Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDDC992CAD011EF8A9AD943762E951A.roa
File: 9DDDC992CAD011EF8A9AD943762E951A.roa (raw, json)
Hash identifier: Xsex+6QzNhX3mXf59Rvng9awYLN2Ka2SudEWlY7Xoug=
Subject key identifier: 03:2C:E1:7A:D5:15:30:15:02:3F:41:D8:E6:7A:AC:C8:D0:31:25:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F77C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDDC992CAD011EF8A9AD943762E951A.roa
Signing time: Sat 04 Jan 2025 19:18:02 +0000
ROA not before: Sun 05 Jan 2025 19:17:59 +0000
ROA not after: Sat 18 Jan 2025 19:17:59 +0000
asID: 142286
IP address blocks: 156.250.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63356 (0xf77c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:17:59 2025 GMT
Not After : Jan 18 19:17:59 2025 GMT
Subject: CN=6779896a-e00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:73:24:73:c6:95:6d:c6:dc:84:81:30:c3:
10:b0:5a:52:95:19:93:f7:b4:91:b5:ed:5e:4c:24:
2a:07:76:d1:d7:d4:f8:ad:08:de:38:20:b8:21:08:
60:e8:45:1e:6c:b8:4d:cc:d7:22:af:eb:ea:9b:37:
87:fd:c8:6b:b0:20:3b:5b:14:0f:25:af:35:5e:a3:
65:13:d9:2e:fe:ec:e4:31:87:3f:82:47:b7:13:fb:
22:f8:92:28:d4:79:90:17:15:c3:3a:b7:77:98:af:
7c:d3:e7:8c:ce:a1:b0:80:74:1b:2b:64:7d:d0:68:
fb:b7:48:ca:39:c2:51:ab:e2:27:73:a8:29:ca:2f:
aa:61:26:c4:86:9b:f8:2b:1f:06:42:f6:6f:84:b4:
ac:74:a9:49:ab:7a:43:75:47:96:d0:06:8f:06:75:
1a:91:c0:68:6e:04:25:a5:bd:2b:a8:22:bf:f1:2a:
0a:2d:88:fb:a2:cc:b3:97:df:f4:76:99:df:6f:59:
f9:0f:e7:6b:a1:10:26:60:c1:cf:4c:c1:6f:a9:0c:
9d:90:6f:c0:ce:01:68:f1:a8:28:54:12:63:e1:1b:
41:31:88:c5:c2:49:a0:57:6f:0a:3e:f2:76:29:66:
d8:43:61:3b:08:3e:02:a1:e4:08:06:6c:5b:4e:06:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:E1:7A:D5:15:30:15:02:3F:41:D8:E6:7A:AC:C8:D0:31:25:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDDC992CAD011EF8A9AD943762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.8.0/21
Signature Algorithm: sha256WithRSAEncryption
38:aa:ba:4f:80:03:9c:8d:37:88:00:1c:85:03:61:32:11:aa:
ad:eb:68:5e:a2:08:d7:f1:d5:c7:1d:f0:3b:bd:3a:56:a0:c7:
44:d7:2e:0d:b6:b0:26:75:58:5b:ff:2c:ac:35:0d:09:37:27:
50:bc:03:57:51:4d:6e:73:82:9d:75:7d:66:e3:99:80:2e:e4:
d2:fe:df:44:2a:81:6a:ad:82:ab:be:3b:ef:a6:b1:8a:b0:80:
3b:fc:c9:ff:bb:af:f4:26:9c:63:cc:e1:c7:3d:80:9d:85:30:
ca:dd:b5:37:65:67:11:74:b8:65:a1:a0:62:f8:54:27:91:57:
26:54:26:6d:cc:26:fa:02:a2:56:8d:0c:4a:dc:46:16:e4:b2:
e2:e5:d9:77:5c:ac:48:41:14:7e:41:0b:6e:e3:0b:74:89:3e:
c9:e4:1f:00:f3:5f:ae:4b:7c:75:22:e1:92:fe:96:83:85:b0:
5d:dc:e2:2f:78:39:37:c9:e1:a9:0a:67:c8:2f:f6:97:00:69:
32:74:42:35:64:f1:11:e7:88:0e:7d:4e:eb:01:a7:b4:21:1f:
ba:c0:90:e7:37:f8:35:47:46:9b:b7:ed:d0:97:12:1b:19:da:
5e:33:b4:ec:af:f8:0e:ab:a6:cb:cb:c0:24:4e:c9:95:4f:38:
27:7c:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:51 2025 by rpki-client