Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC6B594C99E11EF83140CBA762E951A.roa
File: 8BC6B594C99E11EF83140CBA762E951A.roa (raw, json)
Hash identifier: 8UjhiYCfwziRgHF+QtYllKb45/gDvKCnxe7RDmz4oIY=
Subject key identifier: 5C:2E:D2:5D:BA:D3:43:C5:BF:D2:0C:1E:06:D1:3E:97:9F:9B:A5:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F659
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC6B594C99E11EF83140CBA762E951A.roa
Signing time: Fri 03 Jan 2025 06:47:06 +0000
ROA not before: Fri 03 Jan 2025 06:47:02 +0000
ROA not after: Sat 18 Jan 2025 06:47:02 +0000
asID: 149641
IP address blocks: 156.224.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63065 (0xf659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 06:47:02 2025 GMT
Not After : Jan 18 06:47:02 2025 GMT
Subject: CN=677787ea-3fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:1d:8d:99:85:d1:b9:6f:08:fb:c3:fe:f7:
17:45:34:0a:e8:2f:88:ce:ab:a2:20:35:0d:7a:55:
8c:ab:0e:c8:84:a4:66:7d:83:c3:48:68:a2:f2:2b:
1c:50:97:50:21:6c:9e:a9:db:ee:90:f5:59:e8:62:
6d:5a:4f:a9:54:b0:66:b0:9f:8a:d8:6e:e0:3c:0c:
6a:b0:be:35:ba:55:9c:20:ee:06:36:3f:c6:c3:9f:
0a:e3:7f:60:21:1e:8a:09:09:cc:3a:72:8a:f8:21:
5e:1f:35:27:8a:2b:9d:df:5b:fb:7d:24:c5:a8:8c:
c3:2f:92:df:d1:ae:9c:1c:29:fa:5d:84:7e:24:6b:
a8:3d:3f:19:42:c7:c2:0e:57:32:ab:be:7a:a3:0a:
bf:44:cc:d3:14:be:5e:87:76:32:5a:fb:bf:5b:89:
63:a4:bc:47:52:90:3a:60:b7:fd:e9:68:6a:e7:87:
d5:49:1c:ef:5a:0e:78:82:3a:8a:28:da:6f:3f:51:
47:5a:b0:cf:4c:ab:ff:06:7a:7f:ee:a9:99:be:e7:
66:72:bc:cf:3d:5b:6f:fb:9a:3e:63:36:63:e4:9d:
fd:b7:6f:3f:08:1a:fc:54:41:ff:9b:b7:da:27:53:
a4:e1:12:8b:e4:79:a9:a2:ea:76:15:bb:ed:41:b0:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:D2:5D:BA:D3:43:C5:BF:D2:0C:1E:06:D1:3E:97:9F:9B:A5:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC6B594C99E11EF83140CBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.0.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d0:82:72:83:32:52:1c:27:6d:ff:a8:ab:85:78:36:f2:20:
7d:93:39:6c:69:66:6a:8f:91:3e:58:5f:23:8e:60:f3:e2:38:
f1:a7:c9:69:ce:50:b8:8a:70:f3:cf:47:28:d5:8b:c3:c3:bb:
41:44:02:70:f4:d8:55:26:0b:72:a2:d4:50:cb:75:ce:43:a4:
65:77:e1:73:37:df:42:b6:64:d4:fd:72:74:d8:af:d0:7e:7f:
eb:3a:4e:4a:23:81:e6:80:0a:0b:7c:d8:ae:0f:58:ae:54:c9:
7b:9a:a4:81:07:41:3b:8c:a5:8b:1d:75:0c:ac:1c:7a:7a:4f:
ae:0b:5b:40:fb:c0:68:91:d0:9e:72:01:08:f1:4c:b4:1f:08:
cf:63:7d:65:c0:00:12:d2:a1:e6:b1:f8:07:6f:69:89:94:d9:
a6:32:73:6a:9a:3a:14:05:85:de:1e:60:65:7c:86:c8:ba:c9:
56:09:e5:08:d2:58:05:1d:e8:75:61:ad:9d:79:e6:d7:90:ed:
16:62:7f:fc:93:eb:35:6d:fc:1a:16:f0:a1:c6:04:8c:ee:fe:
93:65:ab:ce:2f:32:93:00:f1:30:20:23:30:cb:bb:1b:8b:ba:
d5:a2:ba:38:26:0f:2b:b4:b9:af:8e:fe:3e:97:0d:f5:0a:4a:
b3:2f:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:55 2025 by rpki-client