Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33A26864BF9D11EF8961969F762E951A.roa
File: 33A26864BF9D11EF8961969F762E951A.roa (raw, json)
Hash identifier: mQ+KKVD+zyfuFKyN99bSUpHCoBtTeJFY1YirNm5eWGs=
Subject key identifier: C6:14:69:3E:63:05:8A:BF:F6:FD:57:B3:9F:1E:17:31:5C:4E:63:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33A26864BF9D11EF8961969F762E951A.roa
Signing time: Sat 21 Dec 2024 13:12:17 +0000
ROA not before: Sat 21 Dec 2024 13:12:13 +0000
ROA not after: Fri 31 Jan 2025 13:12:13 +0000
asID: 152700
IP address blocks: 156.228.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59320 (0xe7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:12:13 2024 GMT
Not After : Jan 31 13:12:13 2025 GMT
Subject: CN=6766beb1-6630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:d9:1d:94:bb:c9:14:08:ea:33:69:d2:28:
df:84:71:dd:96:7f:fa:e9:d9:c4:fd:68:ae:90:0e:
42:5a:45:01:52:b5:1d:10:8d:71:f8:48:3d:f4:b3:
00:28:22:0d:5b:ed:95:c2:e8:db:79:77:0f:95:ce:
1e:e4:8a:77:3f:82:3b:31:58:f9:89:b0:86:e4:32:
c1:6d:39:9b:5d:07:8c:7b:09:cc:b7:a4:c1:6a:19:
b0:8a:a4:33:9b:9c:a0:a4:6c:e0:32:85:37:84:7d:
5a:d6:88:e5:5c:4c:4f:dc:29:33:30:08:8a:98:7c:
e0:71:cd:80:35:87:83:52:2e:d9:48:a5:e8:bd:ce:
69:b0:6b:3b:14:72:5b:16:ff:9d:67:eb:41:af:23:
ac:11:d7:66:21:39:87:1c:73:4f:55:65:3a:2a:cd:
4c:bc:4e:f3:76:c1:8b:2a:9a:55:14:27:a8:7e:16:
32:a4:c3:31:05:e3:29:e1:f0:72:c4:aa:32:6d:9c:
9e:76:c3:a6:17:10:dd:f8:7c:da:93:1a:0e:48:c8:
d7:1f:26:bd:dd:79:45:db:a8:ec:53:2f:04:c7:0a:
9b:5a:9c:93:ca:f2:33:0a:00:0c:7a:18:2c:d0:4c:
d4:95:1f:20:c5:ab:c8:02:86:03:9d:35:88:e3:cb:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:14:69:3E:63:05:8A:BF:F6:FD:57:B3:9F:1E:17:31:5C:4E:63:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33A26864BF9D11EF8961969F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:a9:0a:f9:be:1d:33:71:4e:a0:13:6b:15:6d:be:bf:6c:a8:
f7:ef:28:da:51:fb:60:e7:d4:65:b0:93:e5:70:5a:10:1e:1f:
35:3f:65:af:62:f0:26:25:0b:84:04:f2:14:53:a0:b0:f7:ee:
06:97:ee:21:55:d1:ed:ea:f9:4f:70:ca:6f:a0:43:4e:b7:21:
ea:40:af:dd:43:07:fe:3a:68:b7:da:0a:0b:5c:6f:bb:91:62:
c3:ea:f0:21:84:d7:71:43:4e:07:ce:d9:5c:cf:2a:da:17:4c:
ed:78:a5:79:d8:8f:47:42:a6:8f:76:c9:23:0d:b2:48:60:f5:
d4:19:6d:a4:01:4e:7d:6d:36:45:a8:2d:34:da:0e:95:cb:62:
79:05:8a:1e:78:e9:70:79:6b:f9:af:0b:3d:97:20:33:a8:5b:
6e:f9:12:e1:98:e9:fd:8c:17:cc:28:4b:85:1a:94:88:b5:87:
75:5f:3b:b8:a5:56:df:f1:87:20:f0:6d:78:81:2f:c6:45:b6:
9b:8a:7b:10:a2:83:76:bc:19:d7:e4:95:9b:be:bc:a2:ec:65:
64:a0:89:c0:b3:be:f3:1e:9e:9b:a1:84:ea:29:2f:ad:a9:08:
8e:87:40:9d:80:1d:f1:69:8a:9c:d1:4b:83:ad:a3:2d:35:6f:
34:58:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:05 2025 by rpki-client