Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C384418CC1911EFBC2CE56B762E951A.roa
File: 1C384418CC1911EFBC2CE56B762E951A.roa (raw, json)
Hash identifier: Di0ZS9bqw2lB3KPgw5Aj+bmbI4ES14CM2WJNWYhazrk=
Subject key identifier: 37:63:FD:1C:87:5E:01:A3:A3:00:D9:7E:30:0C:8C:FF:F4:30:30:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F889
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C384418CC1911EFBC2CE56B762E951A.roa
Signing time: Mon 06 Jan 2025 10:29:29 +0000
ROA not before: Mon 06 Jan 2025 10:29:26 +0000
ROA not after: Sat 01 Feb 2025 10:29:26 +0000
asID: 39600
IP address blocks: 156.238.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63625 (0xf889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 10:29:26 2025 GMT
Not After : Feb 1 10:29:26 2025 GMT
Subject: CN=677bb089-7775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:df:2d:b2:40:42:39:60:02:41:7a:f2:85:
4e:49:82:72:ed:6c:94:38:0b:13:65:29:f7:a7:79:
c2:1b:fb:51:bd:9c:1c:67:06:f6:6d:c8:6a:2e:f6:
fa:ad:78:79:6f:31:09:76:df:5f:c7:ce:a9:04:a5:
48:36:30:36:05:cf:da:4d:be:14:dd:f5:57:be:d3:
58:af:e1:0b:06:04:43:ed:90:3a:3d:53:87:94:2f:
e4:b7:b0:78:17:57:df:89:8f:72:48:5d:2a:1c:d9:
69:08:76:2a:20:a1:23:4f:69:5f:fc:b0:3f:5a:1b:
c9:db:94:b5:f9:49:f5:9a:6b:8a:a7:ae:f4:9e:cc:
f1:d7:15:f5:4c:60:97:eb:09:b9:28:2c:6f:af:13:
a2:4f:95:07:45:14:e3:fc:a6:f9:1a:a8:30:f9:56:
d2:44:31:f2:dd:2b:5e:d0:5f:79:55:d3:39:b8:a9:
55:b2:fb:b6:bd:5d:c3:88:ed:83:f6:39:36:18:6a:
42:10:54:e2:81:89:2c:d1:bb:94:6c:18:62:63:80:
24:e9:22:02:0b:1d:c8:b0:46:79:2c:d0:5e:09:6c:
3b:95:86:69:11:0f:33:4c:e4:0b:01:4f:71:63:0f:
ce:fb:5f:05:dd:6e:20:1c:7b:89:8d:b8:43:55:4f:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:FD:1C:87:5E:01:A3:A3:00:D9:7E:30:0C:8C:FF:F4:30:30:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C384418CC1911EFBC2CE56B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
13:f6:81:da:ef:12:62:d8:ce:d9:3a:a4:ad:d8:56:7f:33:19:
17:eb:4c:d3:14:f7:54:0b:a7:cb:50:30:48:3c:60:45:47:f5:
c9:50:51:68:3b:56:20:f2:dd:94:5c:cd:c3:ae:d6:b3:c1:41:
a9:a3:48:aa:5b:8c:33:5f:4b:0e:39:1d:20:55:72:59:4b:10:
48:10:80:40:2c:bb:ac:68:80:a7:be:52:a9:4f:09:ed:87:e8:
13:1a:78:4b:53:0c:f4:52:76:6a:e0:80:40:ea:41:4b:82:2c:
15:63:59:27:bf:ab:39:29:85:b5:b0:17:40:22:9e:c0:2e:2f:
77:f6:3a:52:fd:2e:28:8d:2c:fc:ba:8c:28:e4:5e:fe:16:23:
1b:96:ce:6e:82:98:28:e5:24:44:c8:c7:94:c1:58:32:7f:89:
de:81:dc:0e:f2:24:f3:b6:77:57:d0:d5:3f:93:7e:ce:9d:c0:
f0:af:da:75:35:9e:0e:3d:f5:cf:32:1b:1c:88:67:a8:d0:67:
26:50:96:51:68:28:ca:bd:fb:91:fb:21:c1:99:da:ed:5a:32:
8d:7a:90:ea:ed:0b:9d:93:06:ad:58:0b:99:34:4d:18:33:8b:
52:91:e1:79:d8:f3:20:03:34:f8:96:7c:f5:e6:f2:f9:d5:38:
05:ad:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:18 2025 by rpki-client