Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5945C090B9F211EEBA0EBA9E775412E6.roa
File: 5945C090B9F211EEBA0EBA9E775412E6.roa (raw, json)
Hash identifier: 1j32xqdKMZWFJVQJE1P7o8rvBk7SX5sBXtN8ABWBlGw=
Subject key identifier: 5C:41:26:67:29:ED:CA:28:D4:0C:22:AF:A1:8F:EF:B0:D6:E3:D7:3E
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 023D
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5945C090B9F211EEBA0EBA9E775412E6.roa
Signing time: Tue 23 Jan 2024 13:21:43 +0000
ROA not before: Tue 23 Jan 2024 13:21:39 +0000
ROA not after: Wed 22 Jan 2025 13:21:39 +0000
asID: 174
IP address blocks: 66.251.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR
Validity
Not Before: Jan 23 13:21:39 2024 GMT
Not After : Jan 22 13:21:39 2025 GMT
Subject: CN=65afbd66-1274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fa:40:af:07:3d:47:e4:96:dc:6b:61:ff:a4:
32:67:25:6a:d9:e0:fb:10:c5:38:0c:99:1a:11:38:
aa:ad:a8:2e:fc:ff:40:86:86:e8:05:0c:91:2e:92:
e3:77:fc:a5:95:ef:94:6a:06:8d:29:fb:12:a7:9b:
15:b5:62:92:b2:de:2f:65:4b:32:66:49:a6:fe:c7:
f3:7d:33:f3:1c:25:b1:82:6f:39:db:33:34:70:67:
a1:16:77:fa:17:32:7b:bf:26:cb:cd:9b:b3:88:e3:
bc:5f:ff:b1:1c:53:06:bc:b9:1e:c8:1c:07:14:3a:
e9:57:a7:9a:c8:e2:e9:61:06:88:3c:68:ad:89:0a:
e6:e2:7d:e2:de:3b:12:c9:f6:37:fd:58:de:5f:e4:
23:5d:d7:8f:91:31:4a:8e:d0:f6:c3:fb:54:16:96:
08:f3:7c:2c:e5:8b:ba:66:26:ca:99:cc:8c:64:6c:
9b:e3:fb:ce:c9:bb:1e:8d:4e:15:42:94:c7:ff:50:
35:5e:cf:ad:18:10:e2:06:c7:c6:21:a4:8e:22:40:
5d:97:7e:f9:28:06:87:3f:b0:9f:d5:e1:e9:1d:03:
d4:87:5e:71:13:64:e7:c1:a5:ef:b1:bb:fe:61:4f:
57:b0:40:df:58:d9:af:9f:1e:b0:b1:1f:1b:bc:ed:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:41:26:67:29:ED:CA:28:D4:0C:22:AF:A1:8F:EF:B0:D6:E3:D7:3E
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5945C090B9F211EEBA0EBA9E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.167.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:b9:2c:b0:f3:44:78:4e:73:c6:ed:ca:22:11:1b:a6:d6:26:
89:c7:df:e5:f3:38:89:6e:98:a3:5f:43:6a:8a:64:9a:63:52:
f9:d8:e4:54:42:bd:e3:34:fd:bb:e1:ba:55:9b:77:2b:4d:ac:
e6:39:06:31:3c:3e:59:52:12:91:93:c7:a7:62:ec:5b:4b:29:
c9:4e:25:b2:32:69:3b:f3:b0:8d:55:da:20:85:6b:72:56:36:
f2:dd:3f:96:5e:58:39:e5:41:5a:1f:54:d8:fc:50:ea:7b:1f:
c2:59:78:85:fb:38:13:3b:14:79:9f:9f:2a:bc:bd:86:d3:53:
68:69:ce:88:ee:58:9c:7d:48:c0:71:14:d2:36:ca:37:83:46:
46:c8:91:25:4f:16:4c:37:9b:f4:db:8e:cf:6b:55:66:88:dd:
e0:d4:52:ca:97:8f:f1:e7:08:e7:7c:17:a0:37:1b:22:28:6e:
0d:47:58:7c:d8:55:51:e7:2e:3b:f4:57:b9:77:00:ff:b7:ef:
64:5c:37:1f:b3:ac:73:3b:f4:78:75:41:b6:a3:02:39:4a:c1:
73:ed:83:df:9f:f5:f1:46:7f:50:63:16:43:5c:d5:9b:c8:37:
f5:b2:fd:0d:f7:41:b8:1b:54:32:68:03:cb:6a:08:b1:3b:19:
92:6f:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:06 2025 by rpki-client