Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F486828C9A811EFBE29F777762E951A.roa
File: 5F486828C9A811EFBE29F777762E951A.roa (raw, json)
Hash identifier: ETREFi6218aeuGLAyZfAqc3FDYEhcMAhE+i736cOXhI=
Subject key identifier: 33:A0:43:91:29:90:AB:C4:83:81:47:60:B5:69:5A:7A:44:98:2B:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F68D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F486828C9A811EFBE29F777762E951A.roa
Signing time: Fri 03 Jan 2025 07:57:26 +0000
ROA not before: Fri 03 Jan 2025 07:57:23 +0000
ROA not after: Sat 18 Jan 2025 07:57:23 +0000
asID: 141883
IP address blocks: 156.242.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63117 (0xf68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:57:23 2025 GMT
Not After : Jan 18 07:57:23 2025 GMT
Subject: CN=67779866-e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:63:9f:2c:1d:31:b1:91:9d:7a:84:5e:f4:
32:5b:b3:0c:ce:83:67:98:15:b4:1e:ea:33:a7:61:
0b:c3:b6:10:93:2a:37:44:85:99:3c:b1:01:e2:a0:
ca:60:27:c6:22:03:5e:d9:4b:13:4d:70:83:89:40:
79:11:76:3a:65:dc:3c:bf:b3:8e:6c:a3:34:15:9a:
c2:d8:23:4e:e8:84:20:89:54:4f:c6:9e:d2:4c:e1:
24:d4:51:7c:34:28:12:02:94:72:85:32:a3:74:4d:
14:1e:ba:31:6f:26:7d:b0:a9:81:de:65:35:0f:00:
32:dd:e6:ee:68:e5:1b:c5:c3:76:dd:de:10:a2:8e:
b6:ba:1c:8e:61:2b:6e:c6:80:5f:50:e6:90:41:1d:
fd:64:f8:2c:70:02:a0:33:12:6c:bb:5e:ca:79:1b:
e6:76:48:28:f7:e9:b2:dc:89:88:b6:5d:d9:5a:cc:
b2:41:c8:f1:20:6e:f8:af:50:d9:c8:9a:32:25:7a:
22:0e:29:73:34:76:72:d3:69:3d:a4:a2:b6:64:07:
a6:e9:a1:fa:e1:35:2f:e3:32:4d:13:4d:76:ba:e1:
b8:7a:55:d1:31:d3:0b:ac:e8:e0:c8:80:2d:30:3b:
66:1b:cb:03:1d:35:d9:50:5c:1b:4d:13:35:62:89:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A0:43:91:29:90:AB:C4:83:81:47:60:B5:69:5A:7A:44:98:2B:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F486828C9A811EFBE29F777762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:7c:76:36:66:ba:f6:4b:9a:4a:a5:b6:e7:e1:b0:78:ea:49:
40:86:a5:b1:7f:f3:41:8d:80:0d:aa:50:89:e8:1b:73:2a:7c:
01:b9:35:5f:c2:82:b8:53:dc:9f:30:f1:31:c3:ba:f5:a6:42:
83:46:fc:db:b2:68:9b:c3:8f:4d:96:1e:70:1f:e2:0e:87:ed:
69:62:a0:7a:97:d7:bf:1c:8b:78:39:16:69:b4:25:06:b6:bc:
38:5f:55:0b:5a:d8:67:0e:01:b0:72:0e:1a:36:b3:94:83:67:
b5:42:75:09:5e:77:cd:36:38:cc:6f:86:75:0f:ff:7c:4d:1d:
ad:d0:50:18:17:15:28:a1:fd:29:04:42:54:95:29:98:1e:12:
7c:15:32:94:16:ba:03:a1:2f:74:a4:db:02:32:cd:c2:58:1e:
05:9b:09:ab:c8:bb:1b:77:c7:81:20:af:84:80:64:f0:90:6c:
7e:ef:2b:ca:35:90:20:4b:0a:18:a3:f5:df:5c:40:56:44:3b:
de:6d:8a:69:93:d6:cf:43:05:2d:37:75:76:db:ae:4b:f4:cd:
0d:8b:10:0c:d7:56:13:ca:70:dd:bd:28:ef:23:27:cd:5f:f6:
af:6f:b2:dc:be:aa:8e:33:61:6d:41:d0:29:17:07:7b:bc:81:
c4:27:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:50 2025 by rpki-client