Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5090ABE0CE7D11EF83AC6AB2762E951A.roa
File: 5090ABE0CE7D11EF83AC6AB2762E951A.roa (raw, json)
Hash identifier: mrxY1bwqPGDeHZ+SzAxhaDbjoDZYk38S+ktiYpabelA=
Subject key identifier: D8:AA:5E:D7:BC:D3:22:03:14:76:11:F7:41:38:4B:ED:CE:88:73:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01036A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5090ABE0CE7D11EF83AC6AB2762E951A.roa
Signing time: Thu 09 Jan 2025 11:31:49 +0000
ROA not before: Thu 09 Jan 2025 11:31:45 +0000
ROA not after: Wed 22 Jan 2025 11:31:45 +0000
asID: 22773
IP address blocks: 156.239.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66410 (0x1036a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:31:45 2025 GMT
Not After : Jan 22 11:31:45 2025 GMT
Subject: CN=677fb3a5-40bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:34:1f:0c:a6:16:70:bd:b6:a8:d1:63:04:
ed:89:2f:5b:7d:2d:6a:41:03:2b:01:e9:e7:1e:82:
12:61:15:0b:02:29:b1:06:be:d1:60:8c:91:85:aa:
9a:77:bc:06:dc:72:a9:4a:6f:a8:66:2e:2c:84:ce:
16:e3:f0:af:d8:c1:9e:79:ce:26:a6:64:86:e4:ed:
e7:70:1e:6f:dd:ce:9b:97:72:29:3e:fc:92:e5:90:
74:b0:ae:93:1d:a0:56:34:65:8f:aa:36:22:39:01:
52:85:4d:97:02:08:0e:c2:d1:8a:e7:95:37:60:ca:
4b:6c:75:4e:a3:d0:04:43:e6:5b:02:7d:64:b8:0e:
6f:1e:96:6c:50:42:c5:a3:fd:39:3e:5f:aa:cc:46:
1b:8b:25:fd:a6:5e:1b:a0:f6:b8:79:3c:7d:49:83:
91:eb:0a:fa:04:31:13:ed:1f:85:5b:f5:9d:62:f7:
3c:f1:e0:2e:16:ab:35:70:96:40:df:5a:2f:5a:93:
9e:95:c9:6b:d4:73:32:6b:e7:d4:34:64:8c:28:94:
fa:31:bc:1c:84:d8:fb:80:98:54:fc:08:74:1f:fc:
e2:b7:ac:4e:9b:5b:f3:93:50:3e:e4:9c:5d:39:90:
48:f5:45:a3:6a:27:29:1e:d4:63:d7:f8:b6:33:90:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:5E:D7:BC:D3:22:03:14:76:11:F7:41:38:4B:ED:CE:88:73:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5090ABE0CE7D11EF83AC6AB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.128.0/21
Signature Algorithm: sha256WithRSAEncryption
65:23:07:8f:d1:3a:bc:9e:ff:83:fd:6e:8f:7b:f9:75:b9:77:
27:0d:7e:7e:b3:0e:48:c8:d1:1e:f2:5f:29:2c:1e:9b:c6:b2:
05:49:c0:80:f7:6d:6d:40:93:f6:44:86:f6:87:16:33:d2:ce:
39:0f:dc:a8:83:f7:3b:8c:f4:f3:9e:c1:d2:43:59:f5:05:8d:
7e:b5:45:fc:b0:17:e8:eb:e7:65:07:8c:c3:77:a8:3c:80:ad:
fc:75:93:6e:35:57:ec:e6:18:db:43:c3:0a:04:58:d2:fa:81:
e3:13:a0:da:8d:dd:34:94:d9:1d:a1:5a:bd:5d:ad:ed:b2:10:
70:00:c9:00:8e:57:ef:93:cf:6b:e7:cb:59:61:f8:58:7a:6e:
41:1e:68:db:d7:64:bd:60:df:e1:6d:03:58:0f:55:bf:3f:c2:
58:18:aa:34:c9:1c:9b:64:e8:9e:ff:6f:65:5b:34:1b:6c:23:
2e:49:cb:70:0a:0c:41:b9:a7:c2:0c:e1:2e:1b:91:95:d4:c7:
4f:e6:70:b5:8c:2f:b8:ee:a0:22:20:19:ee:05:53:ba:c4:16:
06:6d:31:6c:88:9e:8a:10:14:c5:35:74:0f:1c:92:71:78:18:
c3:02:2b:e4:06:ae:b3:4e:2b:23:93:58:56:92:89:c5:98:ff:
03:74:f5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:13 2025 by rpki-client