Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E73F88CCE7B11EFBC7762A7762E951A.roa
File: 9E73F88CCE7B11EFBC7762A7762E951A.roa (raw, json)
Hash identifier: 3cPgBtI8OwuL9mN0QyKi4KpsUWs5zmEcUmx09W9XzrE=
Subject key identifier: 97:9D:9D:23:51:16:E6:CD:3A:C2:C9:DE:62:B5:36:3D:9F:F6:C2:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010355
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E73F88CCE7B11EFBC7762A7762E951A.roa
Signing time: Thu 09 Jan 2025 11:19:41 +0000
ROA not before: Thu 09 Jan 2025 11:19:37 +0000
ROA not after: Wed 22 Jan 2025 11:19:37 +0000
asID: 5065
IP address blocks: 156.239.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66389 (0x10355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:19:37 2025 GMT
Not After : Jan 22 11:19:37 2025 GMT
Subject: CN=677fb0cd-e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:86:9a:88:df:23:d7:7c:89:19:12:c3:22:
c1:dc:0d:e8:dc:c6:3b:20:fc:52:18:24:3d:4d:79:
b6:c8:ca:41:a9:81:ff:e4:14:bf:63:89:77:f5:4f:
9b:0c:d8:08:86:ae:38:0c:b7:04:44:4f:14:cb:b7:
80:71:0d:fe:30:46:dd:96:b8:a8:18:d9:66:c0:64:
50:6b:f4:c0:b0:82:5a:98:f7:19:04:b1:16:bb:db:
77:f7:e0:35:62:e5:1a:0e:99:86:e9:fe:d5:89:88:
e8:36:88:f0:ab:fe:fb:6b:bb:3d:a9:3c:fa:90:53:
1b:c5:ee:74:93:1d:6e:11:c0:9f:4f:5b:7b:4a:d0:
1a:a0:a1:3f:c6:62:b9:11:ce:19:07:74:fc:99:ab:
cc:32:a5:12:b6:a2:d0:b9:64:de:11:95:e5:f0:05:
48:ee:74:06:37:e7:81:05:2c:99:a6:bc:17:52:e4:
0c:f9:6e:31:1e:c9:67:b0:89:6a:25:bd:ec:72:88:
25:dd:37:da:70:24:99:fd:9c:32:90:3b:4a:01:f7:
50:47:2c:3d:26:c8:a7:7a:a8:7f:52:6d:47:42:ed:
ba:92:f5:4e:79:ed:2b:db:c8:f6:a8:6d:c3:94:0e:
4b:9a:ab:a9:0f:34:03:de:5a:32:24:ff:c3:66:a3:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:9D:23:51:16:E6:CD:3A:C2:C9:DE:62:B5:36:3D:9F:F6:C2:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E73F88CCE7B11EFBC7762A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:aa:83:55:b8:a3:f9:e9:ad:09:96:8c:df:bd:76:c5:bb:09:
26:91:0f:0d:da:07:cd:56:69:e1:ed:c8:55:a0:e7:95:33:48:
6e:e3:8b:81:f2:60:5a:12:69:bd:56:c6:64:e7:93:3d:61:46:
af:7e:73:80:42:08:49:3a:29:dd:ea:e6:e7:60:b4:6c:33:51:
f3:39:d9:7c:39:dd:e5:d7:40:fb:58:a7:c2:62:1e:66:77:8e:
70:f7:d0:93:38:97:8d:2f:92:c8:79:92:a4:e4:8c:f0:54:63:
d1:8f:f8:d4:7f:95:13:d6:9c:ac:bc:3d:9a:0d:88:39:d9:05:
f1:96:2a:91:3b:bc:db:c7:9a:b2:17:e0:2a:81:70:c8:04:5b:
2e:48:b5:14:e8:bf:e3:03:66:d3:37:e5:e5:15:33:42:75:2a:
af:bd:ee:9a:9b:7a:ef:8b:49:cd:69:65:21:a7:ec:72:9c:c3:
13:c1:64:58:e2:17:d9:ec:6f:f3:83:ec:17:1f:2d:61:7b:d5:
88:42:d8:f2:b3:af:11:ef:f5:bc:b4:0f:2d:89:32:1e:78:85:
be:6a:32:8b:14:2c:ef:61:92:88:ee:18:e7:13:4c:c9:6c:a1:
db:a8:16:24:3a:ab:4b:e7:b9:8a:74:d3:68:e4:7a:0c:3f:68:
06:01:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:25 2025 by rpki-client