Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67974E1CCEFE11EF8CB9EB6B762E951A.roa
File: 67974E1CCEFE11EF8CB9EB6B762E951A.roa (raw, json)
Hash identifier: sB3o6r5hM237v/50DaDuKDj+H8uBN8oChtNQFYt5TvU=
Subject key identifier: 4E:26:4A:FA:2B:E8:7C:06:FD:45:99:D9:B3:EE:4D:90:64:35:C3:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67974E1CCEFE11EF8CB9EB6B762E951A.roa
Signing time: Fri 10 Jan 2025 02:55:53 +0000
ROA not before: Fri 10 Jan 2025 02:55:49 +0000
ROA not after: Mon 27 Jan 2025 02:55:49 +0000
asID: 137547
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66753 (0x104c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:55:49 2025 GMT
Not After : Jan 27 02:55:49 2025 GMT
Subject: CN=67808c39-d600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:a2:42:03:55:84:82:4a:5b:3b:56:00:56:
8d:f3:de:b9:fb:ce:35:20:02:75:f5:86:20:0f:c8:
50:51:5a:cb:1e:13:7a:f6:fb:77:65:95:77:1a:00:
c5:91:c8:0a:d5:2d:cd:9b:85:9a:ea:ac:3e:c5:5a:
ee:55:b8:14:bc:d3:77:f5:40:ef:0b:c5:95:96:27:
43:57:23:92:32:22:65:2d:62:38:e2:bb:ca:9a:e5:
14:11:6c:56:f7:ad:fe:f8:00:91:06:60:4f:f3:25:
ca:f1:60:e0:6c:fd:8d:1a:bd:bb:15:49:c1:3f:b0:
7e:5d:57:28:65:10:a9:7e:28:7f:91:94:e7:88:01:
db:6b:81:eb:6e:9f:12:04:64:ae:f3:c5:ab:c1:e2:
87:31:fd:58:f0:46:ca:97:81:07:80:76:53:1d:9f:
9d:58:e6:f3:82:d3:b0:42:05:06:5c:ae:41:e8:0d:
da:29:fe:fa:f7:3a:d7:f0:c4:bb:68:2c:eb:98:71:
d9:71:11:c7:f6:87:fb:04:81:d6:9e:ee:14:ba:c8:
14:60:25:54:33:be:24:4c:49:14:01:14:5e:a7:71:
27:a6:5a:76:af:f9:17:ac:96:a5:2b:4f:6a:ad:6f:
28:3d:44:15:f8:b6:97:b2:23:24:67:8f:bc:a0:7e:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:4A:FA:2B:E8:7C:06:FD:45:99:D9:B3:EE:4D:90:64:35:C3:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67974E1CCEFE11EF8CB9EB6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5b:ff:00:21:ed:41:43:5c:c8:2d:86:84:9e:eb:61:96:e0:
a7:8f:01:a8:9a:b2:69:61:20:78:1c:2a:51:f6:ba:17:91:4e:
e5:20:f3:b2:d9:82:51:60:f2:ff:a9:4d:0e:69:20:77:7c:d6:
7c:c5:1d:3f:79:cc:7d:60:0f:af:d2:7e:cf:b5:49:c4:2d:cc:
9f:ab:ca:1e:10:ab:67:25:9f:8f:db:43:2f:bc:2f:9a:1f:2e:
e8:fa:42:38:b7:99:19:58:d3:b6:fe:8e:5e:70:54:cd:c6:d3:
e9:ff:38:00:2f:02:b0:30:03:a1:5d:2d:13:c4:4f:66:6e:ac:
15:bb:77:eb:6b:14:80:31:2d:f4:88:5e:16:8f:1a:86:ca:d1:
c7:c6:1f:7d:6c:ef:42:55:d8:81:55:eb:d2:f0:24:cb:9f:ba:
e2:46:aa:33:11:94:83:68:63:0c:16:91:8a:d9:62:7e:69:d0:
39:bf:c6:eb:4f:7a:6e:78:70:0b:0c:a5:12:5c:3d:c7:f8:5f:
aa:36:a4:3d:b1:ef:90:88:b9:2e:c3:1c:00:24:a1:0c:77:00:
35:55:97:52:42:83:3a:4c:f2:39:80:c5:1c:bf:8a:09:9a:92:
b9:d2:09:b7:74:8c:50:29:da:f4:26:f9:01:84:3f:a9:83:64:
27:39:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:41 2025 by rpki-client