Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/917732ACC47611EFA25A0469762E951A.roa
File: 917732ACC47611EFA25A0469762E951A.roa (raw, json)
Hash identifier: aTAuEheA8FOjmvp0SmdqmWIxTDPxYsCUDAzcqc6irFU=
Subject key identifier: C0:E2:8E:1C:9F:B5:C2:CF:0B:86:56:65:BA:8A:5A:AB:93:4A:A0:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/917732ACC47611EFA25A0469762E951A.roa
Signing time: Fri 27 Dec 2024 17:18:20 +0000
ROA not before: Fri 27 Dec 2024 17:18:16 +0000
ROA not after: Sun 02 Feb 2025 17:18:16 +0000
asID: 209242
IP address blocks: 156.224.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61666 (0xf0e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 17:18:16 2024 GMT
Not After : Feb 2 17:18:16 2025 GMT
Subject: CN=676ee15c-78b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:2a:19:d6:43:79:08:40:36:3c:ee:1a:e1:
99:e5:59:7f:7a:38:9b:e8:ee:87:27:ce:b3:8e:a1:
eb:70:a7:fa:42:5e:ea:02:f8:f6:e0:51:f3:23:fd:
5a:bc:da:b6:5c:c4:bf:66:ae:21:71:51:f3:f9:ea:
40:75:a0:3e:66:e1:8e:98:a8:d4:ff:7b:ed:2b:df:
aa:fa:08:9b:07:55:55:38:3b:c0:ff:b0:46:50:e3:
05:1d:34:16:b1:0c:b2:3e:cb:bb:4f:51:2f:8d:8e:
2b:dc:1a:fe:6a:37:cc:1d:e3:61:e7:ad:ea:f3:9c:
92:b8:22:8f:fb:a0:2a:02:1f:da:45:eb:4e:57:0a:
db:e6:11:e2:0c:de:19:2b:94:6c:46:ed:f9:b8:be:
63:f2:76:34:a0:1b:15:70:14:a8:8f:13:50:68:c0:
6e:17:dd:1f:af:b7:11:8a:f6:8d:a3:6e:7c:38:1c:
c1:99:f6:05:dd:d9:a1:86:70:44:a3:1b:5c:d4:d7:
26:dd:2a:f2:8a:f3:d8:2d:38:4f:f4:4f:08:73:36:
89:39:3c:65:78:ec:ca:00:3d:77:ed:e2:95:f1:4c:
d2:6c:cf:be:4b:25:00:db:18:e8:76:bb:8a:12:93:
50:2e:28:bc:b7:e2:1b:68:ef:6c:c8:4b:a3:a0:32:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:8E:1C:9F:B5:C2:CF:0B:86:56:65:BA:8A:5A:AB:93:4A:A0:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/917732ACC47611EFA25A0469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.73.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0c:07:aa:23:72:cc:56:53:5c:6a:3f:c6:fa:4e:4f:f1:43:
90:c2:db:d1:2e:89:cd:93:60:f6:e7:6d:24:62:52:64:52:07:
d4:bc:60:ab:78:96:66:5d:f3:9f:01:a2:38:fa:8a:84:58:39:
98:49:a6:45:28:23:fc:66:1f:63:27:47:75:a7:20:6a:22:c0:
66:bc:21:fa:79:a9:7d:04:15:8c:14:1d:4a:b3:de:52:e4:d0:
48:f2:07:6b:a9:ef:58:01:66:70:a0:0d:a0:2c:f7:15:18:2d:
4b:a4:4a:d5:4b:28:cb:cd:08:b2:03:d0:35:02:f5:4f:9b:4d:
88:70:20:20:be:e7:36:a0:0b:77:27:9f:03:c9:b6:01:6a:85:
53:04:89:a0:fd:d4:d5:a4:8d:2a:ee:64:5f:36:5e:cc:64:03:
60:2c:3c:97:bd:bb:87:f2:19:3f:88:14:50:6e:ac:d7:ef:df:
8f:e8:5a:e0:3e:41:48:a0:14:09:47:fe:92:99:3d:00:38:d4:
06:94:a0:80:29:19:84:a8:d0:1b:f2:ad:6d:66:10:8c:d4:bf:
02:47:c4:d5:5e:4e:99:e4:f4:f4:22:65:a2:77:5b:35:aa:34:
75:0b:c0:d3:4d:55:8d:7d:7d:81:46:4b:e6:be:a8:07:61:8f:
43:d5:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:43 2025 by rpki-client