Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95551DEACACE11EFB16D5EB5762E951A.roa
File: 95551DEACACE11EFB16D5EB5762E951A.roa (raw, json)
Hash identifier: YdZOHVIw5rGoEDCd9o2O534muKNqJQay3SuvqGo9JlE=
Subject key identifier: CA:BC:EB:AB:7F:CA:2E:C4:80:96:F6:3C:95:11:EC:18:20:FB:70:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F76C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95551DEACACE11EFB16D5EB5762E951A.roa
Signing time: Sat 04 Jan 2025 19:03:29 +0000
ROA not before: Sun 05 Jan 2025 19:03:25 +0000
ROA not after: Sat 18 Jan 2025 19:03:25 +0000
asID: 142286
IP address blocks: 156.225.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63340 (0xf76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:03:25 2025 GMT
Not After : Jan 18 19:03:25 2025 GMT
Subject: CN=67798601-90e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:91:7c:5d:dc:4c:d7:b3:2f:17:93:5e:68:
27:e4:0c:a1:ec:e1:6f:ef:c1:16:a3:8e:6c:b8:18:
2e:53:2d:19:68:23:49:ba:1d:45:6e:42:28:a6:99:
2c:bf:5a:a6:1c:ca:e8:93:3e:08:8f:21:ba:00:e1:
d3:90:1e:7e:a4:88:eb:83:68:cc:42:7b:aa:b6:95:
6d:3b:ae:ab:f2:e7:99:3f:e4:d5:11:b2:fe:9e:19:
65:fd:77:16:9b:3c:11:24:36:76:a6:00:47:94:57:
12:d5:fb:56:ab:85:98:a8:37:3e:cc:c0:47:f8:89:
66:45:ac:07:59:5b:56:0b:39:45:61:44:ff:fa:0b:
f1:e6:13:5d:41:b3:ed:db:a0:df:a5:14:dc:6f:96:
f4:49:d0:7b:2a:32:4c:c5:8e:6c:dc:8f:48:ad:3b:
86:6e:8c:ad:46:63:44:f0:93:fc:f7:97:ea:84:c3:
db:5e:c6:a0:a0:ae:78:48:ae:6e:1c:b1:5f:f1:7e:
f1:80:22:37:53:97:83:65:27:b0:38:11:dd:27:f7:
81:7c:12:82:3c:15:a7:81:a8:60:7a:ed:d5:71:81:
c6:88:5b:1c:0d:17:14:48:af:6c:c5:26:80:5d:0d:
c9:7a:e2:4c:f3:33:9a:84:45:2d:7f:f5:51:9c:6d:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:EB:AB:7F:CA:2E:C4:80:96:F6:3C:95:11:EC:18:20:FB:70:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95551DEACACE11EFB16D5EB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.144.0/20
Signature Algorithm: sha256WithRSAEncryption
56:50:98:dd:ea:70:23:ee:c9:35:42:59:42:52:44:d1:4a:65:
1d:b3:51:aa:0b:8a:10:98:b8:a7:82:8d:31:ca:7f:a0:27:f9:
1b:b5:f2:dc:0e:b3:0a:ce:74:1a:88:02:da:b8:fe:b6:5b:67:
ad:2a:bc:15:99:ad:ef:ce:30:b0:c2:70:2e:99:62:3b:f2:73:
c5:82:4b:5b:5b:ad:3d:76:ef:6b:d7:74:93:17:0f:04:67:a4:
40:ae:c5:41:4c:79:63:42:49:11:aa:de:57:c9:a6:76:45:e8:
25:a8:c0:cd:9e:bb:4a:27:31:e4:69:f6:ec:45:5f:81:71:2d:
b2:2c:da:e7:2c:c1:c7:0b:d1:8c:e3:7b:ed:25:7c:db:95:c3:
a4:bf:d3:48:0d:3f:a3:e9:0e:25:94:54:92:c1:85:ad:10:e8:
a7:b5:b1:50:da:e7:cd:26:cb:34:f2:ec:5c:bf:c4:ea:d0:b8:
25:4b:77:fe:27:f2:65:61:6a:56:a9:ad:23:0b:b8:cb:2a:ea:
8a:bb:15:0a:6f:23:44:1c:4f:f9:14:a1:e1:12:bb:62:7e:6a:
7b:08:f2:d8:b8:7f:ab:51:6a:c1:8c:82:17:46:63:d3:70:e9:
83:c5:e7:8d:6a:46:1a:de:40:67:b3:3f:91:9e:63:b6:f3:0d:
a4:47:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:55 2025 by rpki-client