Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6DDC20CE7B11EFA0321AA5762E951A.roa
File: 0A6DDC20CE7B11EFA0321AA5762E951A.roa (raw, json)
Hash identifier: jKaQKmpyTgH5pTGWeMco2gA3c8ww8Mvy5qAOja35cp8=
Subject key identifier: FA:EC:C2:18:F7:0D:0C:4D:7A:B7:44:2C:56:01:09:7C:22:03:99:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01034C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6DDC20CE7B11EFA0321AA5762E951A.roa
Signing time: Thu 09 Jan 2025 11:15:32 +0000
ROA not before: Thu 09 Jan 2025 11:15:29 +0000
ROA not after: Wed 22 Jan 2025 11:15:29 +0000
asID: 22773
IP address blocks: 156.238.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66380 (0x1034c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:15:29 2025 GMT
Not After : Jan 22 11:15:29 2025 GMT
Subject: CN=677fafd4-9866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:e7:7f:6f:c8:e6:83:3c:8a:97:e3:0f:36:
a2:22:6d:7c:ec:4d:e4:9b:80:8a:a3:22:4b:db:37:
8b:1e:bc:58:97:2b:4d:ae:ec:ab:b7:a6:45:e6:b6:
df:80:e8:f3:af:63:5a:02:f9:d0:32:cb:c0:5f:ff:
62:60:db:64:c9:28:01:f7:f5:0f:36:dc:21:ab:d0:
c0:71:fa:18:78:a6:1c:32:7c:65:e4:97:a9:42:63:
21:f3:3e:78:e8:ea:db:26:c9:29:a5:f1:c6:99:58:
cf:8a:1a:e2:80:af:d1:50:a0:6c:05:dd:9f:e2:b6:
75:c2:f7:a7:5b:02:37:92:83:11:de:1b:64:c8:82:
b0:97:a1:1e:df:d6:71:5e:90:09:e5:51:cf:cf:1d:
e1:c5:f7:ef:f6:e3:4f:c2:f4:76:c0:60:0d:ca:95:
74:bd:15:ff:07:4d:54:5b:bd:88:96:54:d3:5a:51:
1a:9f:9a:c3:fe:44:23:71:b8:de:b1:c4:e4:20:f8:
17:57:0e:90:a8:ae:17:51:dd:62:ba:8c:4c:6a:ce:
d6:37:6f:71:dd:e1:91:9c:62:9d:a2:51:a8:31:0a:
4f:00:99:32:a0:41:70:e9:9f:5a:51:c3:6c:d6:c1:
df:30:7f:dc:5c:b3:b5:d7:16:07:b3:18:a8:e3:93:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:C2:18:F7:0D:0C:4D:7A:B7:44:2C:56:01:09:7C:22:03:99:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6DDC20CE7B11EFA0321AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.144.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:49:d6:06:b0:c7:d0:fb:42:d3:3d:66:09:b3:da:f8:af:80:
af:15:df:4e:51:27:cc:9a:10:4c:91:4e:45:00:9f:bc:2c:b9:
3d:b6:3b:f7:4b:dd:ce:82:c9:b8:54:c9:9d:66:a8:40:45:94:
76:df:ee:3e:81:75:f5:ee:c4:5f:2b:24:6f:e7:ee:be:4d:4a:
37:f5:34:48:35:ce:49:eb:b2:27:8d:a4:e4:01:6f:a6:c8:d1:
d5:95:0a:d9:52:4c:57:38:a1:84:66:4e:15:99:ae:2b:5b:c9:
97:38:eb:db:d9:39:3f:71:2c:6a:ea:d6:31:40:ed:2f:e5:24:
8f:27:96:4e:75:62:6c:dc:05:cc:b5:09:32:d6:08:c6:fb:2d:
22:69:d8:62:fe:13:dc:e8:fc:d4:9c:1f:fb:6a:9f:86:00:b7:
77:1f:8e:bd:3f:3a:ec:da:8e:91:a8:68:1e:38:61:e2:c6:0d:
20:ac:36:1e:2e:e1:f2:16:a4:6b:39:81:0f:dd:4b:50:fd:af:
0b:20:23:a0:fc:83:ee:58:18:12:49:ff:c5:75:bf:67:a8:fc:
81:25:20:86:77:fe:60:1e:1d:0c:eb:97:1d:fb:d0:be:32:c6:
31:d5:f7:59:4e:cf:73:e8:24:07:10:10:a8:2b:f6:39:6a:76:
e8:65:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:34 2025 by rpki-client