Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046DE934CACD11EF8B01E8AA762E951A.roa
File: 046DE934CACD11EF8B01E8AA762E951A.roa (raw, json)
Hash identifier: SY9R9Fuy34iAqaNLQav3gOVInBYh+wHc4N+PV76VQq8=
Subject key identifier: 87:63:4C:E9:91:52:85:06:52:4E:86:25:BA:2D:3D:12:C3:EF:7F:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F760
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046DE934CACD11EF8B01E8AA762E951A.roa
Signing time: Sat 04 Jan 2025 18:52:16 +0000
ROA not before: Sun 05 Jan 2025 18:52:13 +0000
ROA not after: Fri 17 Jan 2025 18:52:13 +0000
asID: 39600
IP address blocks: 156.255.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63328 (0xf760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:52:13 2025 GMT
Not After : Jan 17 18:52:13 2025 GMT
Subject: CN=67798360-376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:4b:57:4f:6c:ea:9b:94:f5:80:d5:fe:c8:
f6:dc:42:a3:39:65:26:42:98:a5:ad:bd:e3:eb:fc:
19:53:09:d4:b5:a8:02:b5:0d:90:1c:c2:e4:66:1a:
cf:2c:2c:f6:92:59:ff:7a:2e:02:1c:98:b1:bb:d1:
08:5c:83:c2:38:9e:b4:2a:8e:ee:33:81:52:12:e4:
5b:b2:92:1e:8f:98:a5:3b:d5:99:86:5e:e2:11:f4:
c9:5c:f9:c5:63:ac:17:f6:21:44:76:f3:df:46:d9:
e8:3d:41:fc:de:30:c1:09:a8:e7:c9:90:e2:ce:9e:
1d:0c:cf:37:4a:2a:6f:d8:ff:56:77:a9:90:4d:c2:
45:12:68:93:1d:29:05:6e:e2:21:76:04:36:6a:29:
7c:31:05:d2:de:dd:b9:c2:55:1e:14:9c:91:9a:03:
9a:2e:e4:b7:29:6e:ea:b7:20:c9:0f:8f:0f:ce:16:
a0:64:dd:01:86:a3:bc:84:93:88:c3:40:a5:8c:04:
b7:ad:c6:c0:81:9b:7b:7e:8f:b8:47:73:7b:74:26:
aa:90:ad:c1:06:f9:ba:61:40:ab:c6:d3:52:3d:a7:
88:46:a7:eb:05:ce:a1:39:5d:90:ed:8e:40:96:66:
79:72:c5:10:e3:82:e2:ca:e2:29:9f:0b:28:88:33:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:63:4C:E9:91:52:85:06:52:4E:86:25:BA:2D:3D:12:C3:EF:7F:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046DE934CACD11EF8B01E8AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4c:95:98:2f:f0:ef:43:55:6e:dd:38:2b:da:83:5f:70:9a:
2d:89:d4:a4:da:82:96:93:b0:3a:3d:9f:fd:85:47:9a:e0:a8:
88:9a:32:f8:34:3f:80:5a:60:3f:71:60:7b:2f:a1:a9:91:88:
a1:81:fc:ea:bf:19:20:9f:20:8c:4d:38:c2:9b:e8:8c:ad:c0:
9d:ab:58:67:62:ea:59:74:72:d9:d3:d2:7a:98:19:bd:c9:4c:
89:a5:d5:f4:21:ca:01:e9:17:b3:f7:24:68:14:36:ef:dc:31:
3f:81:da:65:1c:7a:8d:21:a2:d7:73:8f:d2:df:ff:28:b7:b1:
ce:a7:b5:57:27:cb:b1:3a:2c:e5:9a:6e:dd:3c:e9:97:ef:c2:
7d:f6:98:76:c1:4f:c1:c7:14:36:a4:e5:eb:69:8b:5c:31:b0:
99:7c:b6:4f:b0:bf:9b:ec:a1:91:5c:73:d7:59:f4:4e:ac:a4:
56:d4:f8:39:ba:12:3d:da:64:d7:bd:a3:73:68:80:99:94:3a:
9b:92:1b:57:c8:60:49:b3:86:c1:a1:0e:8e:0b:20:92:8c:c1:
ad:8d:9b:2b:f0:52:ef:47:25:2d:1a:d3:39:99:eb:5e:53:dd:
7f:dc:f2:3c:f3:47:27:19:8d:c7:97:64:56:2e:c0:37:ee:71:
72:e1:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:35 2025 by rpki-client