Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A9004C6CC2711EFB624ED46762E951A.roa
File: 6A9004C6CC2711EFB624ED46762E951A.roa (raw, json)
Hash identifier: am1KFNfj00YqR/BQspawsNpyK4adhqQqSNOcPcTjNIY=
Subject key identifier: FF:49:8F:60:6E:2B:60:00:A7:2B:25:01:E2:56:7B:22:12:60:15:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A9004C6CC2711EFB624ED46762E951A.roa
Signing time: Mon 06 Jan 2025 12:11:54 +0000
ROA not before: Mon 06 Jan 2025 12:11:50 +0000
ROA not after: Sat 18 Jan 2025 12:11:50 +0000
asID: 44559
IP address blocks: 156.233.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63705 (0xf8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 12:11:50 2025 GMT
Not After : Jan 18 12:11:50 2025 GMT
Subject: CN=677bc889-6dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:dc:8b:d5:c7:c9:f2:aa:be:77:8d:fd:eb:
8e:8f:61:58:3e:a5:ff:9c:a6:f1:a4:84:b4:7d:87:
b3:e9:92:ef:71:f0:a8:2f:1e:e3:4f:f7:5c:53:cb:
33:df:3b:2b:f6:47:00:7e:38:32:dd:f5:16:2f:e1:
31:f1:08:f5:9a:5d:5b:29:4f:e6:b7:bc:d2:40:ec:
bb:ed:2f:ed:2d:11:da:0c:a9:81:b9:c0:b3:1a:73:
d0:cd:d4:a0:3e:14:34:65:55:c3:7c:ae:17:68:f5:
b1:0d:a5:d5:3f:be:de:a5:41:fe:6b:48:66:06:8d:
6f:a7:46:3c:2e:a6:48:17:37:49:7a:f4:24:ae:08:
2c:8a:a1:bd:d0:06:ac:17:37:a6:03:b0:d2:f3:16:
42:0d:16:4c:26:58:a2:15:fc:45:99:70:1b:67:ae:
1b:e7:56:41:e2:4f:75:51:2f:da:a7:92:ea:8f:b8:
e1:57:71:21:94:1a:39:84:db:7a:0c:53:55:8c:b6:
6e:68:6f:c0:74:b0:7d:ab:86:f6:60:3e:64:7e:fa:
8c:be:77:39:af:21:f3:16:32:4a:87:d7:12:54:fa:
83:16:ba:bd:43:ee:e4:74:9c:9e:89:63:8a:b5:0b:
5c:99:0f:9f:df:a2:29:33:a3:3e:4e:a2:61:3d:87:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:49:8F:60:6E:2B:60:00:A7:2B:25:01:E2:56:7B:22:12:60:15:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A9004C6CC2711EFB624ED46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:6d:5a:07:34:de:6f:7e:9d:cf:51:0e:4b:bf:a7:13:90:29:
57:d4:5b:37:93:ef:57:66:d4:ac:54:a0:cb:09:4d:01:ef:80:
4b:ab:b0:fc:8e:8d:07:de:8c:15:8c:fd:97:07:73:2c:06:8e:
57:f3:1a:42:f2:e3:82:80:b0:6f:eb:6c:aa:96:aa:5c:e1:d8:
9e:72:d9:81:05:ef:f6:3c:98:e8:f5:f4:6d:99:fc:71:83:6c:
2a:87:44:28:d5:0a:13:6c:ad:8c:cd:0d:24:1b:6f:44:85:62:
48:20:49:52:cf:99:4c:54:43:dc:4c:95:0c:9f:b5:60:13:3e:
e5:4a:be:27:ab:6f:4c:9e:d8:5a:80:e0:74:02:1c:95:94:60:
a1:ad:f4:45:b7:3d:be:7b:7f:34:7f:6d:47:3b:fe:6b:24:73:
cd:83:7f:fd:93:03:d7:b4:07:6a:db:c6:15:ed:e4:e8:26:1c:
b8:4a:09:73:c2:20:0e:0d:45:1b:4f:b3:db:f5:6b:8f:29:10:
cc:fc:1c:63:1f:7c:2b:20:1d:a7:8c:d4:de:d3:c9:72:12:8d:
81:07:2e:c4:75:dd:87:3f:a1:c7:db:88:ca:83:85:3d:67:0b:
d9:25:c6:b3:e0:74:95:d3:a4:4b:92:36:3f:d9:6b:67:a3:b6:
ea:a1:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:53 2025 by rpki-client