Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37DDF756C0FE11EFA3B30157762E951A.roa
File: 37DDF756C0FE11EFA3B30157762E951A.roa (raw, json)
Hash identifier: 64MyDKXgOwz5XNX6li9Y2NwqOaOeD8kCke3I3hwdcUc=
Subject key identifier: C6:3C:9C:D0:3B:CA:6C:EA:04:67:5B:B9:CB:6D:87:DE:38:C0:17:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E80A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37DDF756C0FE11EFA3B30157762E951A.roa
Signing time: Mon 23 Dec 2024 07:19:16 +0000
ROA not before: Mon 23 Dec 2024 07:19:13 +0000
ROA not after: Fri 31 Jan 2025 07:19:13 +0000
asID: 203020
IP address blocks: 156.233.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59402 (0xe80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 07:19:13 2024 GMT
Not After : Jan 31 07:19:13 2025 GMT
Subject: CN=67690ef4-4c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:67:b0:17:76:97:e9:5c:e8:ea:7d:46:7d:
2f:eb:ba:cf:64:3e:48:31:89:7f:ca:6b:37:31:7a:
e6:11:e6:c4:6d:dc:12:f2:b8:a9:23:37:9a:6e:ab:
80:5b:be:e6:23:62:5b:e8:ad:cc:8e:71:ec:88:26:
bc:19:38:48:59:3d:46:b7:14:a7:4f:d1:ea:0e:27:
c1:f8:63:51:1a:92:70:4c:b3:a3:72:99:53:9a:86:
c7:d5:d5:9d:fd:d7:ff:00:ed:2e:e6:54:ba:ec:46:
81:6a:0b:0b:42:cf:a5:80:3f:fe:8a:2e:d7:28:86:
36:e6:f0:ea:1f:2d:5c:7f:6f:c2:7a:eb:40:b2:a1:
bf:56:d4:8f:09:48:95:da:d2:50:fc:ec:21:d6:22:
45:11:f1:3a:74:07:c2:0b:2c:b8:4c:a9:f1:f9:aa:
bf:11:b1:07:19:54:01:ac:9f:07:ce:e2:dd:df:5f:
dc:36:70:6a:14:73:0b:6f:a4:22:b9:ae:57:de:f3:
3a:c4:34:1a:c2:aa:96:59:38:04:f4:00:68:31:c1:
0c:1b:7e:ce:cc:44:6c:ec:cf:c6:8d:c8:bc:75:e3:
33:f1:96:6a:1a:45:07:45:81:46:a0:4a:df:02:25:
8e:bf:07:7d:b2:8e:4b:96:98:de:a7:1d:43:ab:21:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:9C:D0:3B:CA:6C:EA:04:67:5B:B9:CB:6D:87:DE:38:C0:17:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37DDF756C0FE11EFA3B30157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.24.0/22
Signature Algorithm: sha256WithRSAEncryption
68:c4:a5:98:6b:29:59:2b:25:29:1b:e6:69:df:2c:98:85:e4:
0b:e0:9d:c0:18:fe:14:80:2b:39:f3:d7:60:14:f3:28:d3:ec:
e5:d5:04:67:0f:51:38:1e:32:0d:84:b0:92:04:78:ab:94:cc:
54:b6:64:66:a0:a0:62:6e:c2:d3:c1:a2:d2:2d:b9:71:b3:a0:
61:c5:03:73:10:93:05:62:f6:85:c2:73:99:cf:25:10:ff:a5:
b8:3e:3b:9a:5c:fc:1f:85:78:62:e6:76:9b:22:d6:1a:cd:98:
d3:da:c7:11:2e:81:09:f3:65:b9:e2:09:ea:e2:2b:83:9d:c5:
d7:76:22:97:01:37:26:06:7b:01:c8:aa:43:e3:00:9f:d9:1d:
de:36:da:7b:9c:3d:57:20:6f:26:0a:d3:b9:90:6c:47:5f:d3:
20:8a:c4:23:88:d2:44:12:f8:df:ea:c8:bb:08:29:2d:ae:79:
03:64:4b:7c:da:00:56:e6:34:aa:26:be:36:4a:f2:d0:fb:7b:
90:c3:c9:75:05:d9:ac:76:c0:de:b8:5c:f1:65:3b:76:de:72:
39:fe:35:16:b8:f3:cf:62:9f:a1:fb:81:f8:02:d5:b7:7c:72:
59:82:78:50:ee:4f:0e:65:98:50:68:8d:47:46:ce:29:1d:a9:
c3:a4:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:58 2025 by rpki-client