Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C40E00EBC4511EFA600649F762E951A.roa
File: 4C40E00EBC4511EFA600649F762E951A.roa (raw, json)
Hash identifier: SjurPf3i3vmD2uZYOWrkyHriKOTKn46qyuOOv++YYlI=
Subject key identifier: 23:BC:6B:AD:49:42:89:E0:49:24:B9:0B:A3:EB:31:E1:39:72:8F:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E461
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C40E00EBC4511EFA600649F762E951A.roa
Signing time: Tue 17 Dec 2024 07:05:29 +0000
ROA not before: Tue 17 Dec 2024 07:05:25 +0000
ROA not after: Wed 22 Jan 2025 07:05:25 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58465 (0xe461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 17 07:05:25 2024 GMT
Not After : Jan 22 07:05:25 2025 GMT
Subject: CN=676122b9-dbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:2e:f1:d0:fa:d5:4c:44:cb:50:ef:ae:42:
1a:16:de:11:ff:3d:c0:81:a5:12:4d:2e:c3:29:b4:
2d:0b:c2:3d:ee:e3:ce:e6:e3:33:54:53:ce:d8:9e:
c2:a6:2f:25:89:d4:eb:a9:b6:f2:2c:81:6f:2d:e6:
3a:37:b4:98:7f:80:a8:38:08:5b:71:95:f6:f3:31:
cd:9e:79:81:18:a8:e1:98:f1:88:b7:d6:21:f5:53:
ee:23:84:11:bb:5e:db:2b:fd:40:19:ba:8a:b5:2d:
7b:aa:f8:91:75:ea:78:21:e1:c3:d3:29:2f:61:74:
47:93:d8:fa:cf:73:6b:cf:1b:90:93:ab:16:41:62:
a9:28:15:27:c4:62:31:c9:1a:01:d8:70:ed:30:86:
d3:d9:f7:93:a3:d3:84:0c:3a:cf:ff:fb:36:07:c8:
02:15:4a:3e:12:da:a1:70:92:1f:3f:d1:05:24:17:
e9:59:6d:bf:24:02:21:ce:c4:35:06:6d:64:c3:5d:
3a:74:d2:ba:06:59:55:71:54:00:22:ae:f4:0d:a6:
45:f6:85:bc:8e:12:09:d6:b6:0d:5b:fa:63:de:62:
0b:9f:1d:69:1d:b0:c2:a0:96:b5:23:72:81:c1:68:
d9:3c:bf:1e:55:ca:6f:77:83:78:25:a7:d7:e6:07:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:6B:AD:49:42:89:E0:49:24:B9:0B:A3:EB:31:E1:39:72:8F:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C40E00EBC4511EFA600649F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
Signature Algorithm: sha256WithRSAEncryption
98:87:b6:2b:13:32:1d:91:b7:dc:37:c3:e8:1f:10:68:53:cb:
0e:cc:29:e4:96:9d:fd:38:e9:7f:7e:0d:c7:d0:79:50:8a:3b:
c1:08:27:26:50:34:18:b6:b2:4d:b2:e7:84:eb:35:99:02:90:
be:07:d6:cb:3a:a6:9d:d7:a3:63:31:8c:78:b3:cf:74:e0:41:
ca:9a:a6:52:d7:36:0a:2f:61:ac:81:c7:00:11:07:86:aa:81:
13:8e:1d:d3:9b:46:54:fd:3c:01:4f:22:88:43:89:8b:35:30:
7c:0e:c4:29:ce:a7:14:66:9d:85:55:79:74:55:1d:d9:d0:aa:
31:92:4c:67:38:8e:5f:21:aa:82:19:12:12:98:bb:a7:ab:d4:
37:03:62:82:db:66:87:65:fd:a3:77:36:96:95:b3:fa:6f:32:
6a:25:62:c5:93:c0:86:df:27:d6:e4:35:91:6f:07:e3:c7:13:
b4:9d:5f:9f:3b:e0:6f:0b:32:fe:31:06:7f:fc:57:ca:47:e5:
b3:75:38:34:2a:11:c7:67:3b:a1:1e:c1:7f:3c:d8:cb:13:db:
b0:dc:09:79:ec:b1:9e:ce:99:47:d8:28:eb:8d:fb:bc:61:64:
61:1d:15:56:00:81:7a:5e:9a:15:f7:84:16:40:a0:2d:95:3b:
9a:89:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:49 2025 by rpki-client