Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/851B7386CF5E11EFA5A94E49762E951A.roa
File: 851B7386CF5E11EFA5A94E49762E951A.roa (raw, json)
Hash identifier: hr2oIsfG3uFMy+6DN8mpyTl3gcgCAXhKV3Ec/jBBhGc=
Subject key identifier: C9:FE:DC:51:A8:31:91:82:F7:3D:B1:43:37:A4:79:CD:E5:8D:89:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010555
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/851B7386CF5E11EFA5A94E49762E951A.roa
Signing time: Fri 10 Jan 2025 14:23:54 +0000
ROA not before: Fri 10 Jan 2025 14:23:50 +0000
ROA not after: Wed 22 Jan 2025 14:23:50 +0000
asID: 141372
IP address blocks: 156.238.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66901 (0x10555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 14:23:50 2025 GMT
Not After : Jan 22 14:23:50 2025 GMT
Subject: CN=67812d7a-1ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:f0:2e:d8:54:ee:b0:b4:d6:35:c3:f3:1b:
25:94:9b:e4:55:1c:43:60:c6:59:8e:0e:ca:fe:6f:
b8:77:9c:d4:37:e9:1e:d9:3b:40:16:ff:33:3d:a5:
04:30:8f:53:1a:e3:be:e9:b9:38:4d:f6:02:0f:4d:
e8:a8:2d:ac:2c:58:77:14:ba:dc:24:4f:8d:c0:12:
ed:a4:63:75:21:44:df:97:27:2c:13:25:79:2d:ee:
54:ef:d0:63:36:6b:ff:3e:ba:2e:19:07:23:d8:63:
0b:12:9a:37:b2:ad:75:e1:b2:05:1b:90:18:d1:c2:
02:1c:d4:d4:85:32:8d:42:1f:6b:67:8a:2c:32:12:
78:8e:9d:3d:b5:3d:0a:ff:13:00:3b:09:4d:88:e3:
bc:c9:6f:4b:de:73:62:4c:64:35:79:2e:5d:65:59:
7c:52:51:4d:98:28:5f:3f:fe:44:ad:bb:a6:34:0b:
f5:f0:7b:84:ec:35:06:7e:4b:b4:06:8a:45:aa:ee:
3c:3f:11:02:da:08:31:65:a1:7c:93:e8:b7:14:91:
17:cb:db:0a:f7:b9:bc:46:ee:41:ae:4f:79:1a:53:
f3:30:46:45:8f:83:8b:39:53:71:5e:52:08:d4:75:
21:47:42:65:be:da:b8:0b:e6:29:2b:f9:38:53:4d:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FE:DC:51:A8:31:91:82:F7:3D:B1:43:37:A4:79:CD:E5:8D:89:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/851B7386CF5E11EFA5A94E49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e9:ff:f8:f1:fe:44:2d:67:45:df:ef:62:04:af:91:b8:ca:
6b:74:ab:c6:0a:a3:dd:9f:ba:bc:fc:d7:08:57:f0:01:dc:a6:
e0:88:87:1c:6b:97:97:df:a8:0b:0b:eb:c5:48:7c:a8:91:9d:
3a:d3:ad:44:7c:2f:1f:52:61:ed:92:7c:6f:4f:72:bd:71:24:
3f:cb:d3:bc:37:f9:9d:f3:07:ad:92:a4:2b:c5:f8:1d:d8:11:
aa:26:64:a5:69:0a:32:8b:2a:75:21:a7:15:ca:8f:ba:aa:11:
09:7b:2f:2d:55:41:01:ea:17:7e:3f:b2:58:ba:81:48:53:4a:
c9:d9:18:f4:88:90:d4:a9:d0:13:cc:fc:bd:84:8a:fe:d3:06:
db:15:32:d3:75:e2:0a:a8:f9:60:a8:df:10:a1:f2:c6:21:f8:
fe:c5:3c:c5:41:70:a7:10:0b:07:a3:7d:2e:95:49:3c:75:7b:
46:7d:b0:77:fb:99:af:88:23:cb:e5:13:68:fc:fc:72:9a:c8:
f3:c1:50:9b:72:46:25:2e:e6:85:e7:86:6c:11:30:3c:42:bd:
46:c4:47:2f:bc:92:7c:2b:c8:5a:9f:a9:56:be:28:3c:0a:68:
5e:21:7a:ef:88:4c:06:50:38:4a:70:63:6d:4a:26:72:cf:1a:
33:45:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:03 2025 by rpki-client