Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547356F6CC1911EF84E8F76D762E951A.roa
File: 547356F6CC1911EF84E8F76D762E951A.roa (raw, json)
Hash identifier: pjQONAQL6uajsZBtN9cSBwrZ0kNrDYGUyOtLExeZM9k=
Subject key identifier: E5:11:55:6A:43:65:EC:9B:61:7E:69:45:FA:C9:3D:A4:6E:78:00:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F88B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547356F6CC1911EF84E8F76D762E951A.roa
Signing time: Mon 06 Jan 2025 10:31:04 +0000
ROA not before: Mon 06 Jan 2025 10:31:00 +0000
ROA not after: Sat 01 Feb 2025 10:31:00 +0000
asID: 39600
IP address blocks: 156.238.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63627 (0xf88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 10:31:00 2025 GMT
Not After : Feb 1 10:31:00 2025 GMT
Subject: CN=677bb0e7-69b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:04:a3:3e:cb:35:7b:e0:fc:bd:e7:cb:ed:
b4:06:e6:96:4c:5f:30:89:44:f5:bc:8d:4e:40:77:
39:99:ea:5c:c1:20:0a:bb:8a:b1:12:a7:11:07:28:
08:55:43:6c:43:1c:6a:91:de:65:36:55:d9:ce:fa:
22:31:fa:f7:a1:a9:7a:66:d4:95:91:b6:41:1c:24:
14:2e:b8:a2:1d:0a:ca:64:12:65:84:e3:a7:93:4e:
0a:85:eb:dc:26:97:00:18:79:d0:c2:7c:07:e6:32:
13:61:c0:ac:57:c4:3e:2b:fe:7a:73:d0:76:e8:6f:
39:42:05:76:ed:87:78:59:31:da:a9:2b:5c:16:b4:
00:30:7c:6e:6c:4e:40:f5:e3:cb:71:c7:5c:01:33:
c6:4b:9c:08:56:4c:4e:05:b4:b1:b9:bc:8a:f0:56:
ec:0a:0c:72:4b:b5:4c:bf:33:ef:64:52:42:bb:93:
72:c0:9d:88:ea:e4:00:ee:8f:25:55:c2:6b:60:2b:
86:4e:51:a2:27:7c:fd:45:54:ee:6f:99:e9:ff:7e:
5e:2d:6e:80:23:d3:c1:ba:94:cc:24:ab:bc:46:9e:
f6:9c:bc:f7:43:83:01:2f:52:14:cf:c8:fa:5e:de:
cf:c1:ec:2b:59:eb:0a:32:71:09:b8:60:af:a5:c7:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:55:6A:43:65:EC:9B:61:7E:69:45:FA:C9:3D:A4:6E:78:00:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547356F6CC1911EF84E8F76D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.168.0/22
Signature Algorithm: sha256WithRSAEncryption
47:a4:9b:f3:99:b7:f6:65:00:d6:b9:ad:9c:7a:30:09:a5:dd:
c3:bd:07:f9:c9:9e:4f:a8:01:49:95:cd:ac:0e:34:07:16:51:
76:43:ef:50:35:ca:08:f9:78:cc:c9:46:48:e5:bf:6c:09:b6:
2a:df:de:c5:de:28:df:0a:04:ea:e4:e8:cc:dd:6e:70:fe:29:
87:ae:0b:e4:74:dd:6b:0a:35:eb:97:ec:39:91:f6:85:88:c3:
e8:61:a9:1b:05:b8:42:34:66:81:1a:b4:a2:8a:e6:f6:64:67:
f6:c1:18:e0:fa:c1:1b:11:cd:71:31:2d:69:d6:49:82:b9:7b:
e8:54:05:58:0e:24:7c:b5:c6:1d:c6:5e:6d:f6:09:a9:4b:60:
a7:ec:35:72:d4:7a:79:69:90:e1:ac:15:d6:e7:15:b5:4b:8c:
fe:0a:17:41:3b:d3:99:20:d4:6b:e3:fe:bb:26:3c:1c:e4:2e:
02:2e:8d:70:f9:47:1d:37:3c:cb:2f:bd:d0:84:d7:af:27:f7:
f0:68:b8:d9:6c:b7:56:74:86:01:97:6c:ce:76:37:d5:f3:d0:
f3:b1:a4:1e:a0:a0:04:68:c8:03:94:67:09:7d:aa:ca:e7:f2:
fd:2f:c8:0e:93:8c:df:3d:b5:9f:3b:c9:ac:8f:ff:38:07:1c:
09:ba:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:43 2025 by rpki-client