Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C48BFCCACA11EF85EC919A762E951A.roa
File: 63C48BFCCACA11EF85EC919A762E951A.roa (raw, json)
Hash identifier: u/fpVWH3vO1a9xHGzq6IfYjKTjInCzEgebvWjNqXsRU=
Subject key identifier: FA:6C:76:12:51:08:5C:14:8A:BA:E9:7D:8F:61:F5:4F:FD:5C:F3:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F748
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C48BFCCACA11EF85EC919A762E951A.roa
Signing time: Sat 04 Jan 2025 18:33:28 +0000
ROA not before: Sun 05 Jan 2025 18:33:24 +0000
ROA not after: Fri 17 Jan 2025 18:33:24 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63304 (0xf748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:33:24 2025 GMT
Not After : Jan 17 18:33:24 2025 GMT
Subject: CN=67797ef8-b150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:e2:74:9a:aa:47:2f:2a:02:ea:13:45:69:
69:0a:12:4c:28:32:83:1a:0d:40:4e:80:44:fe:2f:
49:8d:97:43:f8:7f:db:6d:55:cd:06:ae:64:1f:a5:
b6:c0:63:54:b0:a6:4d:b8:27:75:48:1d:93:ea:ee:
19:74:24:cc:2e:48:f9:f0:84:1e:18:c7:8e:02:8d:
fb:65:43:21:db:01:c5:ce:36:d7:92:cb:0f:78:96:
78:e7:24:77:ea:17:a9:9b:1d:15:b7:e0:ff:b6:98:
33:54:c8:fe:22:2e:2d:f5:84:21:8a:cd:3c:d0:76:
d7:51:d2:00:56:65:e1:1f:62:c7:98:d5:02:e3:12:
cb:a6:71:91:d4:cd:25:37:e8:f3:f9:f5:c6:25:6d:
e4:52:9d:ba:3c:8d:fd:fb:51:2e:51:4d:50:e2:87:
cf:ff:75:d0:6a:fc:20:ab:b1:de:4b:ba:24:8d:bd:
9b:bb:da:dc:5a:08:dd:4d:b4:f4:fd:ca:49:38:da:
00:19:7a:2a:c0:94:7c:24:07:ae:cc:f1:a9:38:7d:
94:85:2f:89:e6:dd:8a:cf:3d:c2:47:c6:ad:3e:3d:
48:99:1f:5a:e0:c4:5a:3b:48:7b:4e:62:a0:e1:ab:
4f:3d:7a:86:7d:c0:37:fe:9f:8b:df:3e:41:bb:b0:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:76:12:51:08:5C:14:8A:BA:E9:7D:8F:61:F5:4F:FD:5C:F3:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C48BFCCACA11EF85EC919A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:aa:8b:8a:ea:c0:b5:f8:cc:f1:5e:29:9b:be:1e:9d:d7:80:
b8:30:2f:84:4c:1b:3a:b6:a1:1f:9c:68:32:da:bf:56:05:04:
d5:a9:b1:c5:95:c7:42:05:e8:54:04:1a:f5:15:c3:ea:e0:71:
31:c3:50:9e:d0:18:f0:6e:7f:b6:b6:da:3e:e6:7c:92:6d:61:
f0:8d:7d:53:39:8a:22:7c:2a:54:92:ee:84:0a:71:9b:54:70:
aa:76:e2:b9:e2:f8:96:1d:7a:26:e1:71:5c:e9:18:c9:35:54:
d3:e2:55:ec:0b:f3:a1:8c:bc:29:3f:45:80:a4:a1:3b:28:11:
05:a5:70:7a:8f:76:ea:af:54:da:87:c9:f2:5c:59:b3:42:36:
52:43:0b:7d:22:9e:26:92:08:b6:97:82:fb:dd:85:74:15:d6:
f1:bf:6f:f4:eb:33:19:47:7b:01:9e:c7:8d:34:66:33:79:a6:
7c:d8:cc:ad:08:df:d4:d3:6b:72:a0:ff:24:6a:79:90:95:8e:
2c:be:aa:63:28:e2:2f:a0:70:2c:74:cd:3b:39:68:ac:7d:35:
29:93:a9:6b:65:65:25:22:ac:21:af:82:61:b9:ae:a5:fc:0f:
1a:fb:f1:31:69:f0:6f:73:8c:25:4b:d6:2c:3a:b4:f7:17:96:
34:a5:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:54 2025 by rpki-client