Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/308F65ACCCD911EFA07AABB3762E951A.roa
File: 308F65ACCCD911EFA07AABB3762E951A.roa (raw, json)
Hash identifier: ZV6XyZ4LNSekcpL0xzm0iPsG+VgeHWWldEzoT+I40HU=
Subject key identifier: 35:72:5A:64:C6:2E:3A:3B:66:8F:E1:85:CD:73:E0:EE:B8:B1:E9:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/308F65ACCCD911EFA07AABB3762E951A.roa
Signing time: Tue 07 Jan 2025 09:24:27 +0000
ROA not before: Tue 07 Jan 2025 09:24:23 +0000
ROA not after: Sat 18 Jan 2025 09:24:23 +0000
asID: 152092
IP address blocks: 156.245.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64310 (0xfb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:24:23 2025 GMT
Not After : Jan 18 09:24:23 2025 GMT
Subject: CN=677cf2cb-5367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:ae:2d:12:55:d8:22:06:ba:29:6f:cd:50:
f7:a7:75:d9:fe:7b:e2:5e:a2:67:2c:86:e7:8d:4d:
4b:f4:76:d9:36:0d:23:44:14:11:bd:68:72:5a:f4:
63:45:04:15:56:a6:07:df:cc:b0:3f:48:4b:a9:bc:
44:a8:bb:ba:29:8d:80:d1:c1:ef:d1:84:f3:d6:06:
c8:1a:60:36:e5:bf:78:2b:01:6f:30:26:75:a9:a4:
43:78:e4:af:c4:bd:d1:8d:9e:36:90:c4:c7:16:2a:
5d:5f:1b:f5:5f:95:93:a3:02:57:6f:c3:8d:e4:45:
69:b6:57:57:5f:2c:04:83:e6:e2:65:d5:3f:b8:f6:
5f:79:cd:a4:e7:7c:f5:b8:fd:2b:99:09:eb:4a:cf:
53:cb:8a:de:77:73:56:99:13:45:62:26:35:f3:71:
1f:e9:b8:27:19:64:ab:d9:1a:e6:2f:69:82:9e:2a:
c1:fc:94:d6:55:0e:fa:cd:83:d5:b9:39:78:f1:95:
49:c9:cc:d7:ec:65:fc:20:a2:9c:36:be:25:73:1e:
2f:de:6f:22:10:b0:cd:d0:0e:8c:aa:cc:4f:64:38:
69:11:20:fd:7d:9d:65:6b:51:7f:6c:90:6a:41:b2:
98:6f:28:49:15:0f:45:96:de:00:10:87:61:ef:6b:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:5A:64:C6:2E:3A:3B:66:8F:E1:85:CD:73:E0:EE:B8:B1:E9:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/308F65ACCCD911EFA07AABB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:a0:94:c5:ef:16:ec:1a:4a:fc:3b:59:e8:28:27:8f:78:17:
28:8e:a3:9f:cf:08:0c:38:d9:80:a7:68:57:1a:e5:ee:3c:17:
32:df:53:c6:e3:6b:af:99:20:c7:06:21:90:e4:08:a3:67:b9:
b3:4c:75:92:c5:89:0f:5e:85:39:47:7e:3c:ff:96:87:7a:41:
9d:7a:e7:99:70:d6:ef:59:0a:b8:67:6f:01:46:53:2f:fc:77:
0a:4e:81:eb:ea:be:82:5d:85:5f:66:d1:b1:87:21:92:22:81:
fe:c4:a4:ff:75:45:89:7d:67:8e:ab:d9:f6:49:16:7c:35:1f:
53:f9:81:fc:0b:b7:28:ae:04:13:52:42:93:a2:c9:12:e3:b0:
6b:88:b4:8c:04:b4:fd:36:b2:44:36:f9:15:d8:62:ad:a1:cf:
fe:41:5b:63:af:14:00:cb:3d:47:e2:1e:2a:d3:f0:16:c4:37:
bc:af:07:4c:4f:44:8e:05:5e:2d:74:3c:7e:04:04:5f:b5:95:
42:dc:0e:79:c9:0e:b0:e8:22:de:ba:13:08:54:2d:ea:ba:2a:
28:40:ee:8a:9e:a8:19:7d:97:1b:69:9c:b6:1d:6e:f9:81:a1:
46:55:03:75:6f:85:1c:b4:a3:6c:97:99:40:84:af:b7:45:e5:
74:0e:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:41 2025 by rpki-client