Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F7241EC74411EF8F3972B6762E951A.roa
File: 55F7241EC74411EF8F3972B6762E951A.roa (raw, json)
Hash identifier: vsaIYg/4niH5yUxf3b6bPeJeZdm/tCBAaKToCqqgYIs=
Subject key identifier: 5D:28:82:AA:C5:14:8B:87:80:03:27:4A:7F:21:BD:F4:C2:01:AD:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F29A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F7241EC74411EF8F3972B6762E951A.roa
Signing time: Tue 31 Dec 2024 06:56:19 +0000
ROA not before: Tue 31 Dec 2024 06:56:15 +0000
ROA not after: Tue 04 Feb 2025 06:56:15 +0000
asID: 18013
IP address blocks: 156.234.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62106 (0xf29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 31 06:56:15 2024 GMT
Not After : Feb 4 06:56:15 2025 GMT
Subject: CN=67739592-357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:c5:2b:40:9b:ca:c6:e1:9c:d4:b6:34:97:
55:46:5f:a2:8a:39:16:d4:40:97:90:ed:06:60:df:
ae:39:79:c1:e6:60:39:51:ea:79:16:05:0c:b2:06:
8f:58:7a:dd:b4:c6:cf:83:19:9f:58:46:2c:e5:c6:
33:26:8e:e5:c5:1e:6d:1d:41:71:57:f6:32:97:3f:
c8:33:5a:e7:d2:10:78:e9:24:d1:be:45:10:53:52:
3b:32:9b:95:ca:43:70:55:89:ef:22:90:65:dd:af:
49:5f:af:b8:65:0e:64:d0:0c:04:06:44:89:71:38:
27:dc:32:f8:29:37:20:e0:df:ff:84:c7:6d:a7:ea:
fa:22:23:b6:92:4f:cf:61:2c:bd:b3:fa:27:90:ce:
86:9e:ef:7d:f6:a8:57:ff:c4:eb:ed:66:5d:9e:1d:
b6:c2:4b:83:68:08:93:d0:56:0b:46:8c:f1:ef:c7:
23:69:aa:d1:1c:8b:6a:7a:67:44:f1:ac:f2:38:ce:
02:59:cb:b8:3f:1d:76:2c:36:d3:71:92:b5:67:57:
5c:ce:3a:87:b9:f3:ae:21:7e:28:a6:b5:d4:a7:19:
51:a7:6a:27:31:19:14:c8:1a:01:d4:77:8d:d8:60:
56:1b:77:df:11:94:77:a7:09:9c:fd:81:00:ce:25:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:28:82:AA:C5:14:8B:87:80:03:27:4A:7F:21:BD:F4:C2:01:AD:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F7241EC74411EF8F3972B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7a:8b:fa:13:a6:8d:d2:1a:8d:75:16:8d:7f:c0:da:e2:aa:
06:93:51:b1:00:3f:da:60:c6:d6:f5:e0:4a:7a:d0:2f:d1:30:
fe:c5:cd:3f:04:3e:60:af:8d:f3:ba:e7:ee:26:d3:7d:40:b3:
f1:31:0f:d6:3c:8e:ce:88:33:fd:d0:68:af:54:ac:07:80:76:
8a:eb:7a:fa:1b:0e:96:ee:6c:22:e7:dc:5a:3d:c8:a3:55:e3:
93:42:f8:36:29:a9:1d:33:a0:8b:5f:47:e0:c8:c6:01:75:14:
fc:f6:41:10:a5:dd:88:00:14:44:91:79:c5:ab:52:8c:3d:ba:
3b:09:87:4b:09:68:bf:43:64:77:a3:b4:14:8a:d8:47:30:ac:
56:df:22:75:76:4b:5c:8c:11:12:07:6c:86:c7:aa:09:c8:dc:
53:68:96:f2:4f:39:27:9c:29:3f:e9:88:b7:7a:09:bb:4e:39:
79:81:00:58:32:70:38:2e:cd:f9:be:07:5d:25:b3:0a:c2:fc:
39:7f:49:24:c1:46:87:4d:cb:65:74:c6:cf:fb:ae:1c:fd:19:
c7:9e:9b:ab:65:43:54:c8:ab:41:dc:d9:2e:b7:73:54:6f:cd:
6e:05:87:a3:a6:c1:90:a8:b8:ba:b0:15:e7:e0:d8:4d:73:a0:
bf:41:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:40 2025 by rpki-client