Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04193086CEFD11EFB7BBC061762E951A.roa
File: 04193086CEFD11EFB7BBC061762E951A.roa (raw, json)
Hash identifier: nADFtgCxLPBoU6M9MTH37bqpX2E6Tv2HYBikr10hoAs=
Subject key identifier: D8:F0:A9:98:44:44:3B:9D:D4:4E:1F:22:00:76:E4:B1:D0:A6:1C:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04193086CEFD11EFB7BBC061762E951A.roa
Signing time: Fri 10 Jan 2025 02:45:56 +0000
ROA not before: Fri 10 Jan 2025 02:45:53 +0000
ROA not after: Mon 27 Jan 2025 02:45:53 +0000
asID: 137547
IP address blocks: 156.245.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66743 (0x104b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:45:53 2025 GMT
Not After : Jan 27 02:45:53 2025 GMT
Subject: CN=678089e4-bb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:4f:8d:75:ca:e6:6a:9c:80:88:7b:41:7e:
6b:c2:1b:61:ec:d3:f6:78:33:50:78:4f:76:cd:ad:
ad:50:6e:22:c3:5a:9a:43:27:f7:36:60:82:4f:af:
0f:ac:a3:78:07:c0:94:5a:94:d1:15:5f:38:23:49:
eb:1a:a5:4b:ed:52:20:6b:20:f6:32:56:9b:dc:74:
a7:5c:02:b6:27:2e:b8:73:0a:ac:86:ea:08:0b:45:
f0:b7:33:b7:58:09:aa:b0:c5:09:9a:05:82:ab:49:
9e:f1:75:d0:16:b0:ea:77:13:16:d5:bf:2c:3f:bf:
d1:81:bc:67:42:4e:7d:75:3b:c8:3a:6e:23:fc:e9:
fd:35:b1:23:78:c9:9b:5f:79:54:63:9b:9e:4e:41:
49:34:6c:c7:d2:f6:ba:39:ac:e0:b4:e7:38:5f:63:
c1:eb:49:5b:44:e5:b5:d0:19:60:dd:8c:5c:b2:f0:
14:ed:c4:9d:6e:6d:61:9a:8b:ed:eb:5d:40:2c:bb:
4b:bf:d4:70:89:aa:ca:94:a5:78:59:e6:53:ef:44:
b7:62:4a:84:a6:e4:ca:f9:41:32:32:b5:34:17:f1:
51:d7:70:e2:d0:05:2d:2b:26:91:9a:ff:8e:bf:90:
13:71:8f:0a:74:fc:6b:d1:4b:4f:14:bc:99:14:ba:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:A9:98:44:44:3B:9D:D4:4E:1F:22:00:76:E4:B1:D0:A6:1C:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04193086CEFD11EFB7BBC061762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
57:f9:74:13:b4:1c:90:1a:cd:1b:23:eb:68:21:3e:a1:e9:29:
9f:03:24:78:01:54:1f:71:b2:1d:35:34:0f:0c:a6:17:ca:fa:
2e:fa:29:7f:21:ae:df:e4:d0:91:aa:10:32:86:24:07:a8:8e:
41:17:7b:0f:27:37:8f:25:86:6f:64:53:5b:a6:1a:c5:27:7b:
ee:aa:58:be:80:d5:cd:0d:ad:a6:35:dc:46:f2:86:aa:a5:2d:
4e:09:51:0f:50:b4:10:61:f8:9e:fd:d1:a4:fd:48:20:01:37:
82:5b:0c:15:83:1d:cd:a3:17:00:60:1b:d7:55:a3:33:b2:b9:
b7:e6:c9:65:d6:10:77:dd:b5:74:a7:2a:09:44:6f:b9:ac:88:
6f:6b:fa:ef:ee:66:08:15:a9:3c:1c:64:d9:e0:d8:bf:2d:d3:
c9:ee:a4:0f:48:a7:98:ed:17:d4:bc:72:5e:94:c7:b0:2c:1b:
d5:45:40:8c:79:2c:2e:bd:a5:47:d4:36:d8:c7:a8:5a:dd:16:
ec:8d:d0:6c:53:52:3a:e7:55:51:76:9a:e7:da:bc:b3:4a:84:
ca:86:cf:0d:19:04:47:78:a1:21:50:79:5b:fc:2e:bb:0d:d4:
75:34:32:94:0f:a9:a9:da:3e:a3:9e:0e:39:4a:6a:8b:02:d1:
2a:df:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:18 2025 by rpki-client