Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB1D6C2CEA211EF8BD5529E762E951A.roa
File: 9DB1D6C2CEA211EF8BD5529E762E951A.roa (raw, json)
Hash identifier: RnR9ffCFyCa4yba5r3ERgaw75QKJlzLonVHzGo7mSLw=
Subject key identifier: 5E:91:E2:C9:03:88:09:B8:85:54:98:90:C3:F9:4C:37:89:08:F4:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01043E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB1D6C2CEA211EF8BD5529E762E951A.roa
Signing time: Thu 09 Jan 2025 15:58:50 +0000
ROA not before: Thu 09 Jan 2025 15:58:46 +0000
ROA not after: Fri 24 Jan 2025 15:58:46 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66622 (0x1043e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 15:58:46 2025 GMT
Not After : Jan 24 15:58:46 2025 GMT
Subject: CN=677ff23a-e496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:d8:73:47:eb:63:eb:20:d6:de:f8:e5:2e:
94:98:a7:4e:4b:51:b3:76:ce:d8:3e:6f:f9:c1:2c:
98:1c:3f:a6:80:81:6c:cd:24:a3:ac:9f:14:01:39:
b3:f9:ba:fe:ad:c4:97:18:27:60:d3:54:53:d3:f8:
db:93:97:f8:74:e6:ee:60:10:31:fd:fe:4e:e9:2c:
a7:6c:cb:9c:2e:62:52:1a:35:0e:18:55:01:01:06:
af:ae:0c:df:db:97:99:cb:30:32:b2:89:2c:00:59:
f3:f9:1a:02:64:58:43:6e:f2:51:0d:10:ba:d1:2f:
b7:e4:67:90:53:8c:ff:21:5f:ef:62:21:64:19:c6:
04:0a:97:1e:bd:c6:b5:46:dd:9e:99:0d:3b:04:00:
d9:32:9a:63:99:7d:91:fc:79:05:a9:74:e9:85:b5:
d4:84:ad:dc:34:c8:53:5f:54:a8:4f:84:86:c8:0b:
ca:df:fc:85:1c:a7:af:eb:57:d3:39:bf:a0:f8:65:
62:ed:c9:87:6d:73:bf:d5:86:85:6f:d2:6f:70:37:
72:8f:62:de:ab:d9:c2:01:56:4e:da:1e:55:0a:0c:
19:3f:ab:94:68:47:29:21:0c:95:c5:31:cf:c6:a8:
77:34:63:c3:48:1d:08:2b:85:f3:07:64:6e:8c:eb:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:91:E2:C9:03:88:09:B8:85:54:98:90:C3:F9:4C:37:89:08:F4:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB1D6C2CEA211EF8BD5529E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:4f:60:25:27:79:dd:e2:75:6e:dc:09:b9:a9:1d:7a:38:e3:
c3:56:ce:0b:59:2e:ee:66:41:42:a0:c1:27:dd:33:bf:4f:6f:
f5:d1:dd:63:24:d9:2d:65:21:7b:eb:e2:39:d9:56:21:b1:79:
5e:fc:8d:2f:d0:e0:7e:73:3a:f7:9c:c0:fd:11:e0:0b:7f:a3:
15:16:2b:ff:16:58:c3:50:8d:76:a9:2b:8a:66:8d:d9:be:2e:
a9:73:81:b6:58:a7:eb:e8:6b:a0:e8:1e:aa:25:7e:66:ba:e2:
33:19:41:5e:b2:a8:8c:1e:09:7e:11:5a:88:27:55:84:66:a6:
cf:bd:63:94:68:a8:07:a8:5d:54:ca:b0:9d:16:52:26:6f:b0:
27:bd:55:23:f1:b3:0e:45:13:7f:24:5e:05:77:90:a7:4b:16:
ad:c6:4a:3c:bd:12:83:ed:a0:68:54:37:b8:ab:9f:1b:f8:ea:
47:3c:e0:1b:3a:2f:e8:81:22:c9:b9:79:de:83:9a:c8:19:e2:
3e:3d:18:d5:4c:bb:c8:c5:ca:fa:8a:b5:a4:02:10:c4:1a:ba:
e2:d9:95:aa:ac:0c:60:73:a8:f9:cb:fe:24:84:cc:66:77:d8:
74:e8:d6:d3:1d:0d:4f:39:fe:9f:95:34:20:5f:30:51:b7:b9:
e9:47:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:53 2025 by rpki-client