Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B8A31EACE9B11EFBB4F6072762E951A.roa
File: 7B8A31EACE9B11EFBB4F6072762E951A.roa (raw, json)
Hash identifier: Xid+CsgvyZ1A2BbCvnULuhv8sysWvpg4GAT+qQLAg3U=
Subject key identifier: 6C:2B:FA:B0:BE:3D:FB:31:60:A8:DA:72:E7:30:27:28:2B:FB:AA:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01041E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B8A31EACE9B11EFBB4F6072762E951A.roa
Signing time: Thu 09 Jan 2025 15:07:46 +0000
ROA not before: Thu 09 Jan 2025 15:07:42 +0000
ROA not after: Fri 24 Jan 2025 15:07:42 +0000
asID: 7018
IP address blocks: 156.238.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66590 (0x1041e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 15:07:42 2025 GMT
Not After : Jan 24 15:07:42 2025 GMT
Subject: CN=677fe642-93d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:34:81:68:f5:35:cc:b2:c6:9d:85:e9:2c:
77:8e:04:2a:d8:8b:8d:ec:6f:d3:16:fd:89:a8:cb:
64:93:85:6d:35:0f:3f:98:56:ab:2f:e4:77:a4:37:
53:1c:63:f5:f0:c0:b1:fa:af:73:73:11:cf:d2:ce:
19:94:70:29:ee:95:04:2d:cf:ec:cc:02:7a:9e:59:
ff:1d:c2:2b:23:fb:d9:65:6f:a1:ae:c3:94:de:62:
31:fa:9e:9d:19:20:99:fc:23:af:90:57:c0:cc:0b:
1e:25:82:c1:7a:4e:bf:47:99:94:a2:b1:0f:d8:18:
2c:0e:e7:66:68:8d:44:3e:a8:6a:f5:96:a9:9e:46:
6b:fa:51:21:bb:62:41:cb:d1:65:4c:92:0e:7b:b5:
9e:cc:d0:d0:92:2d:cf:af:63:ae:73:4d:92:9f:23:
3b:c4:e5:e5:2e:44:00:28:4a:35:cf:d6:cd:4d:83:
a6:16:5b:ab:ac:2e:27:2d:cd:49:4f:7c:1b:ec:1a:
15:4b:d1:17:b2:5d:07:38:0a:f3:04:c7:ae:d7:92:
81:3b:db:30:5f:85:bf:8d:20:e5:d6:ab:e6:c6:1d:
fa:07:7f:de:cd:34:96:62:11:6d:f6:54:2f:bf:5b:
f2:b6:9a:7f:44:c4:90:59:9a:98:3d:8e:72:03:a0:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:FA:B0:BE:3D:FB:31:60:A8:DA:72:E7:30:27:28:2B:FB:AA:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B8A31EACE9B11EFBB4F6072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:62:1a:1b:36:7e:09:cd:44:07:4e:90:71:43:b0:ec:e1:62:
5f:4c:d2:c8:b3:be:a4:79:a6:e2:5a:52:1e:c7:7e:70:a5:05:
a0:e8:97:48:2a:f0:83:21:b5:6d:7a:24:33:67:cb:00:25:75:
4f:c5:89:33:e3:35:d0:93:80:23:c2:47:9f:c4:76:03:4b:d6:
48:59:10:14:d8:da:5b:be:67:3a:64:71:0d:85:f4:f0:f4:39:
41:a1:d4:ca:93:93:f7:0e:90:b5:a9:f3:a7:a3:0c:1b:22:67:
27:b4:59:d7:7e:d3:55:1f:ac:c7:c7:77:82:4c:5c:5c:59:51:
21:96:57:7d:40:8b:04:b2:12:3a:13:db:d7:c8:2f:25:3c:b3:
a2:0e:f3:b3:36:56:00:eb:6f:c7:d0:e3:db:d1:b5:70:7f:9d:
9f:05:2a:98:b0:74:45:f0:96:6b:bf:c6:2f:84:64:18:fc:49:
db:26:67:b3:0b:95:6e:3a:aa:84:c2:b8:cc:db:23:30:4d:ad:
54:56:59:0a:f0:68:07:0a:53:76:55:93:64:22:ee:9b:bb:b6:
86:36:1c:39:a7:2d:05:2f:b0:9d:a9:49:15:3c:e9:2b:26:75:
6a:75:ae:35:57:c2:a0:58:63:31:15:51:3f:a7:22:ab:40:31:
61:a9:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:02 2025 by rpki-client