Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7134C186C51511EF9B1FD15A762E951A.roa
File: 7134C186C51511EF9B1FD15A762E951A.roa (raw, json)
Hash identifier: c4luK+5kVFD3OTnzAGqw+vjcz4bTWAQLh2N1+OeNbAI=
Subject key identifier: C8:81:64:74:7C:7F:20:89:8C:48:A5:C3:8A:57:F0:AB:45:0E:D2:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F1A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7134C186C51511EF9B1FD15A762E951A.roa
Signing time: Sat 28 Dec 2024 12:15:36 +0000
ROA not before: Sat 28 Dec 2024 12:15:32 +0000
ROA not after: Sat 01 Feb 2025 12:15:32 +0000
asID: 203020
IP address blocks: 156.253.200.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61863 (0xf1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 28 12:15:32 2024 GMT
Not After : Feb 1 12:15:32 2025 GMT
Subject: CN=676febe8-6255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:d9:95:c7:02:f5:28:e7:69:5b:5e:dc:93:
9c:24:c0:08:3a:3f:a5:f5:dd:44:42:81:1a:23:d1:
56:d2:49:90:9e:91:c2:cf:74:82:34:e5:e4:06:27:
83:4f:0d:85:d1:5f:17:a3:48:92:90:80:6a:e7:be:
c3:cf:34:1c:62:46:cd:ff:e2:9d:bc:c2:d7:3b:72:
91:41:b8:50:cd:52:96:43:94:45:18:f6:71:ed:b8:
53:1a:cc:41:cb:5a:9b:36:5b:66:52:ec:ac:e2:ae:
03:b9:b5:70:84:de:94:1a:66:52:70:9c:66:4b:65:
f8:94:75:fd:6f:b4:bf:79:2e:96:36:82:13:a1:cb:
aa:ca:50:e2:c3:21:e5:a7:4d:bf:2f:90:2c:f2:4a:
fc:96:ba:5d:b4:de:66:93:ca:80:85:b8:48:e9:77:
65:e7:1a:9d:0a:29:69:e3:46:97:8b:c2:58:14:9e:
27:be:84:0a:fe:72:f9:56:09:b6:a0:02:0d:49:ea:
30:27:51:ad:63:fb:36:71:78:9d:02:32:eb:50:1e:
2f:9a:cc:f6:16:dc:48:21:e7:57:fc:78:55:80:e8:
3d:38:33:7c:6e:aa:85:18:17:e6:f5:5b:ab:c0:7b:
05:9f:1f:ff:bb:13:91:15:67:74:5d:71:5f:08:3c:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:64:74:7C:7F:20:89:8C:48:A5:C3:8A:57:F0:AB:45:0E:D2:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7134C186C51511EF9B1FD15A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.200.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:a6:86:d7:37:a7:31:db:62:eb:87:2c:98:85:4d:a8:ed:fb:
ee:11:c6:bd:10:c8:8a:a2:51:64:06:5b:cb:e0:25:64:a8:8a:
b6:c5:0d:90:61:23:d2:ff:ab:b5:ae:98:08:99:00:62:93:c6:
c4:7e:03:94:c0:12:1c:56:d0:c6:29:76:8d:56:1e:6e:52:90:
79:b2:04:1f:de:7c:d6:91:ff:c9:36:ed:fe:31:7b:ba:4a:af:
4c:7a:61:20:28:2c:1a:a7:db:f9:df:a5:d2:b6:29:e8:bf:f3:
19:52:72:cf:54:58:f6:47:a6:d9:9e:bc:bf:58:04:32:87:24:
4c:e4:f2:97:40:8d:74:1a:ba:20:72:65:96:21:82:b8:93:b5:
13:30:55:59:a3:12:52:8f:92:a6:46:72:ce:68:80:20:ba:05:
51:29:d1:d4:c5:54:0c:6a:ff:54:64:e0:28:60:b2:e8:e4:f5:
3e:d2:75:54:da:02:d5:03:e9:86:84:9d:c8:53:f7:78:75:cc:
f3:df:37:ac:79:11:7f:8e:da:86:c9:54:35:f5:01:58:de:1f:
b1:c6:06:7b:e3:13:55:ce:86:f5:ff:2e:7f:3c:24:7e:d1:35:
fc:63:2b:58:60:38:19:6f:80:b7:97:9f:fc:56:90:e7:31:8b:
2a:1d:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:55 2025 by rpki-client