Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F57C4EB21711EFAEB57C99762E951A.roa
File: 61F57C4EB21711EFAEB57C99762E951A.roa (raw, json)
Hash identifier: Chvs+X/szSo4qV50KWk2r4cYFSP2pVLFLMb59dULZBo=
Subject key identifier: 5A:F2:65:40:2A:18:1C:EB:15:9F:C8:E0:18:1C:F2:69:61:ED:B7:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F57C4EB21711EFAEB57C99762E951A.roa
Signing time: Wed 04 Dec 2024 08:11:37 +0000
ROA not before: Wed 04 Dec 2024 08:11:33 +0000
ROA not after: Thu 23 Jan 2025 08:11:33 +0000
asID: 63139
IP address blocks: 156.227.192.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57178 (0xdf5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:11:33 2024 GMT
Not After : Jan 23 08:11:33 2025 GMT
Subject: CN=67500eb9-3892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:16:b0:df:62:d2:6f:a4:29:30:be:25:52:
94:41:23:c2:78:98:0d:2a:71:66:7d:d5:f4:eb:47:
cc:07:8e:92:dc:c0:48:85:dc:63:3e:6c:48:77:c4:
b9:12:92:f0:61:64:c5:44:dd:94:3c:2a:e9:b5:d1:
8b:db:52:10:9f:7f:43:72:0f:04:6b:ec:b8:c2:2f:
30:34:db:13:ef:b2:a9:b6:41:b8:c5:a7:65:90:8c:
0b:8f:38:49:d5:67:c0:b0:87:6b:1f:f5:90:43:ed:
30:fb:65:6c:54:47:21:1a:d1:3e:8c:98:7b:99:e3:
88:3c:b1:38:f2:79:cb:0c:66:18:19:5b:bd:f4:31:
49:0a:4c:2d:6f:07:7e:5c:0a:da:da:ad:01:ac:b0:
e2:34:44:d0:b1:52:41:b1:70:bb:90:97:f7:f2:da:
36:d2:b8:43:38:c1:0e:06:bb:24:fe:f5:bd:c9:9d:
e3:85:55:b1:a7:ca:dd:ca:84:45:2b:87:14:0a:cd:
eb:7f:67:14:07:07:21:a0:d7:25:f9:69:da:ed:b8:
f8:58:34:ed:b6:31:51:8f:9d:01:66:91:fc:59:33:
6d:6c:9f:35:0b:de:ff:d2:b1:dd:98:1d:60:7a:7b:
01:62:e1:61:f3:35:95:62:bb:dc:3c:00:3b:0b:fa:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:65:40:2A:18:1C:EB:15:9F:C8:E0:18:1C:F2:69:61:ED:B7:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F57C4EB21711EFAEB57C99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.192.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:0e:c3:d4:29:19:f2:6f:9c:c6:72:a8:03:10:b7:3d:a5:f0:
df:c0:ba:c4:dd:88:77:da:30:26:9c:c9:bf:01:7d:1c:4f:71:
ae:54:e3:dc:f7:26:da:4c:fd:cf:3a:16:89:2c:6c:d5:57:a7:
ac:d1:9f:2e:62:c6:53:6e:fd:99:b9:b9:b3:55:29:26:af:a1:
08:b0:66:2e:5f:76:ef:43:02:0b:75:b8:91:fd:65:e2:66:bf:
1b:55:e5:ec:f5:42:fb:1f:6d:d7:59:31:c3:be:c9:a1:4f:b0:
94:fa:aa:48:a0:55:24:5b:44:22:de:82:f8:5b:f5:2d:57:c2:
a4:a6:e3:01:7d:d2:9c:ea:c5:7e:21:cc:68:ad:22:29:e3:97:
80:76:03:49:4b:96:a8:e2:f7:83:a4:6a:0f:77:8d:4c:f9:ca:
f5:5b:15:49:76:e5:46:9f:ce:1d:4e:64:a5:48:a4:72:ca:c1:
75:b4:48:0d:36:97:2c:8b:66:b4:c5:19:8f:eb:d8:f9:95:9f:
e5:74:1f:f2:37:51:cf:03:64:d7:40:0d:e9:1e:c2:8c:02:5d:
7d:2d:14:df:fb:7e:2d:c4:2d:ce:e3:c6:35:cf:97:24:52:64:
ed:20:88:3a:2d:12:1d:b3:7b:43:06:6d:c3:6d:59:e6:29:c5:
60:4b:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:11 2025 by rpki-client