22:e4:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org