Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/244BF1ACD00D11EF9D17BAA0762E951A.roa
File: 244BF1ACD00D11EF9D17BAA0762E951A.roa (raw, json)
Hash identifier: b5oZbI9dSfcsHi17xrFjTdTm9QdB3ct2GoasewYK+hc=
Subject key identifier: 9A:7B:10:3B:3C:7B:FA:49:2B:0D:DF:7C:D2:97:6E:5C:38:C7:7A:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/244BF1ACD00D11EF9D17BAA0762E951A.roa
Signing time: Sat 11 Jan 2025 11:13:54 +0000
ROA not before: Sat 11 Jan 2025 11:13:48 +0000
ROA not after: Sat 25 Jan 2025 11:13:48 +0000
asID: 141883
IP address blocks: 156.242.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67020 (0x105cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 11:13:48 2025 GMT
Not After : Jan 25 11:13:48 2025 GMT
Subject: CN=67825271-7944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:45:6d:ed:5d:fb:a0:be:1c:1e:7a:61:55:
7d:35:a4:fa:8f:5e:ec:f6:7a:03:ca:5f:4e:e7:06:
a8:40:57:78:0b:1b:dd:cd:61:22:13:2c:34:af:0d:
34:ab:02:6f:e2:b4:b2:16:5f:89:0e:28:3c:e9:e3:
cd:6f:1b:bd:fe:5d:f8:c2:89:27:92:d9:0e:2c:48:
3e:2b:75:d6:e1:26:d4:12:e1:9e:95:65:38:ae:63:
f8:b9:75:da:9b:54:2b:5b:70:8b:71:60:74:e3:88:
b4:19:4f:b0:5a:e4:94:c7:c3:47:60:7c:93:a4:58:
13:b0:6e:f8:bd:f3:25:5d:02:04:ef:93:99:e3:a3:
cc:1c:76:50:dd:e3:10:d1:a2:23:6d:93:60:04:2a:
3f:c4:1f:d3:10:7a:36:f5:a9:7c:e3:29:aa:43:10:
60:49:e7:b8:2b:7d:79:cf:1b:de:f7:50:7a:f8:f7:
c7:99:8b:48:45:4c:56:ff:be:68:02:42:83:fa:30:
e1:76:87:b9:72:ca:13:aa:df:0a:66:31:37:3a:69:
85:e1:6e:5f:0c:c9:c3:b4:8b:9c:ad:ce:d2:58:a1:
a4:57:75:ef:84:35:e3:78:29:ed:fe:ba:ea:fd:b3:
60:f0:3d:3d:e6:01:5c:0f:04:85:21:57:b5:12:33:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:10:3B:3C:7B:FA:49:2B:0D:DF:7C:D2:97:6E:5C:38:C7:7A:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/244BF1ACD00D11EF9D17BAA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
61:27:3a:e1:d5:b4:23:0e:3c:f5:6e:82:9b:c0:29:9d:b3:16:
a6:14:d0:df:91:63:91:f6:75:04:ce:09:6b:ab:d2:48:56:87:
40:d2:14:a0:7a:3a:fc:e4:80:d2:94:2d:e0:46:b9:9d:cf:c5:
3a:8a:c4:85:c6:9f:d0:d2:25:c9:f4:f4:26:fb:e3:22:94:43:
07:57:75:d9:2c:76:00:69:c1:4d:ed:ef:9a:34:f8:a1:8a:6c:
55:23:5b:09:ae:7b:c5:97:49:98:3d:a2:16:da:17:a4:55:9e:
4d:7e:13:9b:e8:8c:ff:8e:4c:1b:09:f8:70:57:12:66:f1:63:
63:f8:33:d7:fd:ba:b7:b9:d6:53:83:62:22:c0:e5:16:33:cc:
ab:f3:8b:3b:e8:9f:f1:1e:8f:98:b1:1d:7a:71:45:52:c8:3b:
b2:47:a3:8e:34:3b:62:98:07:eb:80:c6:af:b4:56:07:e1:c2:
9c:f6:2a:d6:1c:76:f9:ff:ab:e7:b8:30:7f:c7:e6:9e:1a:41:
c3:98:cc:59:7b:90:88:b3:3c:c4:a9:71:88:8d:f8:0d:83:fc:
b7:09:16:52:8f:11:09:24:1f:cf:a8:fa:5b:98:ad:b7:e0:f0:
97:77:89:27:03:82:ab:c4:22:15:9d:de:a6:17:3e:a8:14:14:
28:47:05:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:36 2025 by rpki-client