Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5F07BACEA511EF833A85AF762E951A.roa
File: 3D5F07BACEA511EF833A85AF762E951A.roa (raw, json)
Hash identifier: 4lEivCBcTBQ268xD6MkR2jo/lGXDx6ikqnhjm712QVA=
Subject key identifier: 44:6E:94:0A:D6:79:CA:52:76:F3:29:55:66:1B:F5:9A:2B:CE:A7:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010450
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5F07BACEA511EF833A85AF762E951A.roa
Signing time: Thu 09 Jan 2025 16:17:37 +0000
ROA not before: Thu 09 Jan 2025 16:17:33 +0000
ROA not after: Fri 24 Jan 2025 16:17:33 +0000
asID: 39600
IP address blocks: 156.255.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66640 (0x10450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 16:17:33 2025 GMT
Not After : Jan 24 16:17:33 2025 GMT
Subject: CN=677ff6a1-dda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:3c:7a:9b:a4:c7:fa:cd:ce:7a:ec:07:70:
4d:63:07:98:46:ed:26:95:d6:22:77:51:07:f8:0e:
21:bb:d4:8c:a5:1d:f5:c9:b9:12:a5:51:1b:a5:3e:
6c:1c:87:d1:04:11:58:b2:16:3a:2f:5f:3d:ce:48:
db:ed:25:4b:0e:fc:e2:cc:db:f0:a3:42:4d:3d:2d:
62:20:25:43:9b:aa:b2:e4:b3:f7:99:21:4e:be:d2:
55:8d:b6:ec:48:f7:4f:46:21:ef:66:84:d2:37:37:
40:3e:17:de:63:2c:5e:20:a9:2f:12:47:90:d6:44:
ae:b8:1d:ab:88:e1:98:b4:3d:63:29:20:1f:f6:88:
79:cf:15:21:bb:c3:b1:db:7b:de:83:34:16:a9:14:
bc:9e:34:c9:ce:5c:24:85:c9:25:ab:50:8b:2e:b5:
ae:12:87:7e:a4:2b:1d:1c:1a:35:d6:ec:0e:1f:f8:
4b:3e:57:2b:9b:b2:f0:06:a5:59:ce:68:99:83:3b:
47:f9:7b:79:f9:11:e3:92:6c:fd:77:bf:fd:90:64:
e1:4f:7e:75:14:d2:f6:6f:25:bd:2d:6c:b6:5a:69:
3e:2b:f2:4a:52:0d:15:d5:c4:03:dc:cd:24:91:61:
0b:09:99:a1:f3:45:c6:18:b7:8c:d1:3b:e1:07:14:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:94:0A:D6:79:CA:52:76:F3:29:55:66:1B:F5:9A:2B:CE:A7:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5F07BACEA511EF833A85AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.86.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:7d:3a:84:cf:ad:a5:79:9f:f2:ad:ab:1f:f6:2c:2d:71:08:
27:e2:57:33:fe:29:79:18:62:1c:34:33:14:9a:67:2b:94:08:
1b:94:7c:57:0b:21:86:96:38:3d:c2:1f:60:d9:e8:4e:ec:6f:
a1:56:41:24:28:0b:b3:57:d4:87:6f:9f:c4:5d:20:3a:b6:96:
9d:70:91:45:33:13:f6:aa:8a:c7:44:8f:ab:9b:93:20:a5:e6:
23:30:6e:15:cb:a1:3f:74:08:af:23:e7:75:c5:be:a1:80:f8:
21:2c:03:5b:33:40:3f:4a:9d:96:48:a1:15:52:49:e3:ea:f4:
12:95:99:59:3e:cc:3f:d8:7f:1f:24:6a:a3:3d:bf:da:51:42:
ad:ab:d4:ab:ce:02:56:12:2c:e5:fc:dd:ab:b7:c3:58:2f:49:
99:8d:06:81:f9:a9:6f:c4:b6:5f:70:c9:66:9e:9e:19:a3:e7:
9a:15:3b:8e:b5:b2:39:56:6c:9e:37:74:71:12:32:c3:75:1a:
0f:e4:a2:d4:cf:03:85:0c:b1:af:d1:9f:ce:3e:e7:97:58:35:
fe:0a:9c:f4:f8:9d:9b:73:32:3e:23:5c:37:8d:8d:45:a7:74:
37:e4:cb:7d:81:fd:cf:b2:84:d1:11:b0:fa:87:92:7d:20:28:
5d:72:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:56 2025 by rpki-client