Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC689C6C10011EFAC06A863762E951A.roa
File: 5EC689C6C10011EFAC06A863762E951A.roa (raw, json)
Hash identifier: gARCd0PnBnczaWBcFyNRIyiZkdT/80mCfSFc2NVaT+M=
Subject key identifier: 37:B5:83:FF:A0:A3:DF:DB:78:60:22:BC:55:7D:85:68:BF:ED:99:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E810
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC689C6C10011EFAC06A863762E951A.roa
Signing time: Mon 23 Dec 2024 07:34:41 +0000
ROA not before: Mon 23 Dec 2024 07:34:37 +0000
ROA not after: Fri 31 Jan 2025 07:34:37 +0000
asID: 203020
IP address blocks: 156.233.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59408 (0xe810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 07:34:37 2024 GMT
Not After : Jan 31 07:34:37 2025 GMT
Subject: CN=67691290-8d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:42:9f:16:47:f8:4d:c5:c6:7a:4d:23:4e:
75:c7:b0:1a:fa:3a:d1:ba:f6:9a:3d:a5:39:f6:e3:
ec:42:b9:41:4c:55:37:65:38:98:1b:82:c1:7e:ed:
da:7d:54:2f:73:9e:26:1d:fa:ce:b1:db:a9:ef:23:
b8:03:9f:f0:70:a6:ad:3c:8d:66:37:f1:8d:3c:d8:
09:5c:e4:b6:0f:e6:1d:2c:18:b2:7d:68:60:09:2d:
92:2a:52:e8:8a:49:78:21:dc:65:73:4f:f3:e5:6b:
51:b4:ab:01:70:19:22:c4:f4:a2:db:9a:e6:1a:22:
5b:74:0a:18:ac:31:85:76:ea:58:e3:dd:c1:b2:9e:
56:36:4c:9b:8a:bf:5d:99:e7:b2:37:0f:c7:5c:9c:
a7:2e:82:d4:fd:18:f2:0a:e0:5c:66:cd:1f:a6:ca:
b2:db:6c:ee:fb:d7:f1:d9:d5:d6:12:e4:0f:19:e5:
91:e2:a5:ee:ea:eb:67:de:f5:87:f7:d1:41:aa:87:
4b:b9:43:1e:de:d9:a5:16:38:ac:f2:bd:0f:9f:3d:
83:dc:97:5d:fd:7f:d4:cd:d5:3b:ff:ac:cd:ea:d1:
42:45:21:99:66:a7:cd:d9:d5:a7:aa:05:92:90:95:
26:45:a0:f1:c5:12:14:28:e1:71:86:30:17:0e:2a:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B5:83:FF:A0:A3:DF:DB:78:60:22:BC:55:7D:85:68:BF:ED:99:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC689C6C10011EFAC06A863762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.4.0/22
Signature Algorithm: sha256WithRSAEncryption
63:bc:c6:e5:14:42:a0:fa:54:6b:9b:d3:22:16:9a:eb:0a:d8:
74:36:35:52:ae:3a:fd:15:ab:e8:2c:f6:78:ed:63:64:8c:e4:
b9:cc:c8:8e:75:06:20:64:6f:82:61:08:f6:7e:03:9f:4c:af:
6a:5c:88:03:8b:66:da:ae:22:0d:2c:47:c2:34:94:93:b9:95:
13:b2:14:88:0a:f4:2f:1e:a6:e4:d5:d0:a9:3b:50:e7:8d:04:
3b:aa:29:02:6a:f8:6a:60:f8:b4:4b:58:1b:59:d7:ea:62:2a:
41:97:7d:a4:4c:0a:c2:c0:c0:73:cc:ae:d4:5c:b1:92:33:ae:
aa:ee:b2:1f:a0:77:6b:c1:08:f6:7b:5d:fe:df:15:4f:d9:d9:
44:3e:fd:3a:24:34:58:fe:36:f3:db:fa:13:44:24:ad:e0:22:
a6:37:96:87:43:36:c9:1c:8c:03:45:97:81:d7:fe:01:af:22:
a1:a2:92:ea:b5:5b:53:af:c0:62:d6:6e:99:d4:86:15:7e:d2:
7b:15:2f:d3:9a:37:c4:ae:6b:cb:49:53:4a:dc:63:32:96:58:
bc:21:23:20:c3:2b:a9:69:f7:2f:6b:ae:64:fb:24:6d:b6:70:
61:f5:72:c7:df:58:36:49:a8:eb:0b:83:90:02:8b:0f:1a:cf:
87:7b:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:28 2025 by rpki-client