Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07051FF2D30E11EFBE28D3A2762E951A.roa
File: 07051FF2D30E11EFBE28D3A2762E951A.roa (raw, json)
Hash identifier: +7RjzqY6gJSHLu8eq0V+vgmvYxmL7WSyzGYJPDQtJqs=
Subject key identifier: 79:56:86:B1:B1:84:1F:83:92:6B:DA:5E:A3:75:84:6F:79:68:A0:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010839
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07051FF2D30E11EFBE28D3A2762E951A.roa
Signing time: Wed 15 Jan 2025 06:57:47 +0000
ROA not before: Wed 15 Jan 2025 06:57:43 +0000
ROA not after: Mon 27 Jan 2025 06:57:43 +0000
asID: 142032
IP address blocks: 156.225.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67641 (0x10839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:57:43 2025 GMT
Not After : Jan 27 06:57:43 2025 GMT
Subject: CN=67875c6b-3dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:fb:ec:d9:f3:fa:f6:f8:f4:e2:db:a6:b2:
ea:da:d7:c4:1a:4b:7b:07:86:23:0f:2a:a9:95:50:
23:e4:8d:67:14:e3:80:e2:1c:f3:58:f3:84:82:71:
44:ab:1c:35:51:a7:7e:4a:76:9f:9b:f5:38:cf:4a:
bd:b0:46:1b:a1:a2:bf:24:91:85:50:9f:a3:6d:4c:
6a:77:43:7a:75:71:07:b5:1f:37:81:c4:f2:07:4d:
df:30:c8:56:e2:1c:ce:2b:a2:d3:73:45:92:87:dd:
53:f6:4f:2e:05:dc:22:e8:d1:66:e6:15:70:ce:d8:
44:6a:c7:9c:b7:bb:c3:a0:42:a1:c7:40:b5:b6:52:
fd:22:ed:e9:1d:69:2d:2b:8c:e4:9c:64:ad:b8:03:
09:49:2e:de:03:fd:a2:3c:9a:f8:1b:b4:40:30:88:
a1:e3:04:21:f5:ed:ec:b9:b3:bf:55:ed:4a:a0:8d:
c1:5a:8f:68:7e:e8:e7:09:f8:bf:a7:33:b3:19:28:
c9:0a:88:c1:32:54:40:a9:78:26:ce:5a:38:fa:4f:
22:75:50:11:88:8a:31:59:2c:e6:03:8d:b7:75:9d:
43:54:b5:90:4f:af:49:e5:c0:94:e3:36:9a:5c:d6:
cf:9f:52:d9:8c:59:4a:55:ae:aa:09:3d:f2:b1:29:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:86:B1:B1:84:1F:83:92:6B:DA:5E:A3:75:84:6F:79:68:A0:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07051FF2D30E11EFBE28D3A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.24.0/21
Signature Algorithm: sha256WithRSAEncryption
62:92:0a:a4:0a:8e:f0:1a:62:aa:b3:92:97:87:c5:c4:50:bb:
3c:7a:a6:fe:b2:24:d8:0c:f7:d1:b2:1c:4f:47:19:de:21:4b:
56:0a:2d:b9:70:5e:cd:53:82:d2:6f:db:8e:3c:27:9a:14:62:
3f:dc:89:f4:3f:d5:55:c0:c5:17:8e:b2:bf:a3:34:75:1f:92:
3b:24:d6:2b:68:8e:d3:ad:48:c7:e7:54:a2:af:68:ac:ce:7c:
0f:b3:64:ac:5f:e0:72:13:17:26:98:44:38:5f:11:0c:14:e1:
58:ea:d9:5f:d3:0d:1b:bf:15:8a:8d:5d:f3:ab:a7:eb:b9:12:
88:e1:63:56:fe:8f:b6:c3:2f:2c:e9:b1:14:8f:34:32:d7:b5:
7b:59:12:b2:57:2e:a0:0c:02:3a:d6:4c:dc:cf:93:8d:de:b4:
6f:66:2b:72:1c:b0:e9:5e:8d:d6:fa:f4:fc:f5:30:6c:d3:1c:
99:66:8f:24:2e:e7:6c:9a:53:f3:30:4a:f8:2b:d9:fb:bb:fe:
f9:5a:4f:b1:65:ac:00:30:bb:4f:26:00:62:2d:6b:d3:6a:ca:
01:3b:bb:6e:84:44:2c:52:a9:14:27:2d:f2:ec:72:d2:70:65:
4c:5b:8e:d6:b0:8c:60:80:c2:ec:bf:5f:8f:fa:41:07:ef:00:
b8:39:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:49 2025 by rpki-client