Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F991438CE5811EFB3D99A4A762E951A.roa
File: 2F991438CE5811EFB3D99A4A762E951A.roa (raw, json)
Hash identifier: 4MBzwSHJz4+XRiMmWmrr2HckM4Tm0idzvVKn6+wo9RU=
Subject key identifier: DB:59:C2:51:1B:61:EE:64:3E:50:39:4A:7A:A6:F6:42:D1:8D:0C:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F991438CE5811EFB3D99A4A762E951A.roa
Signing time: Thu 09 Jan 2025 07:06:02 +0000
ROA not before: Thu 09 Jan 2025 07:05:59 +0000
ROA not after: Wed 22 Jan 2025 07:05:59 +0000
asID: 5065
IP address blocks: 156.238.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66288 (0x102f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:05:59 2025 GMT
Not After : Jan 22 07:05:59 2025 GMT
Subject: CN=677f755a-4e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:d3:35:c9:ec:5d:1d:cc:5b:2a:12:11:0d:
4d:67:58:f1:e6:04:8f:7f:f8:fe:dd:80:32:86:0d:
ba:19:f6:b6:c7:30:83:24:a4:39:bb:3c:db:a5:41:
d1:c5:e6:fc:a7:74:84:f2:f9:ed:ea:c7:31:c0:ba:
8b:37:00:0b:e3:0f:45:4f:79:45:0e:f2:50:4f:40:
03:97:0a:48:f7:fd:7a:59:32:66:66:64:42:90:32:
bd:a9:29:02:f5:a0:91:9b:28:a1:8c:3f:96:90:74:
13:fd:11:b7:5b:a1:78:8a:88:8a:7d:fb:f0:8d:31:
33:1b:c2:ea:d8:c0:92:78:a9:ac:de:dd:9a:2d:84:
2d:73:d5:31:d9:24:08:65:d4:f7:4f:e8:2a:14:c3:
39:6f:fc:ab:a6:4b:d0:b3:68:4c:8e:58:ad:e0:af:
04:c1:ce:a7:d1:1f:1e:95:0c:82:68:db:c9:85:5f:
2c:6f:87:bf:39:45:a7:c1:53:b8:77:9e:3c:2b:07:
b1:78:f4:42:ab:74:e9:25:65:07:d9:4f:5f:fd:84:
88:11:aa:79:30:9e:01:7c:c1:a4:4c:30:12:f7:4f:
e1:26:73:f0:28:d7:52:f7:f8:25:c6:bd:fb:c0:63:
10:a9:0e:5a:5e:3f:1c:81:e5:f5:4e:7e:ca:5f:1f:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:59:C2:51:1B:61:EE:64:3E:50:39:4A:7A:A6:F6:42:D1:8D:0C:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F991438CE5811EFB3D99A4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.0.0/24
Signature Algorithm: sha256WithRSAEncryption
82:af:3e:9e:d5:19:c3:cf:07:b4:1c:ed:c6:75:34:4f:b7:cc:
54:2e:2c:fa:b8:a4:5c:fb:45:72:1b:30:fd:7a:34:cf:c9:85:
5f:10:32:b2:5a:5a:85:f4:3b:5a:af:c0:c7:91:ac:b9:cf:1f:
4c:4a:68:b2:56:ad:48:9b:40:3d:9a:67:44:cf:62:8b:da:39:
9f:f9:c4:bc:70:4c:8f:47:2a:17:05:dc:40:1a:eb:80:5e:1a:
c8:8d:d3:7b:80:47:f5:a0:64:7f:24:b3:fd:28:8c:2c:87:82:
14:dc:71:06:2f:85:24:99:a6:44:9b:29:70:9c:89:ac:78:43:
59:bf:5f:92:ba:22:c5:df:3f:40:1a:31:8a:29:62:f3:b5:7a:
39:fa:3a:26:72:01:86:81:1c:3e:f2:0e:97:6a:94:36:53:e2:
16:a2:00:c8:27:07:b8:06:9d:63:3f:75:08:46:c9:fd:03:c6:
97:9a:1c:7a:c8:7d:fb:9c:13:23:d9:3e:eb:cc:4a:4a:f1:61:
82:55:87:e3:e7:c3:1f:5d:0f:ba:5f:67:12:af:ed:fc:0f:0e:
05:d0:97:8f:46:86:6d:68:af:26:6c:80:0a:18:c6:35:61:66:
43:ac:bb:12:39:e6:f5:a5:77:60:af:38:f7:2c:c7:2e:f5:b8:
ce:2e:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:25 2025 by rpki-client