Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D41E358CE7911EF9C8A2298762E951A.roa
File: 0D41E358CE7911EF9C8A2298762E951A.roa (raw, json)
Hash identifier: Nl4p1XIeViaVrEZkIu9V53jIYSBwSqddMJAMGpDVdeQ=
Subject key identifier: 65:3E:3D:67:05:8D:DD:E3:A1:47:33:8A:C8:D4:D8:9E:5C:FE:34:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010330
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D41E358CE7911EF9C8A2298762E951A.roa
Signing time: Thu 09 Jan 2025 11:01:18 +0000
ROA not before: Thu 09 Jan 2025 11:01:14 +0000
ROA not after: Wed 22 Jan 2025 11:01:14 +0000
asID: 22773
IP address blocks: 156.236.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66352 (0x10330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:01:14 2025 GMT
Not After : Jan 22 11:01:14 2025 GMT
Subject: CN=677fac7e-d0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:b9:c9:8d:34:ff:e5:5e:b9:0b:6f:22:2d:
2e:6b:a6:6a:46:88:fc:11:46:9f:85:ec:62:33:01:
d8:92:70:0f:eb:56:bb:4f:bf:91:aa:96:2d:70:95:
50:99:b9:5e:a8:d5:93:02:bb:f3:4c:01:e5:bb:4a:
38:94:ae:94:9b:4b:26:c6:57:e2:4b:c8:7f:74:ed:
ce:93:66:28:7a:0f:ee:fc:8e:ac:a8:64:fc:b1:3e:
a5:1b:18:a1:f1:b9:80:0b:dc:13:cf:c9:d3:11:35:
88:b9:0a:8d:6c:e7:f7:f2:da:54:e9:29:03:e4:96:
08:31:c3:df:36:d3:ce:b0:28:7b:1e:5b:3a:c1:2a:
65:1a:b4:f6:e8:e0:82:6d:74:ab:4c:97:f2:32:21:
29:0d:38:ce:bd:72:43:3e:52:81:5f:3c:3c:0a:bc:
c3:c1:2e:dd:ea:6b:e3:5c:00:53:48:0c:0b:00:54:
3d:a7:a8:d5:9b:67:8f:9d:88:b5:f0:a5:41:00:3a:
c2:84:64:61:43:43:05:46:48:dd:80:2b:d2:7a:a3:
56:27:a9:de:d5:39:4d:35:da:56:5a:44:06:93:a5:
e6:c9:3c:c2:0f:b0:11:89:00:29:22:27:2d:b8:58:
b8:d0:c8:5b:8f:79:b5:84:82:74:c9:a7:c9:0e:2c:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3E:3D:67:05:8D:DD:E3:A1:47:33:8A:C8:D4:D8:9E:5C:FE:34:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D41E358CE7911EF9C8A2298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.0.0/23
Signature Algorithm: sha256WithRSAEncryption
28:d5:8b:53:9a:4d:70:c1:80:77:8c:eb:b3:2c:6d:17:0c:a7:
7b:1b:0c:61:b8:4b:bb:89:2f:ce:ac:d9:ee:cc:c6:4c:5b:71:
e9:fd:5a:99:99:c0:07:07:5c:9b:59:e2:db:7a:a3:13:7e:e4:
31:4e:97:6b:7c:f0:56:16:52:03:5c:2b:95:ea:2b:94:72:6f:
e3:8e:09:fb:bc:08:67:bf:ad:54:21:5b:51:d9:6a:87:f6:81:
1d:02:43:b6:db:40:7b:8a:4d:41:2e:9e:67:61:45:07:4f:6d:
d9:ea:9b:d4:4e:b2:35:f6:e7:51:73:09:22:0c:36:d7:46:f4:
72:37:79:ea:44:3f:65:03:d3:cf:6f:93:47:b2:1d:8d:73:5a:
38:aa:87:a4:3d:92:3d:50:2e:63:e8:08:ba:e6:aa:75:bc:88:
f7:8f:6d:e3:e9:09:d2:33:f3:7d:55:78:54:fb:30:9f:5b:6f:
f6:51:8a:e3:39:4e:ed:c9:9b:34:1a:68:cb:03:43:ab:89:7e:
38:96:3e:0b:6b:58:4b:b0:3a:be:96:8f:31:eb:60:1f:f6:cf:
ff:a4:db:45:d1:03:59:3f:2e:ab:ab:0e:51:71:c0:24:6e:55:
44:46:f4:fb:3f:36:55:95:16:ec:c4:ef:3f:58:21:1d:ec:c4:
b5:4f:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:12 2025 by rpki-client