Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A4717CED02311EF8D1D1BAC762E951A.roa
File: 7A4717CED02311EF8D1D1BAC762E951A.roa (raw, json)
Hash identifier: +UyBnG2OdO0RzxjfpK5JWMMVE5SbFe1DmgFoyDyM7PQ=
Subject key identifier: 44:3B:0B:E8:81:D2:80:D1:69:B5:50:26:5C:05:A9:62:E2:6E:BB:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01060E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A4717CED02311EF8D1D1BAC762E951A.roa
Signing time: Sat 11 Jan 2025 13:53:47 +0000
ROA not before: Sat 11 Jan 2025 13:53:43 +0000
ROA not after: Sat 25 Jan 2025 13:53:43 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67086 (0x1060e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 13:53:43 2025 GMT
Not After : Jan 25 13:53:43 2025 GMT
Subject: CN=678277ea-f7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:97:e9:9a:c6:9e:a2:8b:a9:4b:0c:c2:14:
6f:8b:c6:2b:0e:5a:de:3f:55:e9:a4:c1:92:a1:d0:
f4:df:77:27:3d:3a:9a:c4:a9:b1:8b:15:bc:fa:f8:
ce:06:8c:77:8c:16:6f:a5:67:4b:42:e7:0e:19:0b:
86:d7:c3:1e:73:5f:f9:a3:7a:33:c1:bb:69:1a:9a:
c7:db:b6:1b:61:f0:bd:03:89:de:d0:48:88:e2:5e:
fe:e8:73:25:9c:31:fe:f9:f9:87:81:93:6a:b3:a1:
08:82:2e:2a:77:62:8d:a1:0d:5c:53:e9:fd:3c:63:
ae:9f:44:7c:a1:22:79:ce:03:f1:53:b0:63:9d:f7:
c1:4a:49:44:a3:6b:bf:4c:13:c2:76:c9:b3:d2:98:
96:6e:25:37:b5:c5:6a:8d:df:f5:d1:2b:98:ca:30:
23:23:18:be:2b:e8:07:52:3e:06:85:18:a9:d9:a0:
f1:cd:6d:dd:7e:64:67:e1:2d:a0:6f:1d:09:ac:07:
16:38:48:9c:bd:85:9a:49:10:2a:fc:d2:8b:23:70:
24:12:21:f8:81:6a:c2:cd:37:69:6e:4c:08:ba:75:
b3:6e:68:1c:cf:ae:ad:1f:2e:23:8d:e5:ab:a8:06:
6d:ba:48:d7:5e:5a:66:ba:1c:13:bf:e5:fe:2f:f4:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:0B:E8:81:D2:80:D1:69:B5:50:26:5C:05:A9:62:E2:6E:BB:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A4717CED02311EF8D1D1BAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0/19
Signature Algorithm: sha256WithRSAEncryption
60:56:03:6b:1c:e3:4d:f0:4f:f6:6d:6d:d4:ef:f5:4e:d4:d8:
15:22:c2:4d:24:84:20:65:01:ff:ea:5b:56:2b:99:d7:df:54:
3a:07:e5:c1:e2:0a:d7:d3:b3:8d:bd:1e:f2:33:00:b1:c4:b8:
44:aa:3e:5a:f0:2c:74:30:70:cb:ec:49:08:e1:85:46:53:57:
5b:fd:55:25:e9:72:35:b7:22:21:a3:57:53:bf:61:9c:d5:a4:
65:87:6b:e2:85:5f:c7:9b:9a:53:73:16:e4:06:1d:70:89:85:
b2:27:a9:d2:c2:88:a9:f9:e5:c5:d3:6c:8f:9b:0e:fc:12:fa:
45:be:39:52:08:82:c6:39:44:ed:da:25:40:d7:5f:f1:4e:d5:
7e:6d:ab:6a:ab:8c:ef:f3:66:6d:1a:2f:e1:4d:f8:a8:c9:23:
7d:bf:86:91:da:e1:e7:cc:4b:80:57:f0:43:fa:39:6c:50:0f:
77:b8:f9:85:0f:53:aa:55:3e:7f:44:d9:d0:18:7f:56:93:8e:
1a:ec:64:57:ac:d6:9d:78:68:f7:86:31:78:73:47:74:45:9d:
e6:30:04:4f:7f:cb:3d:2f:2c:3d:46:eb:f8:b8:89:7d:3d:00:
02:6b:42:fc:31:a4:3f:2b:ca:b4:65:c5:37:6b:59:90:b3:e9:
98:cb:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:55 2025 by rpki-client