Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D6E7148D25311EF87A94C7E762E951A.roa
File: 9D6E7148D25311EF87A94C7E762E951A.roa (raw, json)
Hash identifier: 5S/eQKN0aOtPSVXuAs97xuRfEfi8NAr2ep3CpFKOWu0=
Subject key identifier: 72:A7:76:FC:48:4D:94:11:64:3B:C1:F7:A7:8A:E9:CE:DA:57:54:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01070A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D6E7148D25311EF87A94C7E762E951A.roa
Signing time: Tue 14 Jan 2025 08:43:24 +0000
ROA not before: Tue 14 Jan 2025 08:43:20 +0000
ROA not after: Wed 22 Jan 2025 08:43:20 +0000
asID: 40065
IP address blocks: 156.243.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67338 (0x1070a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 08:43:20 2025 GMT
Not After : Jan 22 08:43:20 2025 GMT
Subject: CN=678623ac-9f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:3e:06:90:38:48:5d:1f:24:bd:36:cd:eb:
b8:fc:7e:bd:ae:f7:40:8b:9c:6a:e2:60:a3:7b:06:
a5:89:98:f1:ca:44:38:1a:4d:57:c7:a9:5a:85:82:
59:dd:c6:c6:1d:6f:5e:71:f6:df:39:3d:a3:65:7f:
08:0e:cc:49:5d:d9:8d:48:df:26:c0:9d:cb:44:d1:
24:9c:50:74:fd:d2:52:45:d8:8f:89:6e:31:a6:74:
46:c3:f3:df:29:b7:a6:b4:30:d5:86:7b:53:b0:14:
f8:98:f1:7a:ef:b7:dc:28:5c:bb:a7:a2:69:66:ca:
09:84:8d:1a:18:ff:ea:85:e1:8d:06:77:35:c1:5b:
f6:00:84:aa:d0:96:ab:c1:3a:d3:41:1e:f4:fc:5c:
ea:2e:b8:9e:12:80:87:b2:70:f3:a1:cf:4d:da:b3:
7e:de:8d:f2:1b:12:28:8c:35:0e:7c:fc:e9:d3:2d:
75:93:fe:ea:0f:02:d0:36:57:77:05:56:fb:c4:65:
0d:99:c8:2d:d7:61:b9:32:9c:b9:2c:0c:59:1d:ca:
f1:3d:e6:7e:a5:5b:67:21:dd:2c:d2:54:90:96:e4:
6d:63:a2:68:b2:c3:5f:6d:83:18:05:3a:43:e7:36:
cd:f3:5e:d6:10:08:c6:d5:dc:85:db:14:26:06:47:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A7:76:FC:48:4D:94:11:64:3B:C1:F7:A7:8A:E9:CE:DA:57:54:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D6E7148D25311EF87A94C7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.16.0/20
Signature Algorithm: sha256WithRSAEncryption
47:39:7f:66:bf:ea:0c:3e:3d:7c:c5:79:eb:64:6d:b6:93:76:
08:5b:0f:24:ef:0a:55:91:1c:61:c0:87:31:6f:cf:11:3e:d2:
d3:98:b0:20:f0:11:e9:b0:e7:7b:e4:dc:b9:dd:b8:5a:01:56:
1e:a4:b6:2f:c5:48:9c:cb:31:66:a0:b2:2c:03:8f:2a:f3:bc:
1a:cb:86:6c:e5:c7:b2:9c:19:26:4b:02:6e:0f:20:66:64:34:
bb:f2:66:f9:3e:72:84:6f:7d:d2:19:5c:46:2b:93:02:b2:ca:
96:8d:8e:8c:17:35:16:6d:95:c6:4a:83:c1:c5:c1:e9:43:c4:
82:56:42:3c:2a:4d:4f:00:a4:d1:90:32:4c:b5:f1:da:44:b1:
33:f6:fa:e8:be:01:0f:a0:1a:61:8a:70:93:6a:9f:0a:9a:0b:
1c:7b:49:ec:d8:95:8e:a4:a4:25:d6:81:14:51:ed:a6:3a:2e:
10:de:3e:93:a8:c1:3c:73:5a:d7:ff:29:9e:96:3a:db:5f:2a:
bf:dc:8a:cb:36:05:76:ca:f4:2a:06:46:9e:e8:b6:bb:01:c5:
10:ca:64:62:61:f3:74:e5:67:1c:f1:d6:bd:39:eb:d9:82:28:
4f:83:a6:78:97:a5:ff:d2:de:79:20:99:00:25:3f:42:e7:2d:
cb:c2:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:45 2025 by rpki-client