Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84D43676C9A311EF9CBBE25B762E951A.roa
File: 84D43676C9A311EF9CBBE25B762E951A.roa (raw, json)
Hash identifier: ok5e2jmHlJfv2Luo1cnZv7cDqezK84XsN59d4gC12/w=
Subject key identifier: 03:B8:9C:DA:58:0A:B6:B7:DA:38:55:03:46:9E:33:63:E2:A3:DA:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F677
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84D43676C9A311EF9CBBE25B762E951A.roa
Signing time: Fri 03 Jan 2025 07:22:42 +0000
ROA not before: Fri 03 Jan 2025 07:22:37 +0000
ROA not after: Sat 18 Jan 2025 07:22:37 +0000
asID: 139646
IP address blocks: 156.242.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63095 (0xf677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:22:37 2025 GMT
Not After : Jan 18 07:22:37 2025 GMT
Subject: CN=67779042-fcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:1d:4f:ca:22:35:82:e1:06:c9:d2:34:70:
f8:01:8d:2f:03:5d:52:11:1a:cb:c3:9e:b3:f7:23:
4c:1c:c0:a8:c5:ff:2f:1f:b5:f3:38:0f:0b:50:14:
50:2a:bf:24:58:b6:6f:da:1e:42:e0:0f:46:9a:1d:
c1:3a:eb:19:3a:59:22:22:cd:43:09:10:a9:b9:55:
3e:8c:4b:d9:ca:7e:a9:91:90:7a:ed:e5:ee:4c:66:
74:79:bc:16:3f:0d:ca:1c:0c:9e:2a:73:28:48:e2:
f3:70:52:f0:6b:75:d1:2e:40:16:dd:e9:fb:78:de:
89:67:e0:e2:fd:8e:23:65:74:0e:ea:04:79:8f:90:
14:27:6c:ce:9c:1a:a4:84:ac:f9:90:3e:cc:a8:c8:
e1:b1:14:b4:e8:4c:df:73:74:8f:83:20:e2:09:1e:
ac:d0:58:74:d6:ab:72:07:0f:d8:8f:ee:1b:66:53:
2e:eb:9b:d8:0b:ec:50:fa:f3:d6:09:d8:d2:49:cb:
0f:76:7e:1c:d1:8a:f5:07:e1:d2:b2:1d:e7:1d:7a:
94:c1:28:30:c7:d4:83:61:26:b7:a4:2c:af:93:3c:
8b:a2:b9:90:e6:ac:e2:e3:c3:71:18:80:d3:64:70:
69:de:7a:88:86:d7:66:69:77:6c:7a:d2:bc:50:db:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B8:9C:DA:58:0A:B6:B7:DA:38:55:03:46:9E:33:63:E2:A3:DA:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84D43676C9A311EF9CBBE25B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
81:3c:af:b8:75:58:9f:cf:4d:ee:20:22:f0:13:98:63:c3:0b:
59:4c:26:56:47:19:00:50:53:2a:ca:4d:39:b1:b5:7e:e6:68:
03:34:85:a3:4f:ca:76:aa:53:22:2a:87:82:b3:9f:23:6b:ac:
55:39:3d:e3:bd:eb:c0:08:0b:ed:ee:77:3a:ee:07:44:5f:ae:
68:e1:59:a9:56:d5:75:14:cd:1d:a5:f9:a7:5d:b2:18:81:04:
39:6b:f7:b3:87:9f:2a:9a:ce:5f:6d:ed:a1:84:1c:6c:d3:5f:
4d:53:01:8c:8e:2f:d3:ba:a1:72:60:68:e0:ef:ce:63:12:f4:
d8:77:25:7f:68:f4:5a:15:03:e4:b0:e2:3e:23:e3:84:fd:da:
3f:3c:f7:20:7e:55:87:8d:37:97:b3:02:80:4b:93:f7:ac:25:
a4:28:45:90:98:5f:8c:32:71:6b:6d:5b:00:d4:26:6e:5b:a7:
d1:5b:a2:5d:fe:04:b5:43:aa:5c:84:0e:ed:b2:3b:24:ab:c0:
ad:46:5a:f9:01:8b:9c:99:d6:f4:fd:bb:c5:ec:7c:0f:66:2d:
0e:b6:24:12:1e:a2:94:4d:df:8d:93:82:3d:37:4b:13:3e:22:
87:a3:d6:69:91:b1:ba:1c:7d:9b:39:8b:a2:59:97:43:7d:e2:
9f:73:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:13 2025 by rpki-client