Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/707D1E64CBEB11EF86654951762E951A.roa
File: 707D1E64CBEB11EF86654951762E951A.roa (raw, json)
Hash identifier: +UoID6CEmiOurU41tMZSYXd030yxsf2pnJA7Szn+u+Q=
Subject key identifier: 52:E5:F5:BE:AA:DB:54:5B:BC:88:52:EC:65:E3:1C:D8:C4:F4:F4:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F826
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/707D1E64CBEB11EF86654951762E951A.roa
Signing time: Mon 06 Jan 2025 05:02:34 +0000
ROA not before: Mon 06 Jan 2025 05:02:30 +0000
ROA not after: Thu 16 Jan 2025 05:02:30 +0000
asID: 135377
IP address blocks: 156.232.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63526 (0xf826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 05:02:30 2025 GMT
Not After : Jan 16 05:02:30 2025 GMT
Subject: CN=677b63ea-15d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:ae:10:22:83:50:df:36:12:00:de:19:7b:
1d:ec:a3:cc:44:af:1c:f2:5a:b6:89:6f:7b:2c:a9:
b0:3f:d6:08:20:d6:78:cf:3e:ed:3b:61:89:da:45:
8a:73:fe:e4:ef:3f:e2:a5:9c:1f:28:1f:66:9f:ed:
45:06:91:5b:fa:cb:38:7f:06:01:46:67:d2:4a:72:
ee:9b:7f:a4:c0:91:8c:a0:23:aa:f3:09:d1:c7:1b:
66:cc:ec:9a:24:b9:a3:ba:6c:86:49:38:22:02:20:
2a:3a:c5:c2:f6:d9:b4:7a:7d:75:2b:89:6f:33:c7:
89:6e:97:cf:04:9a:a7:ce:08:0b:1d:12:47:6f:eb:
56:f6:3f:92:57:d0:6f:d3:69:a0:35:94:bf:21:86:
6e:4c:1b:1d:a4:8a:38:64:60:f3:c2:33:ee:0c:31:
a8:06:ca:1d:64:35:be:4c:c5:ba:8b:76:03:2a:27:
bf:28:fd:01:56:55:5a:27:66:2d:b0:eb:28:0b:e9:
3b:8e:34:61:5f:e0:19:cc:e0:cc:b9:85:db:99:ca:
60:aa:f0:eb:5a:38:2d:e1:f6:62:38:4b:d9:92:85:
12:4b:04:c1:b8:99:19:8c:83:76:4f:33:22:eb:46:
0d:80:60:6f:1b:af:40:c6:2f:26:98:71:59:97:68:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:F5:BE:AA:DB:54:5B:BC:88:52:EC:65:E3:1C:D8:C4:F4:F4:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/707D1E64CBEB11EF86654951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
05:9d:83:ff:a3:d6:d9:62:45:a8:1d:1f:f5:32:b4:bd:e4:e7:
1a:bc:4f:a1:e1:c2:80:c9:74:d4:fc:f3:c6:91:01:43:e2:3a:
7e:96:70:b4:b2:c5:81:f1:c5:71:8d:c2:f4:31:d2:ad:e3:6f:
2a:d1:3d:76:f6:95:d0:fd:95:7d:35:1b:4e:7d:63:41:50:be:
a7:77:a4:72:0f:0c:06:73:98:20:45:e8:3c:4c:d3:39:73:4a:
4d:88:b0:b0:c9:2a:0c:24:5b:ad:ac:85:84:d2:6a:d2:e1:f5:
01:d9:e1:a3:41:f9:25:29:89:ff:01:05:9f:a6:84:a7:50:53:
df:d1:d2:97:38:96:b0:de:a2:b9:38:2b:d3:63:e8:0d:0f:38:
45:1b:78:58:e7:38:b4:2a:67:fc:0c:c5:de:9d:f4:d9:c1:3b:
5c:a3:54:96:d5:ac:8f:77:2d:23:a2:e5:59:9a:82:02:fa:15:
d7:b5:b4:60:15:75:bd:d3:63:43:e5:4e:17:7d:cd:97:83:b0:
a1:49:81:49:71:e6:13:97:ff:62:9d:22:a9:76:49:42:2b:44:
53:7a:e7:10:3e:ac:ad:3e:f4:96:12:2a:53:f2:2c:12:b2:b7:
9e:2e:6d:87:37:3f:b7:85:75:57:d3:97:2f:c6:e9:38:9a:d3:
a5:2d:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:24 2025 by rpki-client