Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6D484CCACC11EF847977A8762E951A.roa
File: 5C6D484CCACC11EF847977A8762E951A.roa (raw, json)
Hash identifier: NxJSrCvsu41HJsYv9sTwvcPwCbTP5BNLoSbJeJAo7NY=
Subject key identifier: 6D:86:28:45:A9:66:F6:4F:C7:23:36:22:C0:F6:D0:58:A6:E8:E0:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F75A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6D484CCACC11EF847977A8762E951A.roa
Signing time: Sat 04 Jan 2025 18:47:34 +0000
ROA not before: Sun 05 Jan 2025 18:47:31 +0000
ROA not after: Fri 17 Jan 2025 18:47:31 +0000
asID: 39600
IP address blocks: 156.255.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63322 (0xf75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:47:31 2025 GMT
Not After : Jan 17 18:47:31 2025 GMT
Subject: CN=67798246-3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:f2:3c:b6:ae:91:af:4c:b1:78:e8:0d:52:
3d:b6:d6:75:b8:f5:31:ca:5c:2b:02:76:ed:8e:8f:
39:1d:4c:b7:01:e0:da:99:e7:ce:71:e7:a2:36:05:
13:f8:7d:2a:33:13:25:6c:65:2f:53:fa:95:56:88:
14:ad:7e:62:52:15:40:04:b4:f5:ca:97:3d:b5:5b:
33:09:9a:f1:99:4a:70:b6:9e:83:4a:1a:64:89:fa:
08:59:aa:58:19:60:b3:f8:ad:83:a8:aa:3e:8d:3c:
34:1b:ba:bd:a7:10:8a:85:7f:96:de:df:4a:ec:99:
f7:9c:9e:26:b9:1f:ca:c7:f9:ee:26:91:88:d3:9f:
50:77:53:06:cd:94:5c:2e:a4:ee:0f:1b:bb:62:5d:
25:e6:95:ee:c8:33:b8:c4:c0:f6:85:99:40:8d:70:
a1:b8:3a:e6:a0:59:95:e4:f1:61:77:c2:15:74:6e:
8b:23:97:66:81:45:78:c4:d1:5e:05:50:07:fa:d0:
3c:de:19:b0:d6:f0:a1:cf:1b:51:cd:7e:d4:de:81:
5c:cb:60:d0:77:5a:c4:fb:69:c8:64:58:5b:5d:ac:
78:54:f5:8f:9b:e5:5e:6d:c8:a4:66:b7:97:7f:4c:
c7:e6:ca:9d:e1:2b:e7:44:38:b4:75:c3:5b:53:44:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:86:28:45:A9:66:F6:4F:C7:23:36:22:C0:F6:D0:58:A6:E8:E0:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6D484CCACC11EF847977A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b8:bb:ed:fa:ec:d8:c3:f1:68:dc:25:e6:18:8e:d4:a7:25:
af:c0:4d:be:c3:0b:6a:b1:cc:6a:f8:b3:9c:84:8c:06:f3:63:
2d:8e:9c:08:2d:ad:e0:19:4c:fc:a4:5e:59:f7:61:b3:67:5c:
f3:30:50:2f:7d:b6:06:82:ea:05:f2:bb:71:3f:32:39:e8:64:
b4:02:82:2f:84:4e:cc:f2:4a:57:2f:34:24:1a:af:26:66:ee:
d9:de:8c:fd:c0:d6:42:7d:84:36:f1:44:a7:32:08:bb:d3:d0:
25:21:ab:00:94:83:6f:38:4c:10:a3:7c:93:54:58:36:f6:86:
98:3d:93:0e:95:ab:2b:f3:0d:3e:31:fd:5b:2f:f1:0b:f8:52:
0a:14:d6:7a:fc:59:a9:8e:17:0c:3f:df:8b:f2:3c:9a:14:03:
eb:7e:93:44:0a:c7:36:f5:48:91:e5:e4:97:ce:a8:ce:2c:02:
84:58:33:8e:99:c6:9b:d0:d0:ad:8b:b1:12:23:68:49:e2:ac:
04:dd:15:99:10:7b:86:21:b4:61:a0:66:f5:5e:f3:b6:47:03:
35:fd:af:2e:8c:ea:34:a7:06:92:c0:9f:be:8e:fe:1a:81:33:
11:ac:c8:e0:67:61:ec:c5:b2:ba:bc:1b:2c:39:a5:20:3c:d8:
1a:09:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:41 2025 by rpki-client