Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EC967B0C10111EF81F5F069762E951A.roa
File: 2EC967B0C10111EF81F5F069762E951A.roa (raw, json)
Hash identifier: 31GhKJhCKZPrYwaDEGYhQPIY1iq+V9rrG7FT54VZnpg=
Subject key identifier: 52:C1:2E:48:A7:84:F4:85:1F:FF:99:E0:F9:17:02:D1:04:AD:2F:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E81A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EC967B0C10111EF81F5F069762E951A.roa
Signing time: Mon 23 Dec 2024 07:40:30 +0000
ROA not before: Mon 23 Dec 2024 07:40:26 +0000
ROA not after: Sat 01 Feb 2025 07:40:26 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59418 (0xe81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 07:40:26 2024 GMT
Not After : Feb 1 07:40:26 2025 GMT
Subject: CN=676913ed-957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8a:00:f8:97:4f:53:73:bf:5b:78:01:b7:a7:
45:e5:e0:17:77:a2:fd:2a:63:cf:2b:91:4d:66:16:
19:86:5b:cc:f5:4f:c1:67:12:88:65:43:1c:4e:f6:
63:44:d0:7a:86:07:5e:68:6d:47:87:fb:54:09:75:
51:fa:cd:b7:58:3b:2b:08:47:f0:e1:89:34:19:b9:
8f:bf:44:10:3b:60:99:ff:33:17:0c:8d:03:47:96:
9c:ef:91:a7:63:a2:b4:05:c5:80:12:2f:99:b2:03:
50:fb:bb:f9:dd:2e:be:c1:d7:16:09:09:b5:b3:c8:
8a:cf:95:8d:87:42:e3:ec:24:44:61:ed:90:c4:65:
5a:89:22:8f:11:97:66:48:40:ee:f0:54:d9:41:5b:
4e:e7:c1:af:25:f1:60:3d:10:a0:4c:d9:ff:ee:8f:
71:44:7a:6f:f9:6e:e9:22:a6:6c:c0:65:bd:72:89:
ea:87:bb:6a:ee:c3:eb:32:27:23:21:94:05:51:05:
c5:26:df:48:45:43:b5:66:cc:cf:09:76:b6:44:e2:
07:c3:d0:b1:71:08:22:5a:5c:ea:84:68:cd:24:94:
8a:c2:da:e9:3e:9e:04:70:51:32:3c:49:73:b1:b9:
79:64:0b:b3:b1:55:44:ab:fe:5d:76:61:69:c7:f4:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:2E:48:A7:84:F4:85:1F:FF:99:E0:F9:17:02:D1:04:AD:2F:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EC967B0C10111EF81F5F069762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
11:79:ba:8a:e1:2e:84:f0:33:85:d3:d6:f2:60:6e:a5:ff:5d:
62:16:f9:fe:47:0d:0d:de:d5:b4:a7:37:b9:15:e1:0e:2a:9c:
bb:75:0b:8e:18:27:27:40:a9:0a:f8:df:22:c7:8d:8d:1f:83:
87:e8:2e:43:ff:63:22:ff:78:45:e5:84:6b:cc:11:33:30:b8:
b0:f6:2b:56:3b:8a:15:79:fc:be:86:1e:ea:83:b0:b1:f0:6c:
c4:23:a4:b1:8f:0c:22:45:a5:3d:20:fd:84:ee:d4:c2:a3:17:
05:3a:18:f3:f1:c5:81:60:09:80:8b:7b:ec:ea:2d:36:08:b9:
cc:d8:56:40:d3:1d:7c:e2:23:bd:ef:04:08:09:92:15:25:0d:
42:b5:b1:7a:bf:7d:8e:b5:a4:9c:af:5f:1c:70:77:1d:8c:6c:
9b:39:8e:69:76:66:e2:f0:ed:47:9d:95:c3:e3:ee:d7:2a:3b:
e3:e4:76:a2:a0:cd:99:27:04:bf:39:b9:26:b9:fd:75:62:ef:
a5:36:0c:1f:88:42:79:f7:d4:b2:39:cb:67:25:39:2b:19:39:
8e:a6:c7:9f:91:76:e3:85:9a:ba:a6:4b:ea:5d:05:0c:33:a5:
67:f2:e0:17:74:c9:9c:a5:27:a6:81:7f:3f:73:fa:62:0f:1f:
8f:11:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:35 2025 by rpki-client