Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2305F156CACE11EF966E2AB3762E951A.roa
File: 2305F156CACE11EF966E2AB3762E951A.roa (raw, json)
Hash identifier: v0rBfXH+LgVJaT5g2HAPvk69osDhkQVa4P5HPdZM9e8=
Subject key identifier: 42:97:DA:D2:27:A4:75:51:3B:CF:76:89:AD:BA:53:3A:4B:03:3E:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F768
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2305F156CACE11EF966E2AB3762E951A.roa
Signing time: Sat 04 Jan 2025 19:00:17 +0000
ROA not before: Sun 05 Jan 2025 19:00:13 +0000
ROA not after: Sat 18 Jan 2025 19:00:13 +0000
asID: 142286
IP address blocks: 156.225.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63336 (0xf768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:00:13 2025 GMT
Not After : Jan 18 19:00:13 2025 GMT
Subject: CN=67798541-43b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:3e:71:1b:4e:9e:68:0c:30:45:08:95:91:
2b:57:a3:ba:1f:98:fc:58:ef:68:dd:d1:45:4e:67:
30:2d:12:31:34:08:10:5d:f4:2e:37:2f:d5:6d:bb:
b6:fd:d3:42:c3:cc:67:9d:8d:98:ce:07:b9:02:68:
b8:b9:e8:09:c1:09:c5:f9:4c:89:6a:ec:10:b7:2a:
6c:65:cd:d0:b3:12:c0:2f:e2:32:79:79:d5:e4:a3:
d9:57:1a:f8:50:d4:3e:63:25:d2:cc:c8:ba:37:91:
31:28:50:cc:84:2f:f6:4d:4c:a0:40:67:dc:be:e4:
82:26:ba:1d:cc:7f:00:02:74:c9:9a:02:74:a4:d7:
ba:ac:c7:55:d7:ac:70:05:80:e6:f9:42:b6:f3:04:
b0:d0:87:c6:44:d7:ab:23:4f:5e:5d:03:fa:2c:3c:
20:0c:74:c7:05:4c:8d:94:22:42:60:7f:03:34:1a:
5e:d2:e8:41:aa:14:3b:2a:63:55:ad:78:0e:6b:7a:
51:ae:32:0f:8c:d8:8c:76:29:db:8c:d4:99:42:d3:
df:42:cf:89:22:9f:6a:f0:4a:81:dd:5b:4a:e3:96:
95:54:1e:50:9d:e0:fd:87:c2:6b:34:88:31:c7:bf:
dc:ed:22:21:f0:c8:43:f3:21:15:eb:40:08:de:fc:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:DA:D2:27:A4:75:51:3B:CF:76:89:AD:BA:53:3A:4B:03:3E:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2305F156CACE11EF966E2AB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:3b:5c:d2:43:83:a1:30:67:b9:ad:a6:92:36:ec:39:c0:67:
6a:9c:ef:f4:ff:cd:e0:5d:68:1a:4b:36:4c:c3:ee:2b:38:2f:
63:1a:a5:01:c4:b9:0a:7c:92:4b:24:1e:31:94:96:5d:eb:39:
c6:4f:66:a9:8a:9f:05:3c:38:67:6c:44:ad:6c:87:21:3a:0c:
0b:22:50:5c:78:0f:34:59:c5:9b:d7:07:08:5c:57:a2:f1:4b:
ea:15:66:62:c1:c7:4e:e1:e3:e8:e7:18:ee:01:13:e8:b7:22:
9f:da:bd:5a:f8:51:ec:38:24:db:15:e1:ab:2e:71:ac:88:11:
e8:4c:8a:ca:a6:32:ff:95:26:4b:85:60:9f:c1:e2:42:68:64:
9b:b7:34:84:89:8a:d6:c7:46:65:48:2a:eb:fb:0b:56:73:ef:
7e:c1:06:bd:a3:d8:8b:af:db:2e:54:b2:83:8a:1d:f1:74:9b:
c9:cd:71:bc:71:81:39:14:a3:8d:70:c0:44:42:cf:b8:ff:1e:
93:cc:8d:58:a6:1c:91:86:39:65:5a:1d:a8:d1:6f:df:19:d9:
c1:83:9e:62:c9:2d:c0:85:fa:34:d6:89:60:6a:dc:9a:3d:9b:
a9:87:5b:bd:93:4d:7f:2b:fe:87:58:ba:56:ca:81:d3:33:f5:
07:90:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:03 2025 by rpki-client