Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88929DE0D01811EF8F43F268762E951A.roa
File: 88929DE0D01811EF8F43F268762E951A.roa (raw, json)
Hash identifier: m3Pqhdt+rrjGdi3Hn6OCUQWV/HBqZEEWrlAzuIrB6K4=
Subject key identifier: 74:37:8D:A4:AC:57:4F:0F:99:EE:8D:CA:A5:0E:98:BE:3D:25:BE:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88929DE0D01811EF8F43F268762E951A.roa
Signing time: Sat 11 Jan 2025 12:35:26 +0000
ROA not before: Sat 11 Jan 2025 12:35:22 +0000
ROA not after: Sat 25 Jan 2025 12:35:22 +0000
asID: 139646
IP address blocks: 156.242.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67050 (0x105ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 12:35:22 2025 GMT
Not After : Jan 25 12:35:22 2025 GMT
Subject: CN=6782658e-165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:73:cb:63:fa:07:25:97:bc:7a:12:f1:61:
4b:ae:fd:80:91:c1:61:06:72:87:c5:5d:fc:da:8f:
bf:4c:50:b3:2a:98:3f:3f:35:ed:68:ac:dd:53:04:
7f:94:88:cc:c8:1e:73:34:fb:51:d5:09:8d:bb:ba:
78:e1:4d:7c:e8:31:72:75:99:f9:e0:90:85:1e:31:
36:ae:5d:27:43:44:59:5e:30:b5:0f:7c:e9:28:04:
5b:6b:3f:eb:64:ba:89:47:b7:78:d4:d1:7d:8d:fd:
75:78:9c:71:76:bf:9d:67:ed:7d:0e:d3:38:9a:cc:
63:01:56:bf:07:00:4d:82:a7:e8:58:93:3a:9e:61:
4c:68:7b:8d:c9:52:5e:3b:19:17:64:8a:f9:c7:b9:
6d:3e:63:f4:c5:3c:17:42:f8:6c:ca:ad:24:aa:12:
6f:a8:33:f2:c6:ba:a1:c2:6b:12:09:39:8c:2e:fe:
62:01:ca:a2:2f:a9:30:db:b3:83:06:ab:23:73:d1:
08:e0:f8:c7:45:d1:0b:56:6e:0b:08:b9:19:37:f4:
d6:af:fd:c2:b2:a9:d5:ce:4f:4d:e8:aa:9e:d4:db:
17:51:98:d9:99:25:02:e1:bb:61:12:e1:79:a0:8a:
0a:8b:60:98:72:b8:55:67:2b:e1:ce:87:d7:85:5a:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:8D:A4:AC:57:4F:0F:99:EE:8D:CA:A5:0E:98:BE:3D:25:BE:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88929DE0D01811EF8F43F268762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.10.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:fe:20:8f:63:b1:ca:a3:eb:7f:11:e2:23:61:f2:db:75:f7:
7e:fc:a3:ec:0f:09:12:8c:da:1c:66:f5:79:1c:21:5d:5a:4f:
02:52:06:9d:fb:46:13:e2:58:1a:13:ba:8a:64:ff:f9:ec:b2:
0c:a1:a9:34:96:1f:a0:dc:18:2a:37:c3:ce:17:ae:9f:2a:37:
e2:59:78:7d:d9:d3:26:3e:43:c0:f0:e8:ef:ef:c5:95:5d:6f:
32:67:0e:8e:fa:97:6d:3c:06:f4:a4:37:9f:98:44:8d:58:b1:
71:8a:bd:5c:73:f7:4e:91:85:ff:60:13:ae:c2:d4:74:82:71:
ef:ab:88:d7:49:33:11:83:28:83:20:cb:8d:f8:58:07:4b:38:
ac:48:35:80:8b:96:e8:10:4f:ac:6c:2c:2f:f3:b6:15:ef:67:
dc:b7:f4:ca:9f:1a:71:51:77:9f:b7:8d:17:24:c5:52:00:dc:
74:84:61:79:c0:3b:44:cc:dc:82:f8:f6:f0:d4:46:b9:03:30:
ad:74:99:b4:60:69:09:20:36:4d:23:e0:37:54:9c:d7:c8:1d:
5d:3e:36:3e:b1:e6:d9:da:19:ed:25:4a:1e:bf:58:5e:e4:f8:
91:ab:ec:30:15:20:ff:7b:ab:aa:b5:e9:6b:17:7d:0c:89:1c:
c8:4e:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:32 2025 by rpki-client