Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D8F7AECCD911EFB468CBB5762E951A.roa
File: 70D8F7AECCD911EFB468CBB5762E951A.roa (raw, json)
Hash identifier: IFrr5GofVSXXXYD+Oc4nShXROBqrxPIrpwupFREnZ3A=
Subject key identifier: 8C:AF:C9:60:C0:51:E0:D5:CC:A4:80:88:3D:A2:95:C7:B0:06:4F:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D8F7AECCD911EFB468CBB5762E951A.roa
Signing time: Tue 07 Jan 2025 09:26:14 +0000
ROA not before: Tue 07 Jan 2025 09:26:11 +0000
ROA not after: Sat 18 Jan 2025 09:26:11 +0000
asID: 152092
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64314 (0xfb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:26:11 2025 GMT
Not After : Jan 18 09:26:11 2025 GMT
Subject: CN=677cf336-cf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:91:0b:e3:f1:ac:9a:78:d5:9e:8c:fe:44:
d5:70:02:e8:ab:c7:97:03:3e:0e:ab:d1:b7:72:40:
95:61:8f:db:f7:81:e4:cb:7e:34:89:a7:0d:d1:da:
87:8d:70:88:cb:bc:59:a3:dc:00:73:8d:c4:66:55:
b5:4b:da:52:7b:33:3a:6b:46:37:e6:a8:64:23:0f:
2d:d5:8e:3a:1c:33:b7:48:9c:68:bf:c2:e6:f1:48:
2b:7a:1a:a7:50:36:8b:6f:92:f9:91:f3:58:d0:22:
ec:4b:b4:03:fc:77:77:a9:ec:4a:5d:f2:bd:43:3b:
70:31:31:cf:dc:ff:2d:4a:68:41:40:28:b0:7a:59:
1c:95:86:a4:57:5b:b9:c2:aa:4e:3a:60:51:ba:00:
df:77:50:45:78:54:e2:ce:1c:e8:35:0c:76:38:25:
1c:5e:54:37:aa:10:0a:01:cb:f7:4e:34:91:12:bb:
e5:71:73:fa:21:da:68:64:31:0f:3b:24:88:48:98:
c6:8d:8c:44:0a:90:21:aa:60:71:ca:cb:99:08:06:
a0:f5:6e:7e:f5:28:16:f0:1c:9c:e4:ff:1b:1a:b2:
bc:86:22:9c:08:c8:93:9e:92:b1:21:6f:e1:10:f5:
ab:a8:ba:f9:88:64:1a:33:4f:97:fa:6e:18:6c:b2:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:C9:60:C0:51:E0:D5:CC:A4:80:88:3D:A2:95:C7:B0:06:4F:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D8F7AECCD911EFB468CBB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f5:dc:b0:5a:01:9f:d7:5f:2b:a3:f5:63:60:30:da:2f:c1:
b0:44:1b:9f:05:6a:cb:0d:df:f7:c9:88:5a:af:74:7e:41:c1:
54:66:18:99:64:91:fd:c0:95:61:3b:7e:72:ba:3c:ff:7a:8d:
b0:ae:86:c9:fd:c8:5c:f0:9a:44:e0:c0:a3:4e:01:88:68:86:
f1:62:b3:07:78:d7:4a:0e:96:a0:dc:73:83:89:09:75:9b:36:
99:9e:d0:10:2f:67:39:08:28:9b:3e:f2:8e:29:d9:bd:05:33:
08:4d:46:10:da:76:36:74:be:da:9c:0c:17:7f:32:f8:0a:e3:
00:fe:3f:87:a3:ae:b1:f2:f9:39:d7:7d:09:d2:02:2e:4f:ab:
c7:69:88:4a:d3:80:81:e8:e0:3c:bc:01:6e:b4:60:08:4e:5e:
a5:f7:d3:11:8a:d4:fc:e5:87:64:22:f8:70:9b:bc:a8:ce:c6:
d5:93:0d:40:40:95:eb:73:fc:1e:8c:ee:25:d9:10:8d:84:1c:
4a:c9:19:84:5b:01:9d:5e:85:98:34:1c:bb:c8:15:85:a1:0c:
ed:f4:9c:c7:ff:f8:52:f3:8a:eb:36:01:79:47:85:c9:f4:0a:
24:45:de:92:ef:93:ce:f0:d2:d9:00:3c:07:66:3b:7a:60:4e:
dd:16:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:37 2025 by rpki-client