Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6F8AE6B21811EF8DCDCA9D762E951A.roa
File: 2C6F8AE6B21811EF8DCDCA9D762E951A.roa (raw, json)
Hash identifier: 3Fdkf0upZsKM21+Stq3dAPzzsoafaaZtJdl2WiZzbns=
Subject key identifier: 60:52:5F:C0:5C:66:B8:66:B8:3C:76:B0:3D:0D:89:BA:D2:47:DD:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6F8AE6B21811EF8DCDCA9D762E951A.roa
Signing time: Wed 04 Dec 2024 08:17:17 +0000
ROA not before: Wed 04 Dec 2024 08:17:12 +0000
ROA not after: Thu 23 Jan 2025 08:17:12 +0000
asID: 63139
IP address blocks: 156.225.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57188 (0xdf64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:17:12 2024 GMT
Not After : Jan 23 08:17:12 2025 GMT
Subject: CN=6750100d-ef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:d6:97:07:ac:51:60:f3:65:37:fd:c4:68:
15:93:03:37:8c:54:63:4c:55:f2:91:f8:bd:71:0c:
13:f5:68:4c:a1:03:5b:e6:96:13:05:71:02:bf:88:
51:01:65:d3:14:ef:7f:fd:3a:08:1c:9a:97:88:f0:
2e:d1:2d:bb:93:8f:32:a4:42:db:62:3f:6b:cb:3e:
82:c5:61:4d:97:da:36:1d:8e:bc:b8:77:a8:a5:f3:
86:75:a3:c0:0b:69:d7:d1:7c:58:0a:9e:01:89:4b:
54:2e:2f:64:64:2c:3d:8f:0e:29:87:41:42:33:a8:
b3:4f:a2:c3:22:99:f9:b7:79:2a:3c:d9:d4:06:24:
48:c9:5c:c5:d9:3e:17:81:c8:93:6d:cd:5f:34:f6:
67:6e:1b:37:ac:96:cc:d7:26:95:42:15:db:3f:22:
94:b8:cd:43:40:af:59:95:cc:35:bf:56:97:1e:96:
b1:08:50:1f:d4:42:cd:67:f4:71:c1:f5:5b:5e:80:
c8:63:ab:88:d8:2f:82:25:3a:62:29:48:24:a5:fa:
d1:e1:d2:d0:bb:83:5a:46:3a:72:84:71:32:b1:c5:
e1:9e:7b:98:e1:43:7c:fd:f9:f0:05:1c:e6:a8:7c:
75:46:39:34:d7:84:74:af:6b:56:db:1f:e8:33:e2:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:5F:C0:5C:66:B8:66:B8:3C:76:B0:3D:0D:89:BA:D2:47:DD:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6F8AE6B21811EF8DCDCA9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0/20
Signature Algorithm: sha256WithRSAEncryption
77:76:52:3a:12:50:76:a5:29:1a:10:28:4c:0e:27:f0:32:5a:
7b:f5:dd:63:9a:6a:cb:72:43:09:e7:aa:87:01:1b:78:c9:a0:
84:9b:77:11:65:c7:0d:bf:ec:b7:52:9a:a4:e6:00:46:8c:2d:
c1:d0:21:53:87:d7:8a:31:6a:7e:4b:34:30:60:93:e2:e0:2d:
12:65:e7:36:a4:cf:77:ec:04:6b:18:3b:b3:1a:fc:fc:61:5f:
99:57:fd:ff:96:7f:4c:7f:7b:77:ad:7d:a5:db:4b:b8:b5:79:
47:14:5b:a4:dd:1a:8e:72:48:b4:97:4c:dd:d5:24:16:c5:e2:
e6:95:1d:bf:ae:ac:3e:e7:31:97:49:00:87:4d:19:f7:f5:b0:
79:52:94:82:44:09:ba:cb:67:06:cd:3e:9f:70:26:d1:54:b6:
ec:70:b9:97:14:99:cb:ad:bc:be:a0:e2:1e:bd:c3:2e:9a:60:
17:f4:4d:06:9c:f6:53:8e:7b:58:e5:9d:89:92:99:0e:cb:46:
71:05:3c:6c:b1:c0:70:d4:ec:9e:5d:ff:09:7d:53:07:f6:ce:
b0:9a:88:74:45:46:a5:ff:89:6f:99:87:33:06:c7:49:f1:ef:
a3:e3:ba:d5:dd:04:c2:00:34:08:51:c6:9f:08:a9:a2:ce:6b:
b3:ab:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:25 2025 by rpki-client