Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D944CACABB11EF8B2D67BA762E951A.roa
File: 09D944CACABB11EF8B2D67BA762E951A.roa (raw, json)
Hash identifier: YioMkSlJYGEQyrF/vLP2unu7rLNZeSs8CzcDIjY2mDw=
Subject key identifier: 51:87:A0:CC:85:1F:6F:92:BB:11:F6:4C:B2:83:12:F5:E3:36:40:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D944CACABB11EF8B2D67BA762E951A.roa
Signing time: Sat 04 Jan 2025 16:43:34 +0000
ROA not before: Sun 05 Jan 2025 16:43:31 +0000
ROA not after: Tue 04 Feb 2025 16:43:31 +0000
asID: 5065
IP address blocks: 156.255.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63222 (0xf6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 16:43:31 2025 GMT
Not After : Feb 4 16:43:31 2025 GMT
Subject: CN=67796536-976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:c1:01:df:a9:37:79:49:8a:ac:84:df:20:
97:26:ca:9c:03:5b:d7:e7:a9:e3:bc:32:37:57:6b:
77:bd:ec:8b:a4:0e:40:6d:25:21:db:5f:ba:92:72:
d2:f5:4b:a5:42:f7:e5:54:53:a6:5e:61:3e:a8:76:
1c:6f:54:97:74:10:fa:16:7b:19:c4:9e:d7:ef:58:
d0:a1:64:d5:d3:0f:28:78:f6:08:92:fe:5a:3f:73:
17:7f:90:e6:95:d6:00:ed:5f:ae:af:7b:31:1d:57:
76:68:25:b1:3d:b1:90:d6:3f:74:bd:28:d0:e3:84:
62:80:68:19:4a:63:84:8c:bf:ba:d5:bc:0e:1d:4e:
bc:86:19:a9:c2:52:c0:e6:52:72:ee:bd:fe:9e:6c:
70:35:55:ab:d5:9a:78:24:c2:dd:fa:44:d9:db:d3:
7f:76:da:62:65:6d:c9:96:22:17:5d:bc:cd:4e:d1:
e1:25:10:0e:c1:d2:c2:27:5f:ce:63:ee:ed:d1:e2:
9e:59:ff:bf:11:84:80:1b:a6:b9:13:58:04:b3:5e:
40:28:a3:79:70:ac:34:e7:b1:d8:54:30:be:28:73:
5e:f3:b5:c6:02:ae:f1:25:2b:48:14:ca:2a:05:8f:
6f:be:65:43:95:06:bb:af:88:d3:70:d6:90:18:38:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:A0:CC:85:1F:6F:92:BB:11:F6:4C:B2:83:12:F5:E3:36:40:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D944CACABB11EF8B2D67BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:19:2b:c7:f3:90:52:56:00:b6:0a:6d:83:79:8e:ac:5a:6e:
7c:ab:2e:92:14:2f:e8:48:15:a0:25:34:07:51:91:cc:ce:90:
2a:22:b9:13:57:ce:d9:fe:51:bb:3c:17:1e:f0:f4:f2:60:30:
0b:4c:fd:ef:9c:dc:97:23:fa:c6:cc:e3:4a:09:85:07:28:fd:
24:5a:e4:0f:bc:22:59:ba:96:0b:d7:31:3a:39:af:d4:ec:a3:
53:53:48:d1:15:b3:06:4c:9a:73:00:ec:20:c6:76:8c:e2:0a:
de:e2:b6:89:04:af:5a:46:6f:67:53:39:f8:ef:ed:cc:2d:b3:
1d:90:11:79:09:b7:e5:bf:b1:63:bf:1e:1f:6d:5b:b4:74:9a:
df:7b:52:4c:13:7a:cd:a1:8d:8e:2a:ad:d5:19:a3:cf:05:34:
8d:73:f2:65:ba:08:1f:96:8c:f5:11:f4:d6:99:ad:06:47:82:
12:7e:a7:c7:cc:a9:27:95:b4:0a:44:cc:5e:cc:c2:75:06:a5:
3b:30:50:21:1c:3c:2d:2e:50:48:f0:ee:b7:ba:88:d3:39:f8:
c0:f6:e0:72:43:0e:19:7c:4d:c5:6c:1f:84:68:fc:00:9b:71:
02:ce:73:fa:6a:fd:7e:8c:14:7d:85:aa:f9:f2:f9:d4:c4:12:
c0:3c:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:53 2025 by rpki-client