Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8013E12CCCF011EF8D517B48762E951A.roa
File: 8013E12CCCF011EF8D517B48762E951A.roa (raw, json)
Hash identifier: pRk9JHaSoplHYsC6kJyiGgGyecDUh3i0JyzONObwjcs=
Subject key identifier: 77:B3:92:9D:6D:32:CE:A5:0E:91:BB:AD:E2:DF:A8:05:43:1A:44:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8013E12CCCF011EF8D517B48762E951A.roa
Signing time: Tue 07 Jan 2025 12:11:18 +0000
ROA not before: Tue 07 Jan 2025 12:11:15 +0000
ROA not after: Sat 18 Jan 2025 12:11:15 +0000
asID: 62468
IP address blocks: 156.245.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64525 (0xfc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 12:11:15 2025 GMT
Not After : Jan 18 12:11:15 2025 GMT
Subject: CN=677d19e6-e568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:bd:96:ac:05:37:41:d2:90:33:ba:3f:e5:
88:ba:3f:c7:47:c6:c0:3e:0f:91:02:66:2f:0a:a2:
88:a7:47:72:c0:e4:c6:cf:33:98:05:21:08:be:24:
cc:1d:5b:b2:bc:50:2f:25:01:18:ed:c2:15:93:1e:
94:d9:13:cc:88:98:4b:60:74:32:f4:89:18:aa:33:
09:0b:fc:b4:b8:d4:a9:4d:dd:bf:fa:7a:72:73:44:
c6:87:1a:2c:f6:bb:e8:e9:78:ec:15:07:96:a5:04:
f0:73:a3:30:76:d2:16:92:31:a7:2b:d0:23:8f:8c:
c9:0d:02:6a:b4:73:ad:d6:23:72:df:0e:ae:6d:39:
17:7d:23:a9:09:ef:f6:77:94:99:71:8e:4f:25:67:
a9:b0:fa:2e:16:f7:57:2e:dd:f6:c3:05:75:0e:01:
a3:14:d5:d3:15:2f:3a:82:52:3f:15:48:52:83:ad:
86:88:e0:bb:95:b5:cb:0a:6b:97:5d:29:97:e7:c6:
e2:be:a8:cf:b5:38:9b:5d:ed:82:2d:47:fc:3b:06:
86:82:77:ff:4b:b3:46:26:93:f8:91:2b:d9:19:c6:
b0:1e:83:3c:54:62:f3:37:f0:4c:14:42:06:36:4b:
4d:c9:09:9b:23:e6:00:38:9d:21:dc:fb:6e:83:a9:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:92:9D:6D:32:CE:A5:0E:91:BB:AD:E2:DF:A8:05:43:1A:44:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8013E12CCCF011EF8D517B48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f9:cb:2d:a5:81:8a:2a:97:56:f2:2c:d3:e2:55:5e:6f:6a:
83:50:d2:9d:2f:61:42:cd:42:86:fc:94:7b:00:e7:34:62:8a:
09:d4:6d:c5:59:81:e8:81:e4:c4:ce:84:61:a9:dd:46:87:d6:
9f:d7:47:01:9e:96:79:88:e3:a4:10:d6:fb:aa:9d:4f:83:cb:
f2:7d:06:dc:45:97:30:38:1b:25:c7:09:ec:e0:c4:59:a7:22:
de:57:a2:94:98:52:50:f4:91:10:ce:e3:ce:b1:c8:3b:93:3d:
0b:0b:a1:f2:57:5b:b1:6b:47:ad:a7:a0:53:31:a2:71:9f:29:
41:47:e8:05:96:ef:e2:29:df:12:e1:7e:8c:09:3a:bc:cb:7d:
68:e9:3a:71:cc:42:b9:f8:21:2f:19:78:f4:f0:70:01:b5:85:
48:67:cb:c6:cd:13:cd:1c:73:6c:d9:64:0c:86:59:68:0e:4a:
2d:1d:ef:11:63:32:ee:93:b8:47:d3:4a:ff:af:c0:1f:2d:96:
99:10:3a:b0:c2:0c:77:57:f7:5a:61:5c:ad:34:35:e0:42:f1:
3f:e6:2e:63:e2:38:15:50:63:17:53:5a:a8:54:ab:c4:b5:81:
b7:27:bb:4d:af:3a:bd:6e:80:7f:00:e2:26:8d:e6:66:42:b3:
e7:7d:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:35 2025 by rpki-client