Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C669CCC4F511EFBCBED890762E951A.roa
File: 39C669CCC4F511EFBCBED890762E951A.roa (raw, json)
Hash identifier: QrvxZ9aamey+CpVdq2b7+m6DUyC0BGSr/drDkzoYrjo=
Subject key identifier: 13:7B:87:A7:18:54:66:71:49:C8:34:99:23:B7:BE:FC:BC:7B:20:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F11B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C669CCC4F511EFBCBED890762E951A.roa
Signing time: Sat 28 Dec 2024 08:24:59 +0000
ROA not before: Sat 28 Dec 2024 08:24:55 +0000
ROA not after: Wed 22 Jan 2025 08:24:55 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61723 (0xf11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 28 08:24:55 2024 GMT
Not After : Jan 22 08:24:55 2025 GMT
Subject: CN=676fb5db-3737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:73:3c:59:6c:28:32:0b:4f:54:55:48:55:
3d:29:8d:f5:c6:31:be:f9:63:96:b2:fb:6d:f2:b5:
ae:9f:4b:bb:2e:56:20:f1:a6:d7:01:91:67:98:9d:
bf:2e:7c:c0:c1:29:12:78:f0:92:c5:8c:71:de:da:
18:bd:83:a6:9c:a5:50:76:3b:08:11:76:f5:dd:54:
ff:0c:04:17:99:8d:aa:de:0a:03:51:bb:a2:cd:29:
3c:c1:cd:29:1e:bb:2b:c7:eb:0f:2a:cc:2b:7b:99:
2c:3c:05:0d:28:87:c4:73:02:4b:4a:87:76:c4:a9:
e0:fb:95:ee:f6:a3:39:4d:d2:15:f4:51:95:fb:91:
64:b6:94:59:c3:89:79:50:a4:b7:6e:61:47:bb:7c:
a1:d6:c8:bf:2b:7a:4c:69:3c:ab:fa:52:3b:c6:18:
e3:34:4e:ac:1d:28:83:b5:ff:e3:b1:7a:6a:e0:bf:
8e:24:9a:22:fc:75:19:a3:da:75:44:d3:d6:2b:2c:
e1:89:38:fb:49:c2:22:89:d4:a5:71:7d:53:56:92:
29:61:c0:f8:1d:4d:25:a7:3b:42:b1:1b:b7:e5:ff:
dd:7d:4b:29:66:bb:67:69:fe:d8:48:41:fd:e9:f4:
ef:2c:ca:64:e5:69:53:0e:93:21:52:a0:e3:e1:07:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:87:A7:18:54:66:71:49:C8:34:99:23:B7:BE:FC:BC:7B:20:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C669CCC4F511EFBCBED890762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
02:13:d9:69:bd:fc:f8:fa:cf:98:10:46:c1:69:73:f2:73:6d:
ed:a4:f3:1f:38:00:0f:ee:6b:e0:cc:85:e6:37:73:05:29:f3:
7e:4e:c1:c4:37:6b:c6:83:c1:a8:b0:d0:bd:0f:ba:28:3f:68:
4e:82:31:68:ba:44:73:23:b4:65:85:25:c1:ea:4b:77:21:8c:
9f:fe:37:cc:e6:da:97:f9:96:50:92:87:78:3c:87:3b:aa:51:
57:8d:20:e9:00:51:71:a1:6b:29:d3:c2:7b:52:45:ce:21:9c:
7a:b0:9f:37:b2:6a:b9:36:de:42:ef:1d:d3:3a:02:5e:a3:94:
8d:94:64:58:91:d5:4c:e1:fd:93:dd:c5:10:bc:29:1d:d8:3d:
8e:65:e1:ce:d1:5d:72:b0:3a:6a:7b:0a:3c:50:38:93:9f:7e:
85:ae:f7:3c:04:79:5e:da:ec:f6:19:e5:17:93:c7:b7:19:3a:
be:5f:6c:c0:b6:4a:b9:ee:42:bc:0b:71:95:82:4c:78:9d:b0:
eb:77:71:de:14:9c:21:24:be:0c:20:d6:15:13:6c:62:59:fb:
2d:4a:04:4e:7e:4c:05:47:f8:3e:a0:99:35:87:d2:65:3e:19:
4c:59:f2:3c:a8:45:bd:49:e3:49:9e:c3:8c:3a:54:4d:95:41:
b5:6d:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:52 2025 by rpki-client