Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57460F56C29911EFA1CEF991762E951A.roa
File: 57460F56C29911EFA1CEF991762E951A.roa (raw, json)
Hash identifier: gNcI0Dh7520DLi1no8VBc4TasSVeGJIO/H3vECV95so=
Subject key identifier: 99:45:63:C4:1C:8E:3B:EA:21:97:FC:54:22:72:BD:3D:34:CF:6B:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57460F56C29911EFA1CEF991762E951A.roa
Signing time: Wed 25 Dec 2024 08:22:12 +0000
ROA not before: Wed 25 Dec 2024 08:22:09 +0000
ROA not after: Mon 03 Feb 2025 08:22:09 +0000
asID: 5068
IP address blocks: 156.225.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59869 (0xe9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 08:22:09 2024 GMT
Not After : Feb 3 08:22:09 2025 GMT
Subject: CN=676bc0b4-1095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:12:ae:60:35:12:3a:b8:e5:95:6d:9c:f0:
99:19:08:30:9b:7f:ec:c5:23:6d:92:05:14:1b:cb:
9f:5f:8e:99:49:72:b9:1d:c3:6c:78:b9:d3:ed:e9:
93:37:e5:1d:94:93:af:83:47:60:6c:0f:4d:60:de:
fb:06:74:58:ff:f6:65:db:2b:87:f7:78:d0:41:f8:
e0:19:a3:1a:42:2f:d3:97:73:b4:89:6f:d6:d6:e3:
60:ff:59:8d:af:df:1d:9b:f4:9f:f1:cd:b1:7f:21:
b8:c1:b3:cd:00:3e:ff:3f:06:75:e2:6e:ce:d9:7c:
78:e1:d3:03:05:2d:80:aa:c1:fc:d2:b0:09:21:a0:
b8:f1:49:c3:c3:b3:94:0a:48:7d:dc:3f:d0:14:32:
83:41:f1:ad:18:85:ba:ae:79:b3:f4:61:ab:e8:40:
18:bd:35:dd:d3:c5:f9:a5:e0:13:2a:10:e6:3c:b6:
cc:fc:e6:80:19:37:21:4a:6b:82:aa:4e:17:d2:e4:
b7:8d:3a:4b:3b:11:30:b2:83:a7:ba:9d:fa:79:e0:
fb:e5:b8:3e:86:bd:65:0f:ac:40:6d:10:af:ba:2d:
3c:53:5b:59:07:3c:aa:9b:90:41:9b:55:d0:8d:fd:
a2:61:27:04:5e:70:66:72:10:ad:ed:af:4d:5c:32:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:45:63:C4:1C:8E:3B:EA:21:97:FC:54:22:72:BD:3D:34:CF:6B:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57460F56C29911EFA1CEF991762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f6:2a:b6:e9:a3:e6:6c:16:0a:93:dd:3c:54:27:51:e7:fb:
e3:2d:d9:d0:47:02:5e:1f:28:58:b6:20:b0:10:76:4f:30:c0:
63:4a:d4:7f:b8:ec:6c:30:cc:71:16:f1:30:39:9a:21:40:12:
5f:7a:97:10:af:18:77:fe:ad:bb:bf:87:8f:1e:b5:ac:c5:77:
9b:69:50:24:9a:cc:36:f6:2c:a9:4a:38:63:a9:b4:eb:fb:9a:
e8:cb:80:de:55:f0:dc:41:c7:40:d9:fb:d8:8e:96:60:e8:05:
8d:9e:db:36:08:71:94:81:64:86:2f:76:d6:dd:88:cd:23:c1:
35:8c:24:05:a7:81:27:ec:62:a6:0d:98:2f:9f:07:f2:1f:dd:
e3:dd:5f:e5:c4:0c:cd:6e:21:b9:1b:93:20:38:f4:81:07:fd:
6c:b7:00:82:ec:55:14:d6:9a:aa:7e:74:18:df:74:c9:15:f3:
d0:78:1e:15:63:06:df:40:2f:87:e6:53:83:4c:42:24:06:4f:
c6:85:4b:da:5d:1d:53:14:80:64:f6:22:96:89:c3:63:50:66:
f9:16:af:b9:10:8f:b5:51:f5:53:c5:8d:2a:ed:da:71:07:a6:
48:3f:39:a7:c8:a7:a4:7b:18:c8:9e:56:a0:e9:bc:0c:a9:de:
4c:f0:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:29 2025 by rpki-client