Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/817C61DEBAF711EF98E19466762E951A.roa
File: 817C61DEBAF711EF98E19466762E951A.roa (raw, json)
Hash identifier: zZ5NsywR2ereluo8Z3XoaXCK17OfIKJiaZTZ7knJcSw=
Subject key identifier: 30:0A:5D:EB:D5:AC:DA:6C:3C:1C:F9:67:5D:B1:83:39:33:DF:E6:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/817C61DEBAF711EF98E19466762E951A.roa
Signing time: Sun 15 Dec 2024 15:16:06 +0000
ROA not before: Sun 15 Dec 2024 15:16:03 +0000
ROA not after: Mon 20 Jan 2025 15:16:03 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58349 (0xe3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:16:03 2024 GMT
Not After : Jan 20 15:16:03 2025 GMT
Subject: CN=675ef2b6-fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:75:82:b3:0d:a4:fe:8f:2c:bb:dc:5c:4e:
63:22:58:3f:be:2b:ca:a8:8e:71:37:cf:54:b0:e5:
01:eb:66:64:d2:ab:32:74:8d:9c:39:fb:cb:bc:46:
30:e5:47:1f:ff:bf:b7:7d:06:da:38:e2:2d:8c:15:
d3:89:38:2d:8f:cf:aa:32:68:c9:7c:bb:a3:aa:bc:
7d:2d:aa:75:19:18:01:ea:4d:77:d2:69:fb:96:49:
1a:bc:82:dc:b8:95:24:b1:d0:6b:de:70:88:32:5d:
80:35:49:b7:04:84:d2:16:5e:30:55:a0:c7:55:60:
ec:c5:89:ce:e4:eb:bf:f1:fb:72:dd:6b:8c:1b:33:
40:f5:cd:da:d7:a1:94:fd:2e:c1:ab:0c:cc:be:b0:
e2:a4:4c:c2:b8:c0:54:f4:bd:aa:f5:9e:53:3b:28:
c8:28:1b:b0:76:d1:aa:a3:76:0e:e8:51:61:4e:32:
47:c3:94:b4:08:e2:2e:a9:3f:aa:82:75:ff:4f:5a:
12:25:02:a4:ea:61:e0:71:a2:ac:5c:fb:da:69:25:
a6:9d:7a:47:0a:26:61:30:ee:54:26:69:fc:19:65:
af:de:d0:47:06:8b:be:f9:c6:e6:07:cb:21:37:c2:
f7:6c:84:ce:17:a7:58:3a:4d:e9:8c:f4:7c:f5:ac:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:5D:EB:D5:AC:DA:6C:3C:1C:F9:67:5D:B1:83:39:33:DF:E6:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/817C61DEBAF711EF98E19466762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:90:18:f2:cb:22:fe:72:8b:50:3f:44:6f:ef:8f:94:b4:1b:
76:f7:24:78:88:49:a9:9b:90:d4:e3:20:1a:40:69:10:67:e9:
6b:79:21:ec:06:91:b7:33:9a:c5:d9:d9:b6:a2:51:61:6f:67:
2c:a0:dc:69:13:e9:36:6f:9e:b4:e8:97:01:db:a5:f3:cf:90:
6d:aa:8e:f2:0c:6c:f1:5f:63:e9:f5:74:34:67:4c:6c:ea:d6:
75:72:cd:f9:e6:21:82:2e:6d:4b:13:05:90:21:73:d1:a5:1d:
1a:b4:04:c2:06:2b:fd:5f:18:9c:93:9e:27:ee:e9:6a:61:1f:
be:83:dd:98:ba:ef:bd:9e:b7:ef:c6:c0:31:67:71:65:68:cc:
2d:ce:ba:6c:1c:0f:f6:be:fb:ef:c6:b0:30:8a:7a:e4:32:60:
c1:e4:b2:4e:c6:15:97:17:8d:2a:3d:11:0b:77:41:ef:52:aa:
67:f5:c9:10:f5:2b:01:ee:dd:70:59:f1:5e:bd:fd:b6:37:a7:
0e:22:80:bd:55:87:04:41:a8:e2:3c:0f:e3:49:52:d4:1b:4a:
b4:11:32:e4:db:f6:3c:76:16:6d:61:c8:72:28:03:1b:60:e9:
8e:8c:c5:64:92:12:4c:ac:e3:d1:3b:f8:61:f5:3e:08:36:8a:
6d:fb:f6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:50 2025 by rpki-client