Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87C057A8C10011EFA986B065762E951A.roa
File: 87C057A8C10011EFA986B065762E951A.roa (raw, json)
Hash identifier: 0M8YnWANVtTGFKdGrDaEbl6bt3S12ctstYLm9Q7OIzs=
Subject key identifier: 9C:3C:65:A5:B9:5B:F8:4F:6D:41:C0:05:55:97:58:8E:8A:8B:53:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E812
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87C057A8C10011EFA986B065762E951A.roa
Signing time: Mon 23 Dec 2024 07:35:49 +0000
ROA not before: Mon 23 Dec 2024 07:35:46 +0000
ROA not after: Fri 31 Jan 2025 07:35:46 +0000
asID: 203020
IP address blocks: 156.232.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59410 (0xe812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 07:35:46 2024 GMT
Not After : Jan 31 07:35:46 2025 GMT
Subject: CN=676912d5-36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:47:af:21:49:8c:ea:8c:c3:bd:3a:7b:e0:
bb:6e:ec:1f:62:e2:ff:45:62:68:7b:d0:12:d5:45:
1b:f4:8e:4d:0d:b1:39:2c:ba:bf:59:04:9f:49:88:
43:74:83:90:f7:5c:17:df:ec:3d:45:72:ba:66:c8:
5f:19:07:7b:1a:30:3c:a9:9e:97:a7:df:4b:eb:ac:
a6:ee:a1:a4:00:62:c1:2b:7d:6b:44:5b:4a:a5:36:
1e:11:71:2c:79:ae:7d:5c:8e:e3:03:64:2b:68:07:
9a:d7:9e:de:76:a4:fd:f8:5f:c2:7d:79:b5:5f:7f:
69:42:48:74:3e:c8:92:02:34:f5:bd:80:f5:6b:7e:
80:45:ce:92:ea:aa:21:12:cc:28:5b:7a:2a:c3:f9:
6f:d1:2c:a7:1b:53:19:64:6b:35:b4:b1:ec:63:04:
0f:3d:c5:31:ac:f0:c7:18:4b:de:d3:92:95:20:b4:
f7:cd:af:db:a1:8c:81:58:cc:7c:0a:6a:af:6c:e0:
c7:c7:c9:1a:ce:60:57:af:4c:3b:b2:32:26:07:45:
52:2e:e9:05:c9:dd:70:90:7c:0c:65:69:20:64:8e:
aa:8c:dd:63:b1:d7:f6:16:23:5f:54:df:13:7f:60:
56:06:8c:2d:09:a9:51:33:7f:01:6c:21:38:96:53:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3C:65:A5:B9:5B:F8:4F:6D:41:C0:05:55:97:58:8E:8A:8B:53:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87C057A8C10011EFA986B065762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.112.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:3e:b1:c1:69:05:4d:4f:b1:5a:3c:5c:3d:ae:d0:2a:43:5a:
ff:37:f3:97:98:90:36:63:cb:da:7d:11:aa:37:9a:70:96:9d:
27:f8:aa:c7:ce:f0:03:ea:a2:af:70:14:66:1e:cc:73:fd:e2:
21:fb:7b:33:ae:d2:ca:c0:bf:85:31:0e:56:4f:ed:47:bf:59:
bb:ee:27:74:67:21:74:9d:b2:da:26:f5:14:57:fc:9e:78:b8:
36:97:c6:ee:df:6e:28:1e:31:91:4a:34:fc:8b:f4:80:22:bf:
30:d0:06:7f:32:f5:fd:33:47:ae:1a:b0:1e:89:10:6b:39:6a:
f8:19:c4:5f:ec:97:73:45:4f:67:fd:f5:7f:c6:d0:14:68:79:
e9:a0:a6:2b:79:1f:de:f4:d4:ff:c3:47:da:fd:93:3c:af:33:
b6:0a:55:fb:2d:99:69:e4:cc:a4:73:b4:65:9b:49:1f:64:0e:
94:26:70:19:5a:24:14:ee:36:c3:9a:0b:ab:59:1f:3a:71:c7:
9c:31:87:d4:cf:cd:ef:0e:68:6b:ba:f1:9f:1e:f3:73:98:89:
18:2f:d4:b1:89:b1:32:08:4f:1f:f4:4e:bf:8f:4d:33:0b:33:
5a:5b:96:a9:73:34:e1:b8:ad:05:6a:8f:ca:f9:62:a6:63:3a:
af:8b:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:37 2025 by rpki-client