Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BCB4E78D25911EF92E7A3A0762E951A.roa
File: 4BCB4E78D25911EF92E7A3A0762E951A.roa (raw, json)
Hash identifier: RlhMhPlNFLhn4DrYT9BpCztC3KkuqZZMg1XEgrLe9Mc=
Subject key identifier: 83:B0:9A:0A:37:A9:A6:D0:7C:EB:D7:F4:B1:8C:54:8B:BD:D8:CE:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01071E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BCB4E78D25911EF92E7A3A0762E951A.roa
Signing time: Tue 14 Jan 2025 09:24:04 +0000
ROA not before: Tue 14 Jan 2025 09:24:00 +0000
ROA not after: Sat 25 Jan 2025 09:24:00 +0000
asID: 149641
IP address blocks: 156.225.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67358 (0x1071e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 09:24:00 2025 GMT
Not After : Jan 25 09:24:00 2025 GMT
Subject: CN=67862d34-89cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:2b:05:f4:9e:7b:36:af:bf:5e:9f:97:a2:
ea:70:1d:ea:ea:7e:97:4a:69:80:0a:2d:7c:c7:a4:
d5:ff:05:31:97:c7:20:9a:9d:90:5d:fa:53:2e:90:
41:d5:e6:03:b0:24:28:d3:2d:82:8e:d4:a4:3d:d4:
bc:e5:d8:38:46:54:46:78:03:1d:de:7f:5a:f4:96:
90:35:49:30:7d:43:43:27:3a:b2:90:d3:35:75:bc:
46:1a:cc:3e:72:e5:72:7e:ba:fb:7b:66:20:34:cf:
64:62:45:24:74:27:89:75:fc:ff:30:38:f7:19:67:
32:c7:43:04:ba:a0:47:f8:4f:95:68:d3:82:56:6b:
ae:b1:4a:ce:21:83:97:8a:e9:8a:0f:a3:74:7d:94:
99:a6:6e:d1:d2:31:3a:19:09:25:44:dc:da:55:7f:
32:88:33:44:4e:4f:cf:c8:c2:33:3b:c7:07:aa:f5:
c4:89:5d:22:51:32:19:72:a7:93:03:de:04:ba:4c:
23:7a:83:b4:a9:5c:1d:78:b2:2e:d0:a4:f8:65:ee:
f8:64:2d:ae:81:15:83:d1:62:5c:3f:cd:89:ab:c1:
26:50:a6:c0:71:43:a6:4b:45:0a:f8:dd:a4:c2:06:
b3:dc:81:ef:3d:22:94:6b:d9:fa:61:4b:76:c7:be:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B0:9A:0A:37:A9:A6:D0:7C:EB:D7:F4:B1:8C:54:8B:BD:D8:CE:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BCB4E78D25911EF92E7A3A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.128.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:aa:e5:25:f4:2b:9b:1c:0f:70:a8:d0:cc:fc:38:d0:63:97:
38:77:9e:01:e2:e0:70:6f:65:2f:6e:46:61:61:73:f2:d7:f3:
44:5e:71:4a:f2:b4:58:9d:8a:52:f6:69:4b:59:91:d6:99:f6:
22:54:79:be:e1:37:da:af:9e:30:c0:8e:d7:a0:8d:12:71:bf:
e2:8b:82:e4:37:a1:f1:db:8c:bf:b2:07:44:8a:4d:ca:3c:15:
51:23:99:f6:fc:c3:80:e6:b1:7a:bd:6a:89:31:51:ee:ff:53:
3b:cb:e0:a9:2b:0e:b8:1a:38:d3:11:94:4e:8a:39:2f:d7:be:
6c:ac:51:8a:82:fa:10:d9:f2:ec:f9:58:68:9f:29:55:e7:75:
30:f8:22:17:5e:e1:4e:db:c3:07:cc:3c:c0:a5:bb:23:33:d1:
d5:19:8e:c8:fd:b6:0b:0e:6f:b9:d1:62:4a:51:af:b4:1b:35:
74:ae:4f:f6:98:b8:30:44:0e:21:85:c6:8a:e5:ca:2a:2d:0e:
c6:c6:20:3f:7e:a2:a4:83:32:f3:ac:70:f1:2e:3f:73:d0:8f:
ae:55:6a:f9:77:a5:6d:30:d3:51:08:2d:52:a6:9b:e4:77:72:
85:7d:81:1e:83:3b:9d:67:ab:f1:1a:80:a0:0b:8a:c1:29:a7:
cc:27:4b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:41 2025 by rpki-client