Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/2F8AE02C784411EE892AFE314AD9E6FC.roa
File: 2F8AE02C784411EE892AFE314AD9E6FC.roa (raw, json)
Hash identifier: X9r7z28lWWXL0X6RUL8TSm5dmOFrfVTKZsXzHAAmuVo=
Subject key identifier: D3:38:87:A6:98:75:E5:34:B2:38:0B:30:77:E1:98:52:EA:72:56:C0
Certificate issuer: /CN=F36FCA07AR/serialNumber=5AC607C49CD33041F58CEEE54C7660E0459BF727
Certificate serial: 0A
Authority key identifier: 5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27
Authority info access: rsync://rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/2F8AE02C784411EE892AFE314AD9E6FC.roa
Signing time: Tue 31 Oct 2023 23:21:15 +0000
ROA not before: Wed 01 Nov 2023 23:21:09 +0000
ROA not after: Fri 01 Nov 2024 23:21:09 +0000
asID: 328055
IP address blocks: 169.255.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCA07AR/serialNumber=5AC607C49CD33041F58CEEE54C7660E0459BF727
Validity
Not Before: Nov 1 23:21:09 2023 GMT
Not After : Nov 1 23:21:09 2024 GMT
Subject: CN=65418bea-0892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:27:98:46:fd:85:ee:c0:12:c9:38:6e:e5:
e0:bd:95:02:a3:33:b5:0a:fe:37:65:fc:eb:ad:e3:
72:90:06:75:64:dd:d4:0a:0c:e3:a4:ee:f8:ba:01:
17:f3:7e:d4:a7:18:cd:49:43:85:18:a6:2d:f2:2c:
4c:82:be:9b:ea:36:b7:93:f6:37:ae:b1:43:86:00:
b0:3d:85:56:23:16:76:f8:78:22:41:23:fd:ab:3b:
ba:15:56:ff:95:6c:97:44:e1:f2:e5:1d:02:0f:ca:
da:b6:8a:00:41:89:9d:2e:58:0d:64:45:1e:0d:b6:
b2:38:76:af:f5:2f:14:b5:ca:ce:cc:13:37:93:b8:
c5:07:fc:92:10:8d:ee:af:81:6a:44:6e:74:80:4f:
1f:b8:a3:f7:da:77:46:3e:54:f9:6f:61:9f:6d:67:
ae:1a:84:78:50:6b:bb:3a:05:5d:e9:eb:7a:7f:03:
dc:1b:c7:8c:a0:79:da:38:0f:48:02:6d:0f:4c:54:
1f:0b:ac:38:07:23:e6:ba:c6:a4:f7:d4:c4:36:05:
15:41:b4:e1:8b:c7:8a:c0:ee:91:2b:35:6d:bb:81:
86:43:87:a9:f1:35:4f:fb:fc:1d:4e:80:f7:b2:ad:
b4:79:4d:12:76:2d:9e:3d:42:4e:30:3a:0d:c4:9c:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:87:A6:98:75:E5:34:B2:38:0B:30:77:E1:98:52:EA:72:56:C0
X509v3 Authority Key Identifier:
keyid:5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/2F8AE02C784411EE892AFE314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.176.0/22
Signature Algorithm: sha256WithRSAEncryption
60:9d:39:f7:81:90:39:c9:e1:ed:74:be:d3:10:b8:b1:53:cc:
15:27:b7:84:4d:ac:23:fd:49:8b:b0:11:8a:f5:f6:08:a7:75:
ea:3f:58:42:08:4b:43:39:5c:47:98:bb:f9:af:fe:d3:fb:bd:
bb:5a:a5:5e:7c:94:8e:20:8c:3d:74:6e:a3:ee:75:5a:bc:04:
de:5f:86:3f:75:1e:b6:55:17:be:eb:6a:e8:9e:6f:c8:51:56:
4e:e0:7c:30:86:0f:a9:6f:26:cb:31:77:e6:ae:16:f5:bf:4d:
7a:99:f4:3d:0f:15:43:54:8c:d3:b1:e3:4e:c1:60:20:08:fe:
a9:53:a9:22:b1:b4:37:30:05:3a:ca:ea:ad:88:8f:94:f2:f6:
a0:f1:b9:0b:44:a4:9b:7e:82:62:54:70:ab:5d:d3:c8:e3:bf:
82:ad:5b:90:6e:ac:e0:4c:13:85:7a:d4:ff:bb:c4:35:13:a8:
3b:59:0f:7b:7c:bc:3a:96:c7:96:57:1e:7a:f1:f3:04:0e:04:
e5:67:d6:1c:1a:d4:00:52:3c:68:c7:0f:6d:76:6c:aa:ee:f9:
3c:07:8a:66:9d:28:e9:73:21:bb:f6:87:34:2e:8a:6e:2f:68:
77:f4:63:ac:5e:68:6c:1f:ae:a5:18:b7:1f:be:38:96:93:3a:
b5:cf:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 05:46:12 2024 by rpki-client on console-ams.rpki-client.org