Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B9B1906CACA11EFA59B6F9C762E951A.roa
File: 9B9B1906CACA11EFA59B6F9C762E951A.roa (raw, json)
Hash identifier: GrUBy5H00cvBR6/byP4acEYd8MFfR53PkrspaZ9IMfA=
Subject key identifier: B6:72:BE:B0:8A:E6:82:E2:D8:4F:EA:89:B9:98:46:AB:A6:4C:E7:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F74A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B9B1906CACA11EFA59B6F9C762E951A.roa
Signing time: Sat 04 Jan 2025 18:35:01 +0000
ROA not before: Sun 05 Jan 2025 18:34:58 +0000
ROA not after: Fri 17 Jan 2025 18:34:58 +0000
asID: 39600
IP address blocks: 156.235.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63306 (0xf74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:34:58 2025 GMT
Not After : Jan 17 18:34:58 2025 GMT
Subject: CN=67797f55-cc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:28:24:29:64:30:61:74:0b:29:0d:15:23:
3a:e6:53:af:02:b5:2d:c6:d1:a2:40:63:92:7e:0d:
3f:67:82:22:f0:3d:99:e4:23:c7:b0:29:33:b0:77:
ec:be:ea:0d:38:5c:03:a8:11:fa:0a:a1:5c:68:8f:
a9:30:89:96:95:28:56:93:5c:9c:50:8c:3f:2a:4d:
81:84:0e:12:f1:3c:b9:51:5f:de:c1:59:62:a1:16:
43:46:91:06:88:01:e7:12:60:69:95:ab:70:08:da:
2d:df:d7:7a:a3:22:dc:e8:87:79:8d:fd:16:89:5f:
c2:9e:f8:fc:a7:3b:f5:f4:a6:cc:3f:9c:94:c5:d3:
70:19:65:af:73:9f:0e:0e:e5:dd:60:64:53:a0:6f:
ba:90:5d:01:69:76:aa:4a:8e:ff:0c:dd:35:dd:c3:
b0:87:65:22:43:bd:c3:b1:1d:e6:3f:61:cd:92:a0:
cd:0e:13:26:0a:e8:78:c9:11:e7:48:b9:40:aa:1a:
d7:25:8e:09:c0:79:88:de:5a:0c:05:02:96:1a:f0:
06:8a:37:27:6e:1b:c5:77:86:48:58:99:2c:6a:ac:
d6:cf:d7:02:1e:e2:e7:11:f1:d7:8c:e2:5d:5e:a4:
9c:f5:76:3d:ac:99:f2:19:ec:95:90:67:e9:1d:02:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:BE:B0:8A:E6:82:E2:D8:4F:EA:89:B9:98:46:AB:A6:4C:E7:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B9B1906CACA11EFA59B6F9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.80.0/21
Signature Algorithm: sha256WithRSAEncryption
69:c0:8c:9f:0b:9d:94:ea:90:3d:25:ad:6f:20:8c:fb:34:97:
f0:7b:b0:f9:f9:b5:86:0f:43:56:ba:56:82:50:5a:0e:f6:e2:
91:7a:c3:50:51:3c:a4:38:44:9c:1d:08:5e:f5:c3:39:c2:29:
da:e2:17:1a:04:21:76:7d:d1:fc:6d:87:23:5c:20:b0:04:82:
3e:aa:dc:ae:92:e8:c1:cb:a9:8a:9c:f8:ff:d3:d4:b2:91:dd:
a9:9a:05:8e:8b:9e:c6:88:1b:23:50:01:4d:00:fc:56:eb:ec:
a1:0f:6f:be:51:aa:d8:12:81:ad:06:8a:51:b9:87:90:06:62:
53:22:3e:aa:51:19:9e:a4:6d:0f:e8:b8:2c:ea:3b:75:6a:10:
48:f1:2e:26:30:e6:07:f9:77:07:af:bc:a0:03:a1:42:1d:1a:
04:f9:66:42:cf:c0:b3:3e:fa:0f:37:0e:f0:5e:0c:08:d9:89:
7b:50:2b:88:30:28:1f:a7:b9:ef:eb:70:1f:d1:d5:ae:da:3b:
ce:4b:e1:bc:18:c7:1d:c6:a1:e3:c3:14:d7:63:c7:b4:c8:5c:
b6:ea:30:3b:ce:0f:78:18:50:a5:85:0b:97:fa:15:e0:8c:39:
95:b4:5c:10:41:dc:78:0a:f2:9c:ad:af:32:ae:e3:a1:3f:ec:
9a:42:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:54 2025 by rpki-client