Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382FAFD8D00311EFAA2AB763762E951A.roa
File: 382FAFD8D00311EFAA2AB763762E951A.roa (raw, json)
Hash identifier: usc545V3OQqCqnl3jjFvg/r0gtNhrW95wNWcVKSVrNU=
Subject key identifier: 77:E7:34:A7:28:0D:60:2F:D4:4A:E7:1E:26:DB:53:47:7F:B8:ED:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010596
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382FAFD8D00311EFAA2AB763762E951A.roa
Signing time: Sat 11 Jan 2025 10:02:52 +0000
ROA not before: Sat 11 Jan 2025 10:02:48 +0000
ROA not after: Fri 24 Jan 2025 10:02:48 +0000
asID: 273478
IP address blocks: 156.232.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66966 (0x10596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 10:02:48 2025 GMT
Not After : Jan 24 10:02:48 2025 GMT
Subject: CN=678241cc-3339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:8b:08:36:dd:a4:c1:c3:43:ee:ee:1c:0a:
d9:b0:a5:f7:a3:7f:eb:7e:48:1f:b2:c8:cc:9e:b9:
b7:ed:d9:90:8f:fe:10:0f:09:30:2a:f5:05:a2:40:
8a:8a:fb:65:4c:e6:21:8f:e0:62:aa:ce:a8:3b:a7:
82:3b:15:29:b8:cf:a7:54:d4:f3:c2:39:7d:86:bf:
a5:98:73:91:69:2b:c4:ec:35:e2:af:0d:1f:1d:2d:
74:35:72:0c:c7:94:76:07:47:19:2b:0c:f2:cc:27:
ba:e4:3e:5c:e6:9b:48:32:ea:3f:92:e4:41:b4:80:
14:19:09:fc:1b:f0:88:b5:a1:52:ea:7e:37:af:dc:
7f:76:80:05:07:58:19:c4:3e:ba:d6:30:12:66:df:
b9:31:fc:43:f8:f6:d7:1c:91:fa:be:cf:8f:32:55:
3d:7d:15:87:a3:ae:08:75:7e:53:87:df:d1:d0:11:
2b:89:ff:73:65:d9:a4:f5:66:32:7e:df:5d:5f:db:
14:13:ba:23:95:f2:3b:b3:fe:8f:51:c9:e2:36:fd:
3b:c2:41:c6:45:1c:91:b8:45:57:6f:0a:05:29:9f:
82:3c:1e:74:0d:73:3b:4c:34:54:dc:8f:f7:0e:68:
2d:18:06:51:ef:fd:6d:9a:0b:f7:3e:e4:18:84:ea:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E7:34:A7:28:0D:60:2F:D4:4A:E7:1E:26:DB:53:47:7F:B8:ED:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382FAFD8D00311EFAA2AB763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
73:29:ea:0e:09:46:44:af:8b:89:8f:9d:22:91:fe:92:f0:f2:
36:d4:05:80:dc:37:5c:14:70:4c:8c:02:24:75:6b:d1:37:f8:
58:a7:e7:7d:23:4d:b7:a3:51:64:41:d5:e8:c0:28:f1:fb:b6:
a6:96:59:bd:91:19:04:19:f3:93:a7:f5:43:7d:e2:b7:69:c4:
3c:ef:78:b1:e6:e4:d9:e7:ff:b9:a4:a4:a7:f7:24:38:1f:fd:
40:63:a9:a3:ac:ab:7d:48:bb:a6:6f:6a:ed:94:6d:62:35:5f:
0f:60:77:ef:b5:7f:22:5b:94:8d:1c:c8:90:45:9e:c2:a1:ba:
a5:51:e7:d0:55:c7:db:fc:07:12:16:80:ed:bc:d0:c1:cc:dd:
c1:12:c7:e5:8c:91:68:9a:f7:80:1a:09:57:2e:2b:c4:90:16:
38:e1:1e:bc:6c:74:1d:77:b1:42:de:51:40:09:61:12:35:ba:
64:89:ad:7a:21:10:4e:d0:e5:9c:0a:f0:5f:3e:55:17:2f:f5:
ee:9a:f8:3f:19:ca:b4:47:b8:75:04:05:5c:1f:e8:63:d2:76:
bd:a3:fd:19:c9:9b:53:a3:74:12:67:2e:8e:e4:1b:95:af:f1:
7c:99:1c:70:fb:0e:09:90:f3:2c:03:3b:f5:1a:2e:b8:e1:fd:
fd:ce:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:42 2025 by rpki-client