Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95817842C9AA11EF9869AD86762E951A.roa
File: 95817842C9AA11EF9869AD86762E951A.roa (raw, json)
Hash identifier: 6PWgXl5AGwUSy/zVnnYcL5xdFHl4Q92LlsSoRgxinEc=
Subject key identifier: C1:6D:83:74:A8:8C:12:91:7E:11:CE:DA:6C:90:19:84:9E:87:60:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F69F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95817842C9AA11EF9869AD86762E951A.roa
Signing time: Fri 03 Jan 2025 08:13:16 +0000
ROA not before: Fri 03 Jan 2025 08:13:13 +0000
ROA not after: Sat 18 Jan 2025 08:13:13 +0000
asID: 141883
IP address blocks: 156.255.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63135 (0xf69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 08:13:13 2025 GMT
Not After : Jan 18 08:13:13 2025 GMT
Subject: CN=67779c1c-feed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:17:8d:cd:b4:cb:46:f2:20:84:7f:bc:fc:90:
ea:fa:96:35:9d:1f:c3:d2:ae:ed:e4:d5:fd:f9:30:
3e:aa:96:f8:27:a4:bc:51:33:85:53:ea:78:17:26:
65:15:1b:1c:9c:dd:41:d2:b0:d5:6a:96:c6:c1:86:
d5:4b:59:e7:20:4c:73:4a:63:55:35:93:cf:f4:0c:
6f:88:e0:8c:a3:f5:79:cf:4e:3e:30:38:9c:03:a8:
27:8d:c1:59:62:db:e4:0e:6a:cd:9d:4b:43:de:56:
d6:8f:b7:80:96:f1:48:0a:c3:7b:a7:08:47:a9:ba:
bf:df:91:62:57:d3:7b:e8:2d:d4:b9:fa:1a:cb:45:
9c:86:b7:4b:61:61:a6:b6:41:1f:5b:5b:e5:d5:7c:
f1:9d:f5:e7:c5:68:3f:b0:a4:3b:a8:ba:0e:af:d6:
df:c3:0e:6e:45:6b:75:39:82:55:36:48:5a:b9:f4:
40:30:73:55:0f:d5:2f:58:e9:56:34:3c:50:88:a7:
2b:60:22:ea:df:bf:41:58:01:97:07:43:45:0e:2a:
cf:d1:01:73:27:a9:c0:1b:b7:54:d7:ae:c0:06:e0:
a3:42:cf:e7:af:19:70:91:67:f6:aa:c2:8f:5f:6f:
02:7e:77:cf:40:ee:aa:7c:eb:54:eb:2a:d5:c8:d6:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:83:74:A8:8C:12:91:7E:11:CE:DA:6C:90:19:84:9E:87:60:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95817842C9AA11EF9869AD86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ee:33:a6:93:32:ab:92:33:30:d2:bd:26:52:27:ad:30:b6:
2e:fd:a4:ef:46:87:58:d7:ae:49:d1:fb:3d:08:48:68:6a:32:
62:79:98:67:40:f5:19:c9:3e:a2:d9:45:9f:97:16:13:f3:c4:
9e:08:c5:ae:2f:dd:b6:11:01:0e:1d:6f:d0:28:94:55:df:06:
fc:d7:f8:3b:98:4a:98:30:e4:f2:5d:46:09:45:db:0e:8b:d2:
fa:9c:2b:ba:33:c1:8a:67:bd:29:07:70:67:dc:68:d5:09:d2:
dc:f0:9a:a9:09:7b:67:f5:16:be:b6:18:d3:9f:cd:12:b6:53:
56:c9:5d:5f:c2:95:49:74:a5:d0:37:f6:24:91:5f:5a:09:30:
de:b7:42:7e:8f:9f:f2:6c:5a:46:d7:bb:ca:ef:87:13:8f:db:
a2:d9:ef:ec:34:a4:db:8f:18:5c:8f:a1:a0:bf:3d:3a:b2:39:
03:eb:45:72:2f:96:aa:0d:3a:71:92:37:84:65:f9:60:55:65:
5d:1f:55:31:66:80:71:7e:c1:4f:52:6f:1c:eb:d3:7f:ba:7e:
ce:ad:25:9b:83:7c:6d:ea:1f:7b:65:c6:97:99:4c:38:f8:26:
d1:86:a4:48:93:b5:8c:85:e0:31:75:06:e0:03:b7:49:88:ac:
11:8f:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:15 2025 by rpki-client