Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831C42F6C9B211EF8C8DCFB8762E951A.roa
File: 831C42F6C9B211EF8C8DCFB8762E951A.roa (raw, json)
Hash identifier: +dpCDj/pY6KWBUCT4N0/TMWnHUYpzucLRh/NONGIZpU=
Subject key identifier: 4F:60:30:93:74:B3:98:3F:4D:A6:3F:DA:1E:F5:80:CC:F8:75:F5:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831C42F6C9B211EF8C8DCFB8762E951A.roa
Signing time: Fri 03 Jan 2025 09:10:01 +0000
ROA not before: Fri 03 Jan 2025 09:09:58 +0000
ROA not after: Sat 18 Jan 2025 09:09:58 +0000
asID: 141883
IP address blocks: 156.240.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63165 (0xf6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:09:58 2025 GMT
Not After : Jan 18 09:09:58 2025 GMT
Subject: CN=6777a969-9085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:1e:8b:55:85:04:d7:3c:c0:77:bb:df:d7:
a3:3a:12:e9:4f:02:74:b0:c2:99:88:5f:82:e9:b0:
cb:65:a8:e3:ca:97:c4:22:2f:fb:8c:ee:67:86:d5:
61:39:4c:df:3d:84:09:3c:62:32:12:e1:3b:0b:1b:
6f:f4:f3:31:64:f1:b9:66:56:78:f3:46:9b:4d:5c:
e4:06:bb:4d:04:96:78:63:88:d1:ac:88:46:ca:7a:
42:6c:67:f6:a3:65:a1:58:f5:ce:db:07:40:0a:65:
f2:38:30:43:17:38:08:33:8b:54:a4:97:a7:e4:08:
e7:03:fe:7c:66:08:e1:75:3a:6e:06:be:0b:91:eb:
ab:cf:f4:34:d1:44:de:ee:90:fe:3c:40:96:74:df:
ec:82:bc:56:39:3b:50:47:b7:2a:83:57:c0:74:e6:
77:2b:17:b9:9b:cd:1e:04:be:5f:d3:60:fe:16:78:
da:a2:53:80:e4:49:86:58:68:c7:62:d8:29:74:d2:
6c:18:03:5c:96:31:22:97:32:e8:91:91:75:7b:5e:
35:ae:16:43:ad:66:2b:8d:ac:91:76:43:57:ff:e1:
91:2a:02:93:b6:30:a6:3f:21:37:fc:fb:97:46:7a:
2b:87:61:32:ee:8d:1a:43:1a:03:5f:83:fc:f0:d7:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:30:93:74:B3:98:3F:4D:A6:3F:DA:1E:F5:80:CC:F8:75:F5:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831C42F6C9B211EF8C8DCFB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.32.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:f9:67:d5:13:a1:13:9f:7f:72:d9:99:eb:ae:c6:25:a1:bd:
6b:0e:04:75:a3:04:63:c3:ba:53:b0:e8:9b:82:66:0a:ee:39:
f1:23:7c:38:c2:1e:38:04:30:10:b8:b1:21:a6:23:be:81:00:
f5:19:7e:19:0f:40:47:83:eb:7f:76:8f:d8:aa:b0:0e:26:3d:
18:df:fb:80:d3:20:ed:19:9a:25:3f:d9:6f:83:2a:fa:38:ce:
ab:0d:23:d7:d6:71:93:a9:ea:3f:bf:a3:02:03:43:84:80:89:
66:4e:62:f9:3b:21:7b:d5:9c:5d:98:2c:aa:c5:09:0c:15:4e:
ba:91:90:cb:11:06:a8:fe:0f:9c:ed:92:df:e0:82:21:a0:99:
b9:c8:1d:7b:06:d6:ed:dd:5e:b5:e5:42:79:7b:1d:97:fa:f4:
88:ea:35:1f:33:bd:b7:a3:e5:a5:d0:f8:57:bc:5a:e0:be:39:
14:74:b6:86:0b:7a:57:f0:1c:fb:83:71:9e:90:09:c5:4d:e7:
2b:13:8f:ab:ed:ef:7d:94:48:a9:74:be:cf:18:7b:06:02:d4:
96:4d:53:01:6b:2b:a0:a3:d5:f0:3e:8a:c3:6f:25:0e:20:e5:
dd:37:f3:ad:0f:e7:f4:16:2c:d4:4c:06:96:ab:dc:f0:13:24:
3b:a9:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:41 2025 by rpki-client