Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FA7C05CCE8611EFBCB7B96C762E951A.roa
File: 4FA7C05CCE8611EFBCB7B96C762E951A.roa (raw, json)
Hash identifier: 0RFkuskSglz0CzBqYP4egBvRt48owgaLgSY6gw6mXNE=
Subject key identifier: 81:29:55:21:76:89:62:94:B6:39:72:39:19:E0:5B:C2:BA:1A:0E:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FA7C05CCE8611EFBCB7B96C762E951A.roa
Signing time: Thu 09 Jan 2025 12:36:13 +0000
ROA not before: Thu 09 Jan 2025 12:36:08 +0000
ROA not after: Sat 01 Feb 2025 12:36:08 +0000
asID: 17561
IP address blocks: 156.236.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66510 (0x103ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:36:08 2025 GMT
Not After : Feb 1 12:36:08 2025 GMT
Subject: CN=677fc2bd-a64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:bc:26:9d:e5:18:ae:cf:5a:d1:e8:37:27:
84:34:b4:71:a4:8c:12:14:4b:ab:99:50:e7:a7:35:
49:a1:1e:de:44:22:bf:2a:3f:61:7e:d0:91:f9:f8:
39:98:54:f3:77:98:09:97:58:53:49:f1:85:ee:e5:
d5:49:be:a9:ae:ba:c5:bc:c1:b5:fe:c4:5c:5e:f2:
90:3c:c8:3a:ed:a1:ca:49:2d:82:8c:c9:43:44:37:
90:4b:7f:77:1f:7e:6a:0c:90:37:da:05:4c:00:fa:
4f:77:62:c4:49:a2:11:52:ed:0c:22:fb:3f:87:37:
eb:67:ad:05:95:5a:16:f8:9a:ac:24:96:30:3b:1e:
58:30:3d:62:c9:bd:b6:e6:cb:cf:fa:67:cc:b6:7f:
fa:47:b2:42:22:43:da:ac:da:14:3b:27:74:31:2b:
2d:94:d5:cf:df:9d:36:0d:e6:10:42:81:1c:8e:d7:
1b:29:b5:7f:e4:1c:05:61:70:59:1c:a6:19:28:1f:
23:2b:59:7c:f7:81:ea:43:7e:92:c1:bd:cc:be:2d:
96:ec:2b:9e:d3:da:cf:2f:fc:36:41:3a:45:09:26:
1f:dc:5f:f9:02:ac:c1:13:48:77:64:7c:81:43:33:
88:b8:5f:48:f0:6f:06:ca:cd:46:34:a5:de:07:bd:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:55:21:76:89:62:94:B6:39:72:39:19:E0:5B:C2:BA:1A:0E:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FA7C05CCE8611EFBCB7B96C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.34.0/24
Signature Algorithm: sha256WithRSAEncryption
84:46:aa:ca:84:47:74:a8:2c:f8:a7:c4:b1:69:14:cd:d7:e9:
25:20:4b:0a:d9:89:66:06:ba:dc:0e:ca:d3:6c:b1:b5:b9:89:
da:81:a6:14:27:6a:50:9f:a3:16:04:e1:cc:c1:2e:bd:f7:0d:
22:ca:4f:f9:dd:19:3d:43:40:d8:fe:39:de:e7:5c:9b:f5:44:
70:cc:57:1b:dd:6c:b2:0d:97:6a:f4:d3:b8:ff:47:b2:8f:3a:
38:6f:b1:8a:3c:6f:47:8d:2c:ae:8b:48:1f:58:81:65:a8:bd:
7c:c2:a4:e3:23:79:a9:dc:07:c9:e3:5f:13:25:44:13:c0:c7:
82:53:9b:ef:47:6c:81:69:56:eb:0e:7f:92:ee:9e:b0:81:c1:
df:e3:0e:e8:ca:e8:8e:00:5a:ac:80:6d:62:80:fa:aa:03:b3:
c2:0c:bd:c0:55:1d:56:4f:8b:0d:9b:ad:14:8d:21:28:86:ea:
3b:93:30:7c:c5:6a:ab:ad:18:69:97:c3:13:67:48:2a:f7:6a:
93:7d:ff:fd:a8:3b:c7:ff:7c:d7:9a:30:77:0f:69:97:73:63:
12:1d:4b:c5:84:7d:90:91:d2:06:d7:3f:57:46:e0:68:4f:63:
38:e9:3a:70:0c:3a:71:7f:db:4d:ee:3e:42:6e:31:12:34:7e:
42:d8:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:52 2025 by rpki-client