Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72CFAFA0CAC511EFB6CF967C762E951A.roa
File: 72CFAFA0CAC511EFB6CF967C762E951A.roa (raw, json)
Hash identifier: 7q3mZFrHOz5fqmVnEhVb2E0NIzzK12Cnq8KMff8w91A=
Subject key identifier: CC:EB:2E:69:E1:82:2A:D5:CB:18:A6:3D:57:6C:47:5E:7B:C0:6D:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F730
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72CFAFA0CAC511EFB6CF967C762E951A.roa
Signing time: Sat 04 Jan 2025 17:58:06 +0000
ROA not before: Sun 05 Jan 2025 17:58:02 +0000
ROA not after: Fri 17 Jan 2025 17:58:02 +0000
asID: 7018
IP address blocks: 156.238.188.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63280 (0xf730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:58:02 2025 GMT
Not After : Jan 17 17:58:02 2025 GMT
Subject: CN=677976ae-03d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:db:0c:73:01:71:a1:e3:3e:fa:29:f2:86:
35:86:31:a2:3f:da:39:ea:03:c5:b6:5b:3a:f6:a4:
39:f1:71:a4:99:58:0c:b7:0c:fb:38:3f:6b:f6:4d:
8a:0f:42:f8:ac:f9:7a:21:42:fb:2f:76:7c:66:5b:
9a:a2:77:5a:03:73:70:43:7f:96:34:cf:ee:55:68:
67:b2:70:6d:0c:f3:92:4b:b5:19:8d:90:3f:ad:7e:
ef:78:f7:1d:74:2c:46:1f:4f:28:2a:aa:3a:c3:cc:
be:f4:78:35:9d:39:ae:ce:e2:aa:71:bd:6e:69:94:
dd:b4:c3:0d:b7:b1:4c:78:a5:c7:8d:dc:9b:8e:25:
ac:03:59:2c:96:54:1f:c4:8e:c2:57:43:d4:b3:b3:
5e:da:f1:87:57:42:02:fb:f2:08:a8:5f:8e:ac:bd:
15:f9:57:03:1a:41:9d:58:55:d3:8e:25:59:03:91:
52:7d:16:cc:88:0a:06:a9:ef:54:24:85:c3:e9:5f:
19:69:85:b7:4e:81:5d:5b:26:26:ac:31:0d:60:f4:
b2:db:56:4e:80:04:89:31:76:aa:e5:c9:47:01:94:
6e:29:25:bc:27:4c:10:8d:86:ab:0b:e9:24:49:4f:
bc:bf:fc:f7:5b:a2:e0:63:7b:5b:1c:df:db:96:9e:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:2E:69:E1:82:2A:D5:CB:18:A6:3D:57:6C:47:5E:7B:C0:6D:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72CFAFA0CAC511EFB6CF967C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.188.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:ef:48:78:27:3b:61:90:94:6d:3e:8e:35:47:7f:c6:5d:ec:
3a:90:cd:66:e8:94:93:00:01:ca:2e:e4:ba:19:d3:f7:11:f2:
af:b7:d6:b2:96:2f:45:0a:96:70:19:28:01:df:2a:ae:66:2a:
c9:25:20:2d:3d:09:00:1d:48:7f:bc:c9:3d:db:30:a9:0d:0e:
a0:99:ab:d6:8d:96:26:d4:28:e1:96:8d:85:fe:52:26:1d:36:
6d:8c:03:cc:84:89:99:b4:cf:cf:a4:b5:dd:f2:20:67:a0:4d:
2b:7f:e5:90:7d:d9:5d:ef:86:da:e1:ff:06:b4:c9:3b:39:cd:
a1:7e:a9:bb:36:75:30:43:a5:77:3f:d3:e2:90:14:d8:7a:44:
8d:29:d4:58:a7:dc:2c:dc:19:a5:35:6c:ee:51:81:bb:3e:d8:
1a:ff:b4:89:df:7c:8d:62:ce:50:f4:61:6d:27:ca:15:ef:56:
b6:d0:ee:31:11:22:56:fc:ba:fe:37:cb:fe:a0:53:80:a1:0f:
34:bd:70:3a:1b:b8:c7:f7:ed:62:e8:0e:c3:46:c2:3d:af:bd:
1e:e1:6a:72:4b:34:ca:09:b2:e1:52:03:ce:ec:6a:84:ff:34:
64:a0:1c:b7:73:77:db:4d:03:dc:2d:2f:a3:50:d5:9c:c2:7d:
cc:27:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:49 2025 by rpki-client