Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C82A86D30D11EF9A6D939E762E951A.roa
File: 73C82A86D30D11EF9A6D939E762E951A.roa (raw, json)
Hash identifier: hd2kPNhy/WUaJsWucG8oRwr6wRu0S1PCAwnDtNH5gMM=
Subject key identifier: 2B:67:53:A4:48:24:A2:06:FF:44:8D:55:E5:27:3E:62:05:9F:21:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010835
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C82A86D30D11EF9A6D939E762E951A.roa
Signing time: Wed 15 Jan 2025 06:53:40 +0000
ROA not before: Wed 15 Jan 2025 06:53:37 +0000
ROA not after: Mon 27 Jan 2025 06:53:37 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67637 (0x10835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:53:37 2025 GMT
Not After : Jan 27 06:53:37 2025 GMT
Subject: CN=67875b74-5d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:6b:62:7a:81:14:52:7d:fc:11:88:37:18:
e7:82:ed:6a:1b:eb:8a:5a:6d:80:d2:60:20:b3:c3:
11:8e:13:5f:a8:b0:a4:37:95:5d:27:8e:4f:af:6f:
fd:b7:fc:2e:df:42:3d:be:60:21:4d:ff:2e:3f:9c:
45:32:d9:dc:bb:a1:93:79:bb:f0:26:3c:c5:6c:58:
54:de:b7:49:11:2c:7c:04:1d:43:5f:54:cb:f7:d9:
d9:f7:c6:33:0a:02:f8:98:7e:cc:93:17:17:f1:9e:
96:d6:6c:4a:4c:bb:2f:ed:e0:a9:a4:69:f0:c6:01:
49:45:22:4f:93:9b:3e:34:aa:68:68:99:13:8f:63:
df:06:d4:9c:83:75:d8:d9:42:b3:45:37:62:21:36:
0a:85:f8:3a:31:31:c2:42:6b:1a:ad:20:19:47:d9:
c6:6f:09:7d:a9:ec:d0:e1:41:9a:aa:ce:de:97:a6:
fa:16:be:b1:62:36:89:43:b1:6e:d2:08:7c:f4:5a:
0c:db:ce:19:43:c8:ae:1b:c7:55:8a:b6:70:c9:88:
dd:94:2f:04:af:22:2d:bf:e7:3e:d1:6e:c1:25:b4:
7d:6c:b6:11:46:fc:08:4a:a4:46:ab:7f:67:33:4c:
7e:c0:eb:20:0b:1f:b2:1a:b4:83:4b:0f:a6:37:40:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:53:A4:48:24:A2:06:FF:44:8D:55:E5:27:3E:62:05:9F:21:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C82A86D30D11EF9A6D939E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
25:22:05:8e:69:ad:57:a7:bf:9f:fd:4a:25:86:a1:3d:45:9c:
57:6c:86:e7:d3:39:17:a9:2c:35:5a:56:78:f2:8a:42:00:a9:
b2:f7:6a:b0:a5:19:90:f5:fb:0b:a9:aa:6e:8f:49:4c:96:db:
6e:9d:d7:6f:0d:48:39:0f:12:55:2d:70:1f:4d:2a:39:67:18:
f4:fb:ae:6f:f5:68:fe:6d:0a:fc:75:84:38:e0:1e:c6:e0:79:
8a:35:6a:8e:d2:7a:74:c8:7a:63:5f:40:46:76:6f:a0:38:90:
52:f2:2f:4c:8f:43:c9:76:27:98:9b:b3:99:d0:44:72:42:91:
46:be:22:40:c0:9b:7a:bb:6a:5e:76:3c:2d:48:6b:5a:1e:56:
27:97:bf:ca:94:84:74:c5:e8:19:f5:a9:ae:fa:6b:d6:fe:b5:
42:99:54:52:10:0e:39:f6:25:62:f5:8a:91:24:6b:d9:28:91:
fe:87:5f:12:fe:df:13:0c:7c:d0:ae:48:91:aa:ae:8e:cc:b9:
bd:4b:ee:ef:07:4b:a8:dd:43:74:8d:f0:27:f3:b8:d7:6e:9c:
3f:c6:9b:f3:04:cc:e8:cb:1d:89:5e:17:a4:74:6d:f1:99:66:
ca:b5:ef:9c:6b:71:30:0b:1a:de:45:d8:ce:3e:09:3a:fd:74:
1a:43:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:13 2025 by rpki-client