Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9371ADE8BA2711EF9A11A24B762E951A.roa
File: 9371ADE8BA2711EF9A11A24B762E951A.roa (raw, json)
Hash identifier: zUwC1d5T6BCdh5dRh/ERY+kGWrdvbFsLVxPswTZyvFA=
Subject key identifier: F5:F3:7E:F4:A0:16:09:2F:9A:B9:4A:19:B3:05:26:80:75:04:FC:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9371ADE8BA2711EF9A11A24B762E951A.roa
Signing time: Sat 14 Dec 2024 14:27:41 +0000
ROA not before: Sat 14 Dec 2024 14:27:37 +0000
ROA not after: Mon 20 Jan 2025 14:27:37 +0000
asID: 60223
IP address blocks: 156.253.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58280 (0xe3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 14 14:27:37 2024 GMT
Not After : Jan 20 14:27:37 2025 GMT
Subject: CN=675d95dd-5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:a3:eb:58:64:bf:a6:39:e9:50:e8:8b:38:
0f:cd:c1:f8:2a:ef:f5:e0:0d:2a:89:16:ac:69:2c:
6c:b7:5b:13:b6:1d:f5:ea:97:1e:a4:02:70:72:ce:
d2:bf:fc:84:90:12:37:46:1e:fc:17:33:48:32:e3:
b4:9b:ef:0d:01:cc:d7:89:1a:b2:3e:1b:8f:d6:75:
2e:63:90:d8:15:cc:06:3d:1c:51:b5:c4:dd:47:d1:
bb:1d:a9:68:a8:c1:8c:10:88:ff:ca:55:02:46:52:
d7:c3:8c:e4:6a:2c:da:aa:13:da:05:97:1a:35:ef:
92:19:da:78:87:d6:17:04:2a:be:19:6e:54:13:2a:
a7:20:d7:9a:94:58:e0:55:c3:9e:86:4b:10:d6:3c:
30:42:d8:c9:d9:ad:9c:29:81:ee:11:bf:e1:22:ef:
0b:51:c9:af:cd:89:fb:f0:2b:67:5c:66:86:39:98:
2a:04:c4:ac:c9:eb:db:76:53:df:40:09:a9:eb:d7:
77:d8:3e:c2:19:8c:82:7e:ab:21:03:f7:b6:f8:81:
aa:d1:89:ac:6d:58:42:20:49:06:4d:fc:5e:15:b0:
ac:3f:57:90:a7:8f:ca:f0:bd:b4:61:21:7e:00:2d:
d1:b8:dc:22:b2:f9:5d:3c:81:df:74:42:02:3f:ae:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:7E:F4:A0:16:09:2F:9A:B9:4A:19:B3:05:26:80:75:04:FC:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9371ADE8BA2711EF9A11A24B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:87:2e:41:b2:dc:58:8c:f4:fb:79:33:3b:9d:fe:15:c0:52:
58:30:ec:92:2c:89:30:a5:db:30:ac:4a:fc:65:e9:81:0c:03:
dc:62:4c:a6:54:e2:81:ed:1b:ca:9e:69:74:2b:a2:47:75:05:
e7:04:99:47:e0:dd:69:e2:1b:26:e7:1f:6d:63:c6:a2:ba:27:
7d:95:42:f2:21:e4:cb:8d:6f:5c:14:d4:04:7d:c1:68:c5:f1:
a4:c8:5f:45:e5:d4:3d:b3:cd:e1:59:a4:e1:27:6e:a8:3a:47:
a1:f6:17:a4:7a:e8:d9:d8:cb:39:20:8d:fd:40:19:60:97:6a:
2a:59:d9:24:87:1a:21:9f:2d:a1:b6:78:17:57:a6:84:ae:6c:
53:6a:fc:f3:52:7f:b1:b7:f0:02:91:cc:e2:66:45:75:d9:85:
81:24:17:99:98:61:c6:23:97:2b:f9:ee:45:67:0f:7a:23:95:
52:8e:4d:3e:6d:8b:3d:57:82:6a:76:ab:17:12:d6:95:d4:b7:
e3:4c:51:55:b2:2a:57:a0:6d:4e:ab:47:84:e6:ab:b4:82:12:
83:28:66:6c:fc:0a:dc:e3:ad:8d:ab:77:22:e9:37:03:9e:5f:
64:eb:ec:1b:e5:4b:a6:0d:cb:f1:57:90:1a:53:ab:eb:24:c1:
b7:49:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:10 2025 by rpki-client