Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31742314CE7C11EFA3AFABAB762E951A.roa
File: 31742314CE7C11EFA3AFABAB762E951A.roa (raw, json)
Hash identifier: 1h6wZy8ygaPC9qdPRy+b+CY4VRzlGrgHYKY4lH4zN2c=
Subject key identifier: B6:94:A3:0A:6B:AA:D2:15:C0:0C:4D:35:BE:AD:55:BA:B5:2F:62:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01035D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31742314CE7C11EFA3AFABAB762E951A.roa
Signing time: Thu 09 Jan 2025 11:23:47 +0000
ROA not before: Thu 09 Jan 2025 11:23:44 +0000
ROA not after: Sat 01 Feb 2025 11:23:44 +0000
asID: 17561
IP address blocks: 156.236.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66397 (0x1035d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:23:44 2025 GMT
Not After : Feb 1 11:23:44 2025 GMT
Subject: CN=677fb1c3-5352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:34:cd:bf:d5:b1:77:d6:8d:ad:c6:87:c4:f5:
78:aa:12:8c:5b:2a:d0:45:81:cc:97:02:4a:7a:c4:
50:d0:82:eb:ac:b1:bd:3c:d9:0c:71:2d:c1:c2:e6:
c4:f4:78:05:af:c5:ff:5f:ea:09:c5:40:ec:61:6f:
1d:9f:2f:d6:a6:2c:37:d6:78:91:46:8a:dd:30:81:
ca:8c:1e:38:a7:7e:26:87:3c:5b:78:01:35:2a:4e:
a6:f9:7d:d0:c7:ce:2c:cd:8f:0c:2b:2c:05:4a:ae:
51:00:f2:f2:fc:5f:30:74:e6:98:30:ae:ec:4f:90:
c3:16:ae:5e:3e:72:61:a6:ad:a5:48:d8:b0:9e:b7:
61:e8:1a:5b:d4:62:ac:aa:89:46:48:40:f6:bc:9c:
26:b8:45:e6:93:8b:3d:01:15:4e:6b:d7:cc:37:e6:
4f:53:c4:19:b4:29:eb:2e:d2:f2:a6:7d:d2:59:4f:
97:2c:8a:5f:78:fb:16:f5:38:89:b2:f5:04:11:64:
9b:ff:5f:08:a0:da:e7:33:ab:fc:de:3f:5f:0c:54:
17:de:d6:99:cd:60:f1:bf:62:7d:ce:a5:a8:87:3c:
05:2c:30:e6:4b:77:9c:a5:74:d6:aa:51:34:8f:30:
f2:10:7c:75:69:46:88:7a:eb:ae:2a:af:b6:a4:ff:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:A3:0A:6B:AA:D2:15:C0:0C:4D:35:BE:AD:55:BA:B5:2F:62:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31742314CE7C11EFA3AFABAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.55.0/24
Signature Algorithm: sha256WithRSAEncryption
46:10:94:e1:43:5a:b2:8f:a7:0e:6a:5c:2d:6d:0a:f2:e6:e2:
dc:6e:0e:84:d4:de:90:f1:80:5f:e5:bd:8e:55:a6:69:26:2b:
a0:50:7b:22:d4:45:de:ad:a1:a5:fc:4a:dd:3a:ac:48:26:a8:
1d:96:ee:b3:0d:ee:a9:70:80:b7:37:f9:89:4e:81:ab:39:01:
cf:19:d4:62:fe:7e:d3:d7:66:dc:65:43:20:3f:3b:66:04:d9:
cd:b9:b1:fc:cc:d4:9c:93:96:ac:6f:b8:00:aa:50:5b:c0:ff:
3c:7c:2a:d3:8c:db:ae:8a:9b:f1:c1:96:cd:9e:9a:a3:32:02:
51:1f:95:81:6a:72:81:a2:4a:d0:49:b3:45:b6:05:6f:5e:db:
6f:38:a8:ce:e7:a0:c2:62:39:08:db:12:f7:3f:61:e2:3c:c6:
91:52:b7:e3:ae:46:18:40:66:9c:ca:0b:a9:3c:cb:ee:60:96:
46:98:aa:43:82:f1:0b:12:52:bd:d1:91:4b:c2:95:b0:28:fa:
3d:3e:e4:5c:e6:71:9f:0b:56:7d:c0:ca:53:95:f8:a2:69:cc:
ba:e9:31:23:b5:0c:62:04:5f:68:53:a2:2a:f2:71:35:e0:ef:
12:f3:cb:d2:1f:4a:c8:e5:fa:f9:66:91:c8:28:53:10:f3:d2:
d8:05:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:28 2025 by rpki-client