Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29BF2C76C47311EF9B4F9E53762E951A.roa
File: 29BF2C76C47311EF9B4F9E53762E951A.roa (raw, json)
Hash identifier: fXhymCZhCf1N5NuTwX6z25BWmpcP0OV305hrfEzABm4=
Subject key identifier: D9:4E:0B:E0:A1:DF:BA:42:34:B0:42:9B:DD:34:7F:68:E4:21:64:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29BF2C76C47311EF9B4F9E53762E951A.roa
Signing time: Fri 27 Dec 2024 16:53:57 +0000
ROA not before: Fri 27 Dec 2024 16:53:54 +0000
ROA not after: Sat 01 Feb 2025 16:53:54 +0000
asID: 203020
IP address blocks: 156.253.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61638 (0xf0c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 16:53:54 2024 GMT
Not After : Feb 1 16:53:54 2025 GMT
Subject: CN=676edba5-9cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:d1:bf:72:63:65:0c:75:29:25:99:7e:b2:
ca:20:c5:b9:be:82:28:5c:7f:6a:37:ab:78:8c:78:
7f:1c:6a:89:f7:ed:28:e8:14:b2:f0:ee:27:0f:18:
9a:d8:db:bb:fa:f0:da:a9:07:07:f1:5b:14:49:a7:
d3:ab:79:9d:cb:a0:20:db:1d:70:55:aa:71:dc:0d:
70:55:ef:86:fd:d5:d6:37:da:6a:06:a7:2b:13:78:
b2:1e:5f:a6:a4:8e:a1:f2:7b:ce:e0:ab:14:ae:1f:
fd:a2:d1:69:3d:0d:bf:bf:7d:56:16:0a:12:0b:37:
5a:9a:58:5b:04:43:09:72:47:c4:ba:18:6e:a5:77:
aa:8f:01:20:6e:5f:25:fa:66:3f:96:d1:b4:dc:c0:
80:91:1d:c8:d5:30:8c:3c:50:c2:e9:9b:81:2e:67:
16:11:31:70:c4:1b:64:07:c9:0a:a7:81:47:30:ee:
18:e1:a6:77:ad:85:1c:ac:f3:bc:45:98:12:6d:fe:
9f:4d:ae:d1:b2:27:43:db:1f:3e:50:c2:57:d6:5c:
aa:65:15:66:a0:08:12:19:c8:d3:c1:7b:70:4f:b8:
0d:60:c6:7f:b0:64:13:3e:0b:d5:22:3d:f2:52:d0:
96:86:5c:83:e5:8c:f4:bf:20:aa:ab:79:ea:e2:93:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:0B:E0:A1:DF:BA:42:34:B0:42:9B:DD:34:7F:68:E4:21:64:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29BF2C76C47311EF9B4F9E53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.192.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:55:e5:fa:f3:ef:09:c0:bf:ca:8d:62:6a:4f:c2:3c:64:46:
c4:c1:8a:7b:58:0b:16:04:cc:c4:64:f1:76:e8:71:52:a6:15:
8e:18:24:3e:68:a9:f2:57:00:ab:5d:48:2b:a1:b3:27:28:05:
6e:a0:77:36:df:42:5f:53:1d:46:79:75:7f:68:34:27:f0:fc:
0b:f9:05:e6:8c:7e:a5:07:8b:76:67:3e:6e:a2:f6:ab:58:1b:
5f:58:5c:73:4f:0c:c7:df:ae:0a:77:47:a6:03:99:00:df:04:
8e:9a:4e:54:f6:26:86:7f:1d:4d:af:c5:f1:14:10:82:82:2a:
46:9b:8f:13:4b:13:7f:cf:42:8a:26:1b:e3:59:a1:41:6e:a1:
0f:e4:1d:9b:87:22:e1:9c:00:b8:e1:6e:f0:d8:a0:d3:ee:f2:
1d:85:8e:78:94:41:ab:12:5e:ad:24:f1:83:7a:14:13:3e:4d:
f0:0d:06:3e:80:9b:02:5d:e5:a2:ed:89:39:f1:f4:8f:3e:4a:
97:53:60:4b:2b:38:3e:26:d1:75:da:34:b2:c0:00:b5:e5:77:
9f:31:eb:56:d7:c4:89:ce:bb:f0:6e:12:22:5a:19:84:aa:9a:
49:87:6a:54:4e:c8:63:e5:06:7e:0d:8e:66:07:af:2e:5d:9c:
71:81:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:58 2025 by rpki-client