Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3399104EC47911EFA5695578762E951A.roa
File: 3399104EC47911EFA5695578762E951A.roa (raw, json)
Hash identifier: A7sPfiydShIabR7zjxXcJoSKN3J1JdV6YNzPbC3UVRM=
Subject key identifier: EB:2C:E9:AD:8D:5D:3F:C8:8C:D8:DC:26:46:65:C2:3B:C6:9C:7F:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3399104EC47911EFA5695578762E951A.roa
Signing time: Fri 27 Dec 2024 17:37:11 +0000
ROA not before: Fri 27 Dec 2024 17:37:07 +0000
ROA not after: Mon 20 Jan 2025 17:37:07 +0000
asID: 214481
IP address blocks: 156.253.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61686 (0xf0f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 17:37:07 2024 GMT
Not After : Jan 20 17:37:07 2025 GMT
Subject: CN=676ee5c7-4af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:60:fd:07:a2:45:bc:95:2b:cc:3c:99:9f:
1e:92:d6:43:3e:5b:2d:6f:34:bb:7d:c4:08:0d:b6:
eb:85:53:0a:06:54:f8:81:1d:ba:c7:22:2c:aa:c8:
2b:0c:ac:7f:b1:3e:b6:a9:c2:e3:d3:42:57:32:18:
e4:c6:34:ce:a3:db:89:60:54:94:76:15:96:8f:aa:
73:b9:26:8b:97:58:e4:c6:61:2e:15:ee:c0:eb:9f:
5c:c8:14:63:3f:51:46:c8:81:95:81:08:9c:14:d9:
4e:00:ef:ca:89:cf:46:22:05:86:12:71:44:11:a7:
75:d8:13:bb:d7:67:99:f9:9f:40:7b:6b:b0:96:fc:
49:13:22:c8:ed:1f:5e:b1:14:29:83:d4:f8:74:24:
05:1c:f6:f4:ac:71:67:b8:5b:76:cd:04:c7:84:7c:
04:bb:94:94:ce:96:5e:58:05:34:dd:f7:a1:e1:51:
6e:b5:f7:ca:be:3c:ef:e4:07:1a:42:1f:41:0d:c9:
80:88:f4:28:bb:e6:37:5c:5a:c7:b0:ec:87:a7:53:
75:32:6f:9e:47:79:07:5e:01:99:7d:89:3e:20:67:
f2:51:79:4a:05:be:e0:cd:06:97:6d:a3:25:dd:85:
c1:9c:c7:f9:d0:8a:07:7e:68:9b:64:09:3f:06:a1:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2C:E9:AD:8D:5D:3F:C8:8C:D8:DC:26:46:65:C2:3B:C6:9C:7F:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3399104EC47911EFA5695578762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.221.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:22:97:22:10:e1:ed:ee:6d:00:51:86:82:74:34:e3:2c:cb:
74:c1:78:ec:ba:4d:79:1f:a4:e9:c6:80:c0:a2:6d:7e:dc:20:
0f:94:29:b6:2f:90:0d:96:a2:7d:3a:ce:28:10:fb:37:85:53:
35:a8:18:74:10:b7:a9:8c:f7:5b:4b:34:9b:f9:ec:65:2c:63:
28:7b:74:58:43:9f:d8:88:d8:df:d8:d0:c1:39:fd:0f:c3:c9:
07:48:59:f4:4c:4d:66:65:78:08:c7:bf:8a:1c:d0:99:a4:80:
de:96:2b:aa:ba:69:d7:e9:4d:af:c5:01:51:00:91:86:d4:1f:
3c:84:7a:d5:84:32:eb:ba:21:46:2d:75:a9:80:6e:ce:59:50:
8d:30:dd:f6:34:df:73:18:e7:d4:cb:a6:46:5a:f3:b7:2f:6d:
3d:51:b7:f7:d4:91:e0:d9:c2:5c:e2:d3:26:1f:a0:c8:df:ec:
df:f3:3f:f9:91:ec:06:1a:5c:60:1f:dc:a3:b0:9b:4e:c3:99:
14:bd:5d:8a:fc:31:99:fc:f0:76:cd:bf:32:3d:46:37:65:e5:
46:bf:3c:92:1e:e2:bf:93:ef:da:92:1f:22:64:d0:b7:34:f2:
32:dd:8c:9b:5d:6d:5d:83:f2:3a:9c:aa:1e:f2:f5:7d:eb:91:
5d:d0:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:14 2025 by rpki-client