Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4708FDD8CBEA11EF88188748762E951A.roa
File: 4708FDD8CBEA11EF88188748762E951A.roa (raw, json)
Hash identifier: asddppPOYkWVdmHpqY0SZVf+gsyMcLoLjRSegrIKlKY=
Subject key identifier: B0:0F:89:5E:37:61:22:53:41:2E:AD:3F:8E:6A:AA:BD:79:A8:58:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F822
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4708FDD8CBEA11EF88188748762E951A.roa
Signing time: Mon 06 Jan 2025 04:54:15 +0000
ROA not before: Mon 06 Jan 2025 04:54:11 +0000
ROA not after: Thu 16 Jan 2025 04:54:11 +0000
asID: 5065
IP address blocks: 156.229.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63522 (0xf822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 04:54:11 2025 GMT
Not After : Jan 16 04:54:11 2025 GMT
Subject: CN=677b61f7-54ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:78:0f:3f:29:7f:4f:77:cf:91:f5:78:a2:
6c:7a:5c:fc:4d:3c:f5:05:b3:91:8e:5c:5c:0c:fb:
9a:6b:7c:05:71:e2:69:b3:04:89:77:b6:ae:60:4b:
54:0b:f2:af:a1:36:fe:43:fc:18:37:77:f9:a3:82:
b0:81:2c:ef:15:ec:58:b2:17:bf:86:bd:bb:35:44:
fe:e3:58:05:46:54:4d:76:00:85:fe:78:c9:dd:1b:
ab:86:e9:4b:66:60:e4:e4:b1:d6:8a:56:7e:d2:45:
99:8b:30:0b:e6:80:c7:27:d1:9b:28:34:d1:28:7f:
7a:2d:71:3c:00:d2:6a:cb:ee:94:b4:02:2e:cc:d0:
34:e3:34:04:1e:e1:eb:d1:3d:c5:51:b6:24:57:01:
29:96:7a:6a:47:c4:43:f3:45:b6:ee:96:aa:9e:2e:
ea:ec:b6:65:78:94:a1:d3:1d:52:d7:46:5f:18:57:
cf:04:25:6a:f0:7b:8e:d2:c3:17:00:63:1d:98:92:
33:5f:c0:a2:fe:01:de:9b:62:e1:f0:c3:4a:6a:aa:
b0:43:54:c8:8d:91:57:51:05:f6:c1:03:a1:b9:4d:
74:34:cc:a3:a4:99:03:1d:31:26:92:75:ba:16:83:
ea:e7:f5:45:59:b7:3d:f8:50:cc:d2:4c:c8:ab:b3:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:89:5E:37:61:22:53:41:2E:AD:3F:8E:6A:AA:BD:79:A8:58:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4708FDD8CBEA11EF88188748762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:55:53:f8:a5:68:47:1a:d0:10:89:0a:5b:70:bb:e4:8b:a8:
9e:4f:eb:c7:b3:fe:7f:76:72:2d:48:27:f2:ac:3d:df:61:3a:
c7:22:4d:23:10:38:0e:82:a2:cc:ef:34:56:40:54:30:7e:4b:
7c:44:df:8f:19:1b:3a:b6:28:86:c0:ca:aa:13:aa:3e:72:a0:
ed:81:01:ca:06:0f:bf:5b:ca:39:5c:3a:b3:34:25:0e:15:6b:
a7:5f:24:e4:96:6e:e8:7c:c3:6c:5b:d1:d1:aa:37:40:1f:09:
6c:44:75:94:b7:4a:6b:c7:a7:ce:ab:3e:3a:3c:13:a1:65:d1:
33:69:b4:6d:6d:9e:c7:27:ed:a6:4a:97:72:1a:c9:b5:aa:ef:
e6:7e:1d:5f:57:c0:17:85:27:2a:f4:74:67:69:41:80:65:5e:
77:82:f5:93:ea:f5:fc:40:7c:94:8b:c7:4e:cc:55:44:fc:bd:
b0:f5:8d:af:0c:f7:2b:cd:49:b3:e1:04:68:98:82:ec:3b:58:
43:2b:42:f8:db:62:34:3b:02:a0:00:fd:c8:b0:bd:56:93:44:
79:3e:3e:7c:e7:60:97:12:c9:3f:f9:09:25:2f:cb:91:cf:3c:
36:6c:50:6d:36:e8:5f:37:63:9a:4e:29:74:51:00:8d:91:8a:
fc:ac:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:25 2025 by rpki-client