Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3285F942CE5611EF991EF0BB762E951A.roa
File: 3285F942CE5611EF991EF0BB762E951A.roa (raw, json)
Hash identifier: OR64uhf6tcR9LkqSc3xJcmUHhUyhWVOtSuP412eT0eY=
Subject key identifier: 67:61:DA:ED:CF:87:DB:8C:AF:DD:AE:CD:C8:3E:59:58:8F:68:17:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3285F942CE5611EF991EF0BB762E951A.roa
Signing time: Thu 09 Jan 2025 06:51:48 +0000
ROA not before: Thu 09 Jan 2025 06:51:44 +0000
ROA not after: Tue 21 Jan 2025 06:51:44 +0000
asID: 211392
IP address blocks: 156.238.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66273 (0x102e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 06:51:44 2025 GMT
Not After : Jan 21 06:51:44 2025 GMT
Subject: CN=677f7204-8acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:01:c8:f2:d9:5d:39:d5:4e:19:75:84:e5:
6c:c8:4b:95:c1:f7:26:a1:0e:28:f7:46:ff:ee:3e:
72:ae:fc:1d:a0:9b:37:6f:f8:37:db:3f:f9:9d:13:
df:d7:5d:81:53:8b:dc:c7:18:da:ce:50:2f:73:24:
13:29:35:26:9b:96:38:ad:60:16:28:e3:65:3f:79:
e5:6a:33:75:74:0f:41:00:d3:d6:e0:59:f5:5a:30:
90:fa:35:7f:09:a8:c3:06:b4:a6:6a:3c:dd:ea:a8:
70:d9:9a:85:77:67:be:29:af:27:75:73:c9:66:62:
8c:01:c9:6c:30:8b:c9:dd:e0:b2:c3:a7:bb:79:3e:
33:c8:7d:c5:a7:28:c6:69:8a:d7:3f:77:fc:b6:f1:
93:f8:8f:a0:7d:ab:08:28:e2:41:5e:df:1b:32:70:
72:b2:08:71:b8:af:4d:30:20:39:50:e9:6b:31:cb:
b8:a9:8a:5a:02:4b:08:4f:ac:71:1a:c5:e8:70:90:
35:30:a1:aa:08:aa:9c:70:1c:de:f7:0b:2c:2d:d9:
65:c5:11:05:5a:e8:ab:69:9f:2d:49:9a:40:30:5f:
b6:9e:1a:4b:ac:ab:1e:e3:36:d3:5d:d2:12:73:9d:
65:08:ae:30:b7:41:24:15:e3:48:cb:5f:e0:50:49:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:61:DA:ED:CF:87:DB:8C:AF:DD:AE:CD:C8:3E:59:58:8F:68:17:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3285F942CE5611EF991EF0BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.14.0/23
Signature Algorithm: sha256WithRSAEncryption
15:ee:f5:30:52:01:3c:d5:02:df:ea:35:ad:d0:3e:7b:64:94:
8a:11:96:6b:92:47:d2:34:15:62:3f:af:be:b1:6e:47:11:45:
4d:b3:85:5a:ce:2a:b9:5e:37:22:3e:ad:4a:8b:52:68:96:2f:
88:ae:d0:5c:96:43:bc:08:7b:0a:6c:d4:59:29:c7:f6:c0:d4:
e7:68:ac:a9:79:a5:23:63:3e:af:f5:0b:29:8e:c0:53:d6:fc:
1c:92:0a:8d:8b:5f:80:90:a9:86:d0:ea:22:6d:87:b5:34:2a:
2f:f9:33:83:25:5c:43:3e:ab:48:a9:d5:fd:21:25:9c:11:19:
00:b5:b6:a2:06:68:99:66:30:df:6d:67:ce:14:f5:b4:bb:af:
01:72:8b:9b:e0:5a:9a:38:8e:21:23:13:84:fb:f7:f3:65:62:
ff:82:69:0e:49:b7:74:c6:55:98:4e:34:4d:c6:9f:ce:4d:8d:
6f:8a:55:66:d9:df:a5:8e:29:0c:9a:a7:05:07:82:e2:58:91:
46:48:59:12:57:08:7c:c7:7c:ea:4d:dd:e5:98:1f:f1:8a:ee:
be:3c:7c:b3:ff:b8:97:05:00:ac:59:62:ca:86:8a:41:7f:ac:
97:8e:e7:1d:e2:09:0c:7d:83:8c:70:a5:4c:33:b0:01:0d:7b:
ad:4e:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:18 2025 by rpki-client