Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F68FB82CE8611EFA9E09B6A762E951A.roa
File: 0F68FB82CE8611EFA9E09B6A762E951A.roa (raw, json)
Hash identifier: euwvH7LdBg4MJRQn7eyh42Mu+y0gRb7KqQY9lar/w7g=
Subject key identifier: F4:34:B6:B7:22:68:E7:02:28:9B:C1:9A:5B:5A:E6:6E:20:BF:70:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F68FB82CE8611EFA9E09B6A762E951A.roa
Signing time: Thu 09 Jan 2025 12:34:25 +0000
ROA not before: Thu 09 Jan 2025 12:34:21 +0000
ROA not after: Sat 01 Feb 2025 12:34:21 +0000
asID: 17561
IP address blocks: 156.236.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66508 (0x103cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:34:21 2025 GMT
Not After : Feb 1 12:34:21 2025 GMT
Subject: CN=677fc251-f785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:05:67:b4:43:49:aa:20:8a:94:12:13:82:
31:98:10:61:65:70:92:44:26:ee:9b:4a:e7:f2:61:
81:ad:21:91:18:ea:47:6b:b0:3f:5e:7d:99:b0:d9:
0f:9f:5e:6a:57:6b:8e:7f:37:ff:76:a8:e7:22:27:
9b:b2:4c:08:99:ca:c5:5c:91:a2:aa:07:d5:bf:b9:
43:39:b1:18:67:83:18:e0:a3:21:de:5d:52:c2:a7:
ed:19:31:f5:dc:2c:c3:08:7c:16:2e:d6:c4:25:b0:
8b:dc:39:fa:5f:e6:02:9a:ca:97:87:65:a2:6b:5d:
24:12:85:b4:b3:fa:a7:1d:aa:07:54:f5:84:5d:54:
97:ac:dc:dd:74:f8:9c:86:9f:13:3b:5d:7d:2b:e0:
23:7e:3d:90:09:9e:9a:29:12:2d:de:dd:24:eb:9d:
91:d7:e0:b9:08:45:d0:6f:bb:23:c5:db:41:37:22:
fe:3e:59:fe:6e:87:65:e2:be:48:70:38:89:4e:08:
cb:4b:26:50:c4:c8:5d:b6:8f:a7:2c:6c:2d:e3:bb:
cf:6c:6b:98:f5:2e:fa:7c:1d:3f:48:fa:6e:16:09:
8c:93:e1:72:3d:20:23:2d:86:db:af:6e:f9:12:ef:
5e:a8:0d:ca:b2:5c:ed:c1:e1:14:90:3f:51:a3:85:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:B6:B7:22:68:E7:02:28:9B:C1:9A:5B:5A:E6:6E:20:BF:70:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F68FB82CE8611EFA9E09B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8f:b7:16:b4:78:d0:ac:b8:93:10:08:8f:36:06:b1:87:01:
f9:62:88:8b:17:93:4e:6c:df:e2:00:62:b5:f6:3b:9d:5c:be:
c9:b2:7e:00:6e:d8:1d:57:81:7f:12:cb:59:56:b5:7f:96:9c:
1e:3a:c6:78:44:78:b9:84:b5:9f:a6:8e:b4:0e:b3:66:be:23:
8e:c8:6c:cb:01:d5:6e:4f:d9:68:aa:65:71:57:b6:e3:f9:ed:
04:a4:ca:ae:d7:92:33:69:23:bc:b6:72:e6:c9:78:83:91:20:
8c:f6:fa:bc:bb:96:4c:e0:40:c5:46:36:fa:ac:78:45:24:cf:
91:4f:81:47:4f:ab:bd:c9:14:3d:e2:69:6e:6d:25:0d:71:a6:
a4:21:d8:f4:dc:57:da:6a:73:aa:26:00:b2:62:55:ca:c0:f2:
15:f2:b7:11:b3:59:9c:f4:15:52:5c:96:18:da:22:fd:31:7b:
b0:e8:3b:04:83:98:3d:71:92:fc:29:12:5f:8a:d9:ce:68:7e:
ec:6a:37:e2:3d:15:e8:e3:5f:cb:ec:bc:aa:2c:02:e5:d4:ad:
ea:b2:c0:ba:0c:de:9e:ec:b4:c9:fb:c1:91:b2:46:09:51:a4:
87:79:6d:10:05:59:d9:82:1a:76:5b:07:f2:2d:a6:4e:31:61:
2f:f8:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:53 2025 by rpki-client