Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A7DD11ECE7911EFAFEA5D9C762E951A.roa
File: 9A7DD11ECE7911EFAFEA5D9C762E951A.roa (raw, json)
Hash identifier: R3UDhSgNDJLb9/Z1q7LS6a+p93l4CEe8zVH07d5IE7U=
Subject key identifier: 07:9B:54:7B:FC:3D:E7:BC:8B:F3:39:D4:D9:E7:61:DC:77:11:D6:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010336
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A7DD11ECE7911EFAFEA5D9C762E951A.roa
Signing time: Thu 09 Jan 2025 11:05:15 +0000
ROA not before: Thu 09 Jan 2025 11:05:11 +0000
ROA not after: Wed 22 Jan 2025 11:05:11 +0000
asID: 22773
IP address blocks: 156.237.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66358 (0x10336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:05:11 2025 GMT
Not After : Jan 22 11:05:11 2025 GMT
Subject: CN=677fad6b-9774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:4d:38:b9:f4:3f:65:e7:b5:a8:39:aa:02:
cb:9d:9a:d0:89:41:bb:74:2d:d7:68:3c:9f:2f:27:
5e:d6:f6:7c:6b:24:2a:2a:48:22:23:27:06:bb:f6:
ec:69:af:43:7a:e9:60:d2:1f:65:1a:7d:38:66:54:
3c:78:e1:3e:c2:ce:4c:21:37:c7:cf:21:f2:38:66:
8f:b9:2d:57:a2:5b:fb:ab:7d:2e:76:22:a3:01:a9:
9e:47:96:c5:73:db:b4:e4:7d:12:0c:7f:25:5e:37:
f1:aa:ef:88:df:51:93:55:1e:ff:8f:69:3e:82:94:
9f:c2:78:0c:ea:97:ef:84:bd:da:24:ea:eb:5c:12:
90:a5:9a:fe:d5:d6:d5:13:ed:d6:9e:af:98:f9:59:
56:d3:9d:54:c3:52:84:44:98:ff:86:ad:e0:da:b7:
00:70:c8:26:96:c4:54:b5:a7:e7:01:63:14:cb:cb:
ff:6d:26:58:35:30:6f:96:db:bc:91:66:d9:8e:77:
22:13:74:c8:d2:3e:17:35:5e:01:05:bd:4b:19:f0:
83:4b:2b:55:f9:83:98:7d:85:05:b8:bb:3c:2f:b3:
8b:d9:94:89:75:af:23:42:e9:95:1d:a2:c6:49:e7:
8d:28:8c:42:97:3b:41:a2:ed:86:7f:58:c5:45:e1:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9B:54:7B:FC:3D:E7:BC:8B:F3:39:D4:D9:E7:61:DC:77:11:D6:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A7DD11ECE7911EFAFEA5D9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.6.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0f:88:cc:7a:84:b3:54:24:02:2a:dd:f8:76:7e:c4:4e:f1:
14:7a:20:90:8b:f4:72:20:c3:98:fa:f6:f9:91:c2:08:70:81:
ac:38:2e:cc:32:af:60:a4:6f:7d:9a:4b:68:ec:4a:c7:ea:d2:
19:70:d4:98:0a:fb:03:35:50:07:5b:4b:4e:15:b1:58:b0:de:
63:87:90:1e:89:50:d4:98:cc:af:f9:f6:2a:86:9e:5b:33:9d:
21:e9:a7:44:12:f0:ae:cb:97:ca:88:63:0a:ae:1d:58:3b:b4:
a7:1c:01:50:15:43:dd:3e:49:ea:8c:44:f8:54:99:14:8f:55:
3f:c5:bf:ab:4b:17:0c:d4:db:6d:0c:d5:e3:41:4a:e5:12:58:
5e:27:9a:a9:1f:3b:a0:52:99:d6:ac:f5:b4:2b:f5:42:23:60:
bd:b1:67:75:ae:0b:f3:e1:6b:24:6a:d5:d3:87:91:43:8f:fa:
af:14:b9:68:4d:36:b9:35:6b:9a:53:9e:08:9e:4e:ca:9e:28:
b3:e0:bb:b8:f6:26:7f:0e:c9:99:52:72:71:02:b3:f1:a6:2c:
d3:10:75:60:27:48:48:93:0a:1f:b7:4a:c3:42:a1:67:53:23:
62:b9:62:48:5f:15:14:f0:ad:72:d7:79:b9:95:58:ef:57:9b:
1f:36:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:45 2025 by rpki-client