Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EA230FEC4F511EFAB0D4991762E951A.roa
File: 6EA230FEC4F511EFAB0D4991762E951A.roa (raw, json)
Hash identifier: 9cg2ahKcksM6oI3v22ySIId7i9WlvVC8IqnWTFhxnWE=
Subject key identifier: 33:6B:11:1F:11:BF:F1:6F:E3:7F:B4:05:B1:44:8A:55:38:D4:2C:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F11D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EA230FEC4F511EFAB0D4991762E951A.roa
Signing time: Sat 28 Dec 2024 08:26:27 +0000
ROA not before: Sat 28 Dec 2024 08:26:23 +0000
ROA not after: Wed 22 Jan 2025 08:26:23 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61725 (0xf11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 28 08:26:23 2024 GMT
Not After : Jan 22 08:26:23 2025 GMT
Subject: CN=676fb633-e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:0c:a2:91:82:76:b9:b4:0a:b5:ab:f0:23:
c2:9a:01:72:ce:77:f4:07:bf:70:53:ec:d4:1e:6c:
2d:49:6c:83:25:37:a7:a9:87:04:8d:75:46:37:de:
a8:ec:c6:ba:4d:21:6e:26:8b:78:11:61:a1:6f:88:
26:1a:47:a7:87:77:b7:0c:da:d0:6e:aa:61:38:83:
49:ff:9c:5e:e1:0c:bd:19:89:ab:b9:06:f3:91:72:
60:1e:bb:e6:02:e4:f5:25:ca:56:37:7a:47:87:45:
85:9c:5f:83:dc:07:7a:81:f4:fa:21:65:4d:24:c5:
3e:02:9d:e0:2a:77:4a:7f:01:28:2b:65:59:4b:eb:
80:a1:73:1d:1f:a7:cf:96:34:ff:74:4d:ac:69:db:
fb:95:8a:f6:27:13:07:5f:1b:09:c5:46:cf:af:d7:
68:c9:6b:f7:7c:08:e3:0b:86:8f:66:c6:db:3b:f8:
5a:74:a1:23:3c:82:7f:4b:83:53:ec:93:8d:5c:f6:
37:c7:34:78:a9:6a:b0:25:33:e8:ad:6e:a4:fc:18:
ea:18:9b:7a:1a:a8:25:39:71:df:bc:fd:f5:4d:2c:
84:9f:c1:dd:68:dd:97:5a:b4:ef:8f:04:a9:47:79:
87:78:2b:93:9f:fa:04:0e:b9:a6:bf:9f:0a:94:dc:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:11:1F:11:BF:F1:6F:E3:7F:B4:05:B1:44:8A:55:38:D4:2C:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EA230FEC4F511EFAB0D4991762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5e:67:48:c1:f5:0e:f7:56:ac:0e:e3:2e:00:b7:d9:f6:7c:
8a:ac:a5:92:16:60:a7:5b:94:ad:b1:84:97:6f:0f:41:48:49:
dd:5a:d3:01:f4:b4:9b:bf:98:65:84:a7:7f:cf:30:b5:5f:f0:
45:c0:de:19:af:69:75:dd:69:ce:19:c7:d9:41:13:4d:55:87:
12:1b:7d:01:a5:3d:67:88:f5:f8:be:87:d0:08:4b:38:c2:ae:
dd:1c:09:6b:02:6e:8c:82:03:5e:06:02:21:65:34:75:48:1a:
2e:2e:e5:b1:4c:5d:57:a3:6f:ce:df:45:18:4f:28:2d:a4:c1:
dc:2e:03:fc:bf:55:2e:55:69:3d:da:ed:7c:66:dd:d2:14:91:
92:98:ac:46:d5:42:46:f1:45:26:9c:1d:97:a2:8a:1f:6d:60:
75:1d:0d:99:00:0b:a2:30:f8:21:fd:db:1a:f9:a1:9d:40:d1:
eb:b8:d6:86:d4:09:97:b3:0c:5b:70:b7:8e:5b:a5:d9:1f:51:
0a:b5:da:14:de:37:bc:1b:6c:c3:d1:b9:e4:a4:2a:7b:6b:d2:
75:e0:59:97:39:c2:68:e6:1b:1e:f4:a8:f3:d7:9b:8c:2e:f9:
8b:d1:b0:c7:2c:c7:cc:d3:39:dc:7d:36:7a:51:46:27:77:df:
bd:3c:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:01 2025 by rpki-client