Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2922C4AACCDC11EF886D1549762E951A.roa
File: 2922C4AACCDC11EF886D1549762E951A.roa (raw, json)
Hash identifier: LQkIQc8FwNdbCNTsIM4r6+MVz3ZjPS7vkyCq2JiK6Ak=
Subject key identifier: 13:D8:F0:2A:0A:B3:43:7F:12:3A:3A:88:9D:37:50:66:8B:EB:63:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2922C4AACCDC11EF886D1549762E951A.roa
Signing time: Tue 07 Jan 2025 09:45:43 +0000
ROA not before: Tue 07 Jan 2025 09:45:39 +0000
ROA not after: Sat 18 Jan 2025 09:45:39 +0000
asID: 62468
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64363 (0xfb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:45:39 2025 GMT
Not After : Jan 18 09:45:39 2025 GMT
Subject: CN=677cf7c7-a9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d7:1c:1a:fb:4e:48:e1:a4:15:24:8c:d4:3b:
36:a2:a3:b8:c1:ff:d5:30:f3:33:80:85:96:05:83:
76:0e:11:18:90:d0:99:9c:3d:9b:66:64:ee:fa:84:
4d:18:cc:3b:92:ea:c5:b2:49:75:09:83:f7:2b:eb:
0a:4c:92:61:80:3d:22:2f:2b:18:6a:fb:18:5b:cd:
4c:1b:b1:47:96:fd:42:66:c6:73:47:ce:a2:c8:7c:
a0:5c:2b:df:1b:89:30:9c:99:5b:3e:0d:24:ff:95:
26:98:71:d9:2d:06:18:0c:68:9e:55:b9:bd:5c:ea:
a1:e0:ad:f6:7e:cd:c1:12:b2:8b:ca:31:44:16:9b:
7a:9e:32:00:14:4e:6e:b1:32:b9:02:8e:41:11:01:
70:7c:33:04:79:33:2f:8e:5a:a9:d3:e7:31:57:0c:
e6:16:64:46:8c:92:c5:f9:73:d0:24:1c:23:67:1f:
49:cc:6c:a6:62:54:26:0b:7e:78:9e:e9:a7:81:8f:
00:2d:a7:f3:9a:34:03:b0:fe:2b:0e:97:e3:c1:cb:
23:b6:2e:4b:35:8b:c1:a8:26:50:32:cf:f4:97:6c:
0c:af:3d:ea:e7:d6:16:db:44:1a:96:d1:35:3a:ad:
b0:5a:e5:6e:2b:82:f9:aa:45:8b:fe:1c:d7:1d:cd:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:F0:2A:0A:B3:43:7F:12:3A:3A:88:9D:37:50:66:8B:EB:63:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2922C4AACCDC11EF886D1549762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:2a:42:bb:38:20:83:6b:a1:dd:07:ad:9b:89:4f:a9:70:79:
64:04:df:c8:c1:4a:17:91:3f:da:e9:8a:e0:e9:1b:70:42:42:
58:46:dc:79:43:33:38:07:2c:45:92:63:55:a0:a3:40:67:9d:
59:11:6d:5f:07:bc:64:dc:0d:0e:e5:23:d4:37:09:2d:69:ab:
ae:c0:e1:e4:19:f1:48:2a:02:0d:3e:4b:7e:7c:45:04:a7:ba:
05:7d:48:e0:f2:54:53:39:ec:63:8d:8e:83:45:f8:87:97:fe:
66:9c:fa:f4:78:e6:98:b7:85:93:de:d6:ac:26:db:9c:f9:35:
f9:e3:75:e5:57:ae:cf:28:8a:28:a0:0b:20:af:48:16:42:bc:
2b:58:8e:95:40:1f:a8:ee:e2:18:52:24:e7:7e:4c:a7:29:aa:
e3:53:ba:d6:b4:80:8e:bc:e1:7a:51:62:d8:72:f2:a5:3d:ae:
0d:b3:0b:2b:f2:40:21:45:a8:8c:4c:38:a8:4a:d4:3d:4d:38:
6c:46:ec:db:a9:36:a0:16:3b:ac:b5:f9:66:dd:0c:b4:79:22:
c3:39:14:71:68:52:23:6e:46:e3:cd:1d:35:59:f9:5e:f2:d3:
80:24:66:48:7e:9d:5e:48:c1:78:63:b7:d1:ec:c7:a7:a1:ca:
68:a3:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:40 2025 by rpki-client