Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238DEC4EBD1011EF9F0A6F9A762E951A.roa
File: 238DEC4EBD1011EF9F0A6F9A762E951A.roa (raw, json)
Hash identifier: aESWq7Xa+BoI3DmsXE4gysGkFgugBWM/RurcgZ08UZY=
Subject key identifier: 05:A5:B0:7E:82:C5:FB:F8:0D:99:2D:32:E4:A6:9F:7D:4B:0E:72:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E478
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238DEC4EBD1011EF9F0A6F9A762E951A.roa
Signing time: Wed 18 Dec 2024 07:17:29 +0000
ROA not before: Wed 18 Dec 2024 07:17:25 +0000
ROA not after: Thu 23 Jan 2025 07:17:25 +0000
asID: 203020
IP address blocks: 156.243.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58488 (0xe478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:17:25 2024 GMT
Not After : Jan 23 07:17:25 2025 GMT
Subject: CN=67627708-ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:68:a4:7a:07:02:93:36:a1:53:a7:38:51:
33:e1:30:2b:77:87:8f:24:68:33:6e:85:fc:e1:d4:
97:c0:80:bf:e6:69:db:f5:3d:ae:f4:4f:92:b4:32:
92:ff:f8:f2:22:39:42:43:21:a1:fe:a5:ff:6c:69:
ab:6e:99:55:ad:13:c0:f2:26:d5:f5:0d:33:d7:0a:
17:e3:82:32:81:60:a8:b2:ce:30:00:1f:35:28:20:
b4:ab:b3:be:48:22:d1:92:72:c6:83:db:cf:32:9e:
0e:eb:7c:ab:d1:db:d2:92:bb:86:d7:bc:ce:eb:d7:
9b:59:e8:1e:84:ec:fd:2e:9e:fc:6b:13:35:15:fd:
3c:ef:5d:9c:ca:ba:16:1c:4f:c4:3d:80:9e:f9:a3:
3c:6d:1c:a7:bf:14:23:da:69:82:b1:45:62:1f:cc:
d8:90:e2:ab:7b:b1:88:79:d5:57:91:17:2f:b0:f3:
0f:0d:be:01:9b:4f:22:d3:82:6b:c5:6b:02:08:c5:
9a:e6:6f:ae:27:63:12:9f:6a:34:b4:d2:24:77:61:
e0:85:88:3b:87:1f:ce:54:69:eb:32:6d:24:45:35:
1b:f6:3d:d3:c0:fc:84:91:a2:c8:af:0b:e0:7f:56:
0c:55:b7:bf:f1:e6:0c:6b:2a:16:a7:3c:11:c3:2d:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:B0:7E:82:C5:FB:F8:0D:99:2D:32:E4:A6:9F:7D:4B:0E:72:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238DEC4EBD1011EF9F0A6F9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:16:52:9b:91:fb:df:da:4c:7c:51:12:65:48:db:7b:0d:aa:
8d:7e:b8:1b:bc:69:ae:40:45:fb:12:e0:4c:03:8f:42:03:86:
99:7c:2e:8e:1f:31:3b:f8:38:34:91:02:bd:36:4e:de:fc:7c:
01:c1:21:98:69:f8:c3:3c:5c:bf:e7:22:46:0b:65:83:b4:9d:
2d:c4:b5:9d:ea:c2:02:f7:a9:37:6e:01:c0:52:82:d0:e9:48:
a0:84:29:a5:49:22:5c:ac:43:1e:76:09:1d:dc:b7:69:b9:1f:
70:79:8c:fb:9a:53:5f:f9:db:26:d3:7f:f7:98:fa:e3:cf:07:
78:c3:47:90:3c:70:76:ff:20:f0:88:3a:1b:b7:d1:74:0d:b6:
80:47:8d:7c:c2:7d:4e:36:7d:c0:66:41:c8:72:6d:ac:dc:55:
75:54:26:d5:0a:2c:6a:b3:ac:b5:93:6a:8b:f3:f2:ef:5e:f1:
3f:65:8c:48:a1:8a:d8:9c:36:64:06:46:8c:64:7e:bc:e0:37:
de:eb:79:46:bb:27:2d:bf:8a:b2:3e:05:c5:b0:97:1a:c4:ed:
3a:c1:7b:07:16:f5:07:7c:18:2a:6f:17:64:d6:ec:05:f9:9b:
8b:19:51:5a:99:32:ba:d5:7e:6e:ec:96:07:fe:bc:d2:a2:e5:
67:88:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:47 2025 by rpki-client