Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4226EC74F17111EF9A0D117A762E951A.roa
File: 4226EC74F17111EF9A0D117A762E951A.roa (raw, json)
Hash identifier: bICwC2QqudR9LiTq7z4kCTmLYwFQGhtz+d9DkOT0d9s=
Subject key identifier: E2:8B:E5:EC:62:81:AC:25:6E:D1:5C:E2:11:21:1D:4D:41:6D:A4:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0129C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4226EC74F17111EF9A0D117A762E951A.roa
Signing time: Sat 22 Feb 2025 23:03:41 +0000
ROA not before: Sat 22 Feb 2025 23:03:38 +0000
ROA not after: Fri 04 Apr 2025 23:03:38 +0000
asID: 21859
IP address blocks: 156.226.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76230 (0x129c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 22 23:03:38 2025 GMT
Not After : Apr 4 23:03:38 2025 GMT
Subject: CN=67ba57cd-3303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:01:97:55:e7:28:e6:0b:e4:de:44:c1:58:
33:20:93:4b:cf:f9:cd:f5:f5:eb:28:0a:e8:29:4b:
9f:ab:88:2f:ed:39:3c:da:ec:49:cd:7c:5f:77:9b:
fa:e5:74:8d:8f:d7:d5:c9:e5:da:88:4b:65:00:16:
9f:cc:f2:3c:2d:96:c9:48:71:a9:0c:d7:74:af:a0:
53:e9:ef:0d:17:ff:ee:ff:d6:af:28:c5:fb:cf:67:
fe:c2:4b:6e:e8:fa:24:46:8d:30:2a:67:c0:12:76:
87:6e:bf:b9:38:b6:f5:c5:4a:42:ec:bb:3f:cf:89:
30:2a:16:af:ad:38:58:ba:d0:46:2d:2e:a8:41:05:
35:7c:83:cd:70:2e:87:63:e1:b8:04:6b:d7:20:c1:
72:82:44:5a:fa:8b:4d:9b:16:18:78:2d:2f:e6:31:
23:31:97:c3:13:6a:8a:cf:78:e8:0a:5f:33:6e:0c:
c8:b3:c2:e2:75:5b:a6:4e:12:97:53:c4:5f:7e:96:
e6:51:54:6e:fd:19:e3:ec:c3:b4:3a:3e:a4:3d:95:
0c:e8:ee:1b:5f:c0:9c:3f:e7:d3:78:2d:ff:01:fb:
73:b6:18:a0:b6:48:50:94:d7:75:16:27:3f:73:e0:
0a:81:78:77:5d:93:5a:66:02:f2:f7:97:38:64:af:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8B:E5:EC:62:81:AC:25:6E:D1:5C:E2:11:21:1D:4D:41:6D:A4:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4226EC74F17111EF9A0D117A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:23:98:bf:f6:b5:73:5d:cd:fa:dd:7c:4d:b8:d6:bc:87:11:
66:23:91:cf:e2:7d:c2:00:1c:07:c0:d2:fb:aa:15:94:17:7e:
e4:ca:47:fe:af:e4:93:80:fb:34:fb:24:8c:64:26:cb:b6:58:
e8:8d:79:f3:6f:88:80:21:47:7c:b1:e6:1f:78:83:9d:b0:c0:
71:b7:d2:c1:c7:4c:7f:f9:b0:a3:11:58:fc:b1:f9:42:7f:5a:
aa:05:f3:c2:c2:60:74:48:41:b8:9e:af:f8:9d:d5:d1:a2:1e:
e5:8e:a1:e9:90:d2:63:8d:df:af:86:ca:fa:32:3f:8e:41:06:
1c:0c:da:fb:b8:52:d5:ae:30:cc:49:63:ad:ed:41:6f:29:70:
55:12:bc:2b:ab:bd:8a:a4:37:05:56:f7:32:8c:15:13:33:9a:
4b:ad:4e:43:af:fd:37:6f:f1:22:5e:9d:aa:fc:e0:5a:0d:cc:
f8:99:46:06:db:e8:4e:7b:2c:ad:f0:84:1e:04:5a:a6:b8:37:
7c:59:d1:64:37:b4:d0:29:56:25:e3:25:00:6d:c0:74:bd:cd:
b7:6b:e3:ca:c0:0c:e9:61:b1:78:95:d1:8a:e9:87:5f:94:38:
86:89:6b:5a:e5:b7:dd:a3:1a:b1:a3:6b:09:ea:df:15:3d:9f:
d5:54:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:41 2025 by rpki-client