Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F03FA30BD0F11EFBFA11B96762E951A.roa
File: 5F03FA30BD0F11EFBFA11B96762E951A.roa (raw, json)
Hash identifier: vvTj+cXuLlxWgiUl1EHGng8MvhLfnbb52W8RcX27cic=
Subject key identifier: FD:A2:5E:61:BA:66:C8:06:04:C5:FF:F2:A0:79:74:D4:35:0A:18:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E46E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F03FA30BD0F11EFBFA11B96762E951A.roa
Signing time: Wed 18 Dec 2024 07:11:59 +0000
ROA not before: Wed 18 Dec 2024 07:11:55 +0000
ROA not after: Thu 23 Jan 2025 07:11:55 +0000
asID: 203020
IP address blocks: 156.243.188.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58478 (0xe46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:11:55 2024 GMT
Not After : Jan 23 07:11:55 2025 GMT
Subject: CN=676275bf-65ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:6e:2d:a9:c5:83:65:55:85:a2:1f:a9:d3:
3b:76:11:75:47:ad:a0:36:15:36:0c:bd:c5:76:5d:
26:27:1a:d0:0f:4f:30:77:26:cb:3a:9d:de:7b:89:
f1:a4:53:3b:36:0d:40:0e:aa:33:90:07:60:2a:e4:
b2:da:5d:19:d2:ce:07:71:b1:ee:18:47:ba:af:81:
99:f9:7a:45:d3:59:6e:b7:0d:87:59:90:12:6c:ac:
4b:11:d4:c2:76:27:4a:a7:41:cb:5e:c2:da:9c:78:
d0:c9:9b:62:0c:50:d1:81:21:11:7c:ad:3a:75:47:
84:b0:bc:15:2a:1a:b1:c5:0f:f3:12:4c:9e:32:3b:
83:8b:9e:22:f3:bf:70:c2:81:0c:6c:09:50:bd:12:
f6:c6:c7:49:6a:8d:d8:34:bd:c9:37:c4:65:77:86:
37:56:38:d8:29:bb:99:2f:e7:9b:57:31:5e:32:ec:
7b:1b:09:c0:db:e7:00:84:04:f8:40:ec:8a:1b:bf:
af:c5:21:97:0b:a3:1a:47:84:81:36:11:ea:49:5e:
92:83:b9:9a:6d:c3:79:fa:fd:6d:9f:25:a3:65:cd:
d8:91:28:79:67:41:66:9e:ae:f4:c4:b6:9c:79:86:
75:fa:e4:4a:c6:2d:bc:39:aa:a6:52:91:23:24:cb:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:5E:61:BA:66:C8:06:04:C5:FF:F2:A0:79:74:D4:35:0A:18:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F03FA30BD0F11EFBFA11B96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.188.0/23
Signature Algorithm: sha256WithRSAEncryption
39:34:b8:82:d0:4a:17:5a:86:ba:40:2d:77:f1:e1:23:d5:17:
c2:1a:db:37:0f:dd:02:a1:0f:03:3a:06:ad:15:af:48:a3:ca:
aa:17:e6:1f:62:6b:40:e1:f8:03:84:cb:b1:db:02:85:1b:26:
f9:d3:01:33:df:85:f4:b7:49:40:c7:23:de:e3:d8:4f:ee:db:
fb:3f:69:87:76:52:99:b3:88:01:a4:16:b5:2a:3a:30:84:28:
d9:8d:3b:e1:cb:a8:b9:ab:1d:14:89:32:6d:6d:84:2e:9a:8c:
3a:29:f0:9a:3a:7c:25:2d:29:3c:b1:8e:05:13:fc:65:29:a3:
90:21:9a:f9:53:d1:34:b2:51:7d:60:dd:c3:9f:2b:2a:07:6b:
c2:b8:64:29:61:4d:b0:2c:3c:de:55:eb:d5:1a:ae:88:d0:e1:
c2:d0:77:17:5f:3d:ad:15:54:66:84:82:03:34:9c:50:b2:fd:
b3:53:2a:a0:d5:de:0c:23:41:f6:04:10:c7:c5:dd:00:b1:b7:
38:f2:71:9e:df:1b:e3:ca:96:6b:10:92:5f:2c:c1:e6:2d:cd:
db:92:42:71:8f:d2:f8:f5:77:ec:72:2c:ca:a5:df:1c:a7:c6:
84:09:7d:87:26:5f:0f:c8:e4:c4:84:38:56:39:2b:8a:2a:db:
ec:90:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:06 2025 by rpki-client