Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FF5E588CEA411EFBD67EDA6762E951A.roa
File: 0FF5E588CEA411EFBD67EDA6762E951A.roa (raw, json)
Hash identifier: 3sTfof2K7FBTwY4c3NWp3aO9zgCINyYGBehGAzJvmSg=
Subject key identifier: CB:61:3C:2F:27:C6:11:13:B8:FA:FD:0D:D3:EF:92:0B:FB:67:88:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010448
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FF5E588CEA411EFBD67EDA6762E951A.roa
Signing time: Thu 09 Jan 2025 16:09:11 +0000
ROA not before: Thu 09 Jan 2025 16:09:07 +0000
ROA not after: Fri 24 Jan 2025 16:09:07 +0000
asID: 39600
IP address blocks: 156.252.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66632 (0x10448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 16:09:07 2025 GMT
Not After : Jan 24 16:09:07 2025 GMT
Subject: CN=677ff4a7-e4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:7e:38:a8:83:75:e1:23:a6:17:99:d7:4a:
ed:53:f7:b5:93:79:73:80:96:f8:ea:d1:e8:a4:7b:
e7:44:8a:a1:64:5b:69:47:41:68:39:63:82:06:cf:
92:4f:91:65:50:6c:64:9a:e8:80:a1:80:18:84:2b:
85:a2:68:98:4e:87:ac:28:af:f4:d7:07:a4:7d:7c:
85:7f:e6:f8:89:a5:85:f5:25:85:18:2d:15:93:23:
a8:55:49:5b:0f:71:ae:dc:91:78:c4:53:fb:4c:3e:
6c:a2:78:09:d3:4d:c3:6a:57:3c:3c:7e:42:44:f3:
6b:e6:bd:7f:44:0d:59:f4:75:c7:f5:59:44:7c:71:
50:bb:7a:54:f8:1b:fa:39:ee:cd:1b:6d:1e:e4:dc:
7e:bd:3a:ba:b7:e0:ac:54:96:b9:1a:67:b9:02:32:
ea:4e:53:cc:13:cf:2a:7a:85:98:74:17:1c:51:60:
25:e7:f1:79:00:b5:e1:d5:00:9e:8e:c4:e6:8c:21:
a1:3b:8c:a1:85:49:29:97:9b:fb:f5:45:dd:30:0d:
ae:9f:03:8c:23:ba:91:0b:aa:18:eb:05:e7:11:8c:
b3:86:0a:74:2a:98:80:0d:ce:e1:5a:5f:f9:b3:6c:
82:0a:81:6e:58:b9:d6:a3:d3:95:57:ab:91:59:bd:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:3C:2F:27:C6:11:13:B8:FA:FD:0D:D3:EF:92:0B:FB:67:88:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FF5E588CEA411EFBD67EDA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.12.0/22
Signature Algorithm: sha256WithRSAEncryption
02:c7:ff:79:d8:80:d1:80:e9:90:10:0b:bb:26:1f:9f:ea:ba:
dc:7b:62:28:41:d2:a5:b1:47:e3:f7:cd:9c:a9:ca:fe:84:92:
9a:54:90:3a:56:a6:de:36:6c:f7:96:ed:cf:af:2c:fd:16:d1:
73:b1:5e:ad:bb:73:67:01:46:f4:39:82:58:6a:dc:37:49:37:
6c:59:31:a2:eb:40:73:d7:6d:62:d0:e9:cf:a1:14:c1:30:cc:
64:12:99:e3:be:85:06:99:19:7d:e1:79:d6:83:5a:d5:6d:f4:
f0:5b:22:69:55:0d:99:35:52:2d:5f:d5:69:96:40:a7:72:df:
43:d5:05:3a:4e:39:9d:50:3d:eb:8f:7a:02:a7:fa:b0:29:79:
1d:c7:b3:e4:f2:60:ad:6f:35:71:6c:27:3a:5c:8a:72:00:b6:
fb:07:87:55:81:e3:e1:18:2b:c0:9c:f6:e4:c5:39:a0:d2:7c:
1e:a6:cf:84:00:41:97:c3:20:5b:01:b6:e1:59:b7:1e:84:5d:
d6:04:48:ba:dd:24:3c:e0:74:eb:06:f4:4a:f2:78:c4:40:66:
ae:3f:4c:6a:a9:d4:c5:04:44:7e:dd:97:34:ba:d8:ef:bf:1e:
30:90:05:04:8b:cb:d9:9a:d8:fc:39:a1:d1:be:b9:ea:a3:ed:
af:81:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:17 2025 by rpki-client