Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BA14A5CCE7011EF9698F861762E951A.roa
File: 4BA14A5CCE7011EF9698F861762E951A.roa (raw, json)
Hash identifier: cWio+YLqIHG+jtTIk3L10kWq5nlkJ7wNRNvPHQppSCs=
Subject key identifier: 8D:81:59:E2:A4:24:AC:25:9C:53:8E:5B:97:68:17:AB:DA:00:CD:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010328
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BA14A5CCE7011EF9698F861762E951A.roa
Signing time: Thu 09 Jan 2025 09:58:37 +0000
ROA not before: Thu 09 Jan 2025 09:58:34 +0000
ROA not after: Wed 22 Jan 2025 09:58:34 +0000
asID: 22773
IP address blocks: 156.235.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66344 (0x10328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 09:58:34 2025 GMT
Not After : Jan 22 09:58:34 2025 GMT
Subject: CN=677f9dcd-427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:e1:72:25:ea:23:d3:23:40:4d:a8:31:e0:
e3:5c:cd:9d:41:8c:9b:38:8d:1b:86:c3:c4:0f:24:
dc:a0:f4:3d:d2:2a:8e:54:04:8f:78:e3:16:f7:ba:
67:19:d0:da:71:7c:fc:8f:28:2a:90:bd:9c:f5:33:
bd:72:d2:a8:09:2e:66:8d:73:e8:43:e4:89:0c:8b:
34:6d:4f:da:bd:70:c0:c9:b1:2e:4b:54:21:80:40:
61:9c:3f:7d:71:08:9c:bd:00:f6:b5:86:18:ae:fa:
74:d8:9c:7b:71:f0:09:05:d1:35:00:b8:c0:29:3e:
28:3f:47:eb:44:ce:99:9c:ef:1c:ce:a8:4b:2b:ac:
cf:e8:2a:1f:c9:24:0a:22:df:51:03:e3:40:79:4a:
96:8e:b1:d9:f3:ea:fa:75:7b:3a:a3:de:f7:f9:88:
2e:31:4b:87:c2:6b:c3:94:39:7c:61:f5:ad:7c:aa:
29:9c:6e:e0:e5:e4:59:e4:ae:46:91:bb:96:e0:4d:
cd:61:3a:64:46:c1:e9:bd:dd:d0:06:94:3b:3d:68:
2a:d3:f0:22:c0:e2:a0:4a:af:55:ef:94:b5:1b:4b:
fe:c7:73:83:95:83:03:cf:fe:cf:27:26:03:6d:7d:
f8:00:02:07:41:ee:20:fd:17:5a:12:3b:05:b7:44:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:59:E2:A4:24:AC:25:9C:53:8E:5B:97:68:17:AB:DA:00:CD:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BA14A5CCE7011EF9698F861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.48.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c9:90:2f:38:70:ea:b7:15:cb:ee:62:fc:91:55:7c:21:2e:
ac:28:ae:b9:0f:d4:40:50:7e:2e:d3:f5:5e:c0:af:bb:c1:a6:
e4:ff:78:af:23:d0:c5:66:c3:93:3e:48:d1:15:e7:cd:e4:1e:
1a:18:a4:e3:ec:7e:e6:a8:c3:c8:9f:3d:3d:73:aa:6a:3a:32:
f2:99:fe:25:13:17:c0:e2:1b:d2:84:21:f8:56:2e:38:67:5a:
b6:50:e4:60:06:fc:21:00:d0:af:7e:93:fa:b9:c6:1e:4a:49:
89:00:ac:37:36:bb:e8:b5:bb:5b:33:43:a5:f7:78:98:04:dd:
52:96:55:1d:86:9e:40:f0:15:57:49:61:1d:19:2f:d8:15:0a:
96:5e:ec:77:51:98:4d:1b:61:53:41:fd:76:b7:eb:d9:47:e1:
69:6e:96:a9:8f:be:f1:eb:32:1a:7a:b1:3f:d8:5b:a8:47:64:
85:90:18:5c:ed:17:a1:7b:4f:0c:06:a3:26:e0:0f:02:78:19:
39:42:97:ad:5f:eb:3c:35:29:7a:f8:46:1c:39:3d:c3:3a:d2:
96:99:7e:d6:c6:29:64:7b:99:41:99:43:a9:27:a3:86:95:5f:
89:51:75:05:b3:63:b8:77:b0:44:14:fb:d8:69:ab:5f:6d:79:
df:df:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:11 2025 by rpki-client