Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98BC44BCBA2611EFB58DEC46762E951A.roa
File: 98BC44BCBA2611EFB58DEC46762E951A.roa (raw, json)
Hash identifier: iaBgb6VPTIP163r4oOoFU42+GibENj+l/wYFNsmlGl4=
Subject key identifier: EB:02:C3:C4:43:A1:2B:A8:F5:52:E6:5A:1F:58:C9:3D:AA:6B:37:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E39C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98BC44BCBA2611EFB58DEC46762E951A.roa
Signing time: Sat 14 Dec 2024 14:20:41 +0000
ROA not before: Sat 14 Dec 2024 14:20:37 +0000
ROA not after: Mon 20 Jan 2025 14:20:37 +0000
asID: 213828
IP address blocks: 156.253.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58268 (0xe39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 14 14:20:37 2024 GMT
Not After : Jan 20 14:20:37 2025 GMT
Subject: CN=675d9439-c8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:45:9b:88:e8:29:a2:56:e3:38:ef:3e:2a:
e5:d7:90:84:f6:55:27:26:bc:a1:7a:4f:63:1f:a0:
53:79:cd:7f:43:09:0d:a1:fe:d3:3b:4d:b3:a8:32:
d0:ef:c7:fd:52:35:3b:c4:06:48:d2:76:b8:db:1b:
69:08:3e:c1:57:f5:b9:af:9a:fe:81:9c:0d:ff:67:
b9:f3:ac:5d:8d:c4:68:a9:ef:08:29:d2:16:b4:e6:
53:b7:8c:a7:63:43:8f:a4:5c:d8:b9:7d:e0:db:8c:
e5:3a:3c:ce:ed:98:a0:c5:0b:94:ef:23:a0:cf:11:
1c:c4:05:e1:b5:6e:77:67:3e:f1:05:04:52:9a:45:
dc:3d:26:41:97:c1:41:3f:a0:93:5e:5f:09:a4:b8:
cc:6c:c7:50:0b:66:a4:54:7e:9a:de:e6:ad:85:68:
c9:db:a9:16:78:0b:f2:6f:0e:80:4d:a1:5c:95:bf:
3e:44:ad:59:28:14:e2:43:cd:23:cf:13:63:65:5c:
db:74:6b:cf:34:a3:8c:7a:5e:d4:61:d5:7b:c9:ef:
d5:95:b1:7e:e2:9a:3a:27:d7:3e:10:db:60:e5:58:
0f:ff:79:89:e9:4f:50:e9:4d:7d:ca:14:bd:88:e2:
bc:eb:d1:58:3d:23:d7:25:c2:ff:a7:80:3f:86:11:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:C3:C4:43:A1:2B:A8:F5:52:E6:5A:1F:58:C9:3D:AA:6B:37:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98BC44BCBA2611EFB58DEC46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cd:f2:09:10:60:36:68:b1:b5:82:35:d9:21:71:95:08:29:
28:7a:83:fa:14:89:9c:19:3a:d9:f3:e7:0f:64:49:45:38:7f:
69:33:2d:ae:5e:33:ec:16:5a:bf:83:f2:e6:e6:40:b2:0f:1c:
6d:e8:ff:5e:c9:b4:18:28:ca:38:f8:9a:3c:4c:c5:ac:d3:26:
45:fc:33:a6:20:ba:f3:6c:52:63:59:2c:28:62:c1:e2:4f:8e:
a6:8f:62:bb:7a:4f:b7:b1:eb:f1:25:66:b8:5f:90:13:4c:6e:
02:3a:49:8e:61:6b:62:e2:6f:fa:e0:ce:d3:51:7c:18:34:f6:
95:97:f0:af:41:16:9b:81:3a:78:47:ac:62:36:e0:58:2f:d6:
d7:a6:c4:69:c9:3e:8e:c0:63:58:20:cc:52:2a:75:46:1c:bf:
90:e3:9c:50:0b:95:1f:30:ec:f4:54:02:63:fc:6e:ea:94:01:
92:0c:33:7c:a5:88:cf:21:dd:72:17:cd:e4:4e:19:a8:08:be:
e0:71:7b:70:a1:2d:66:8b:ec:0a:97:ce:a0:9a:8d:d6:8b:c3:
4d:a4:36:de:42:6d:6c:de:48:f7:22:1e:b1:e6:7f:52:24:83:
a0:01:05:d6:e5:03:8c:d0:f6:44:2b:c5:c4:a0:6b:f1:db:0b:
ab:cf:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:14 2025 by rpki-client