Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A182BCF6CEA411EF907934AB762E951A.roa
File: A182BCF6CEA411EF907934AB762E951A.roa (raw, json)
Hash identifier: 4BQQ6vdJpDMrI4iA8D0Ya1M3SoDcnC3IYmZJ2DCUNcY=
Subject key identifier: C6:27:D0:34:5F:15:00:A6:17:8D:5F:BF:C0:27:C6:46:F3:1E:B6:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01044C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A182BCF6CEA411EF907934AB762E951A.roa
Signing time: Thu 09 Jan 2025 16:13:15 +0000
ROA not before: Thu 09 Jan 2025 16:13:12 +0000
ROA not after: Fri 24 Jan 2025 16:13:12 +0000
asID: 39600
IP address blocks: 156.255.82.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66636 (0x1044c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 16:13:12 2025 GMT
Not After : Jan 24 16:13:12 2025 GMT
Subject: CN=677ff59b-ec3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:c9:52:8d:bd:52:04:21:10:77:16:b7:3b:
26:bb:0e:27:61:be:95:73:bb:1e:0b:de:e9:99:1e:
89:3c:7b:79:81:d1:69:4d:dd:41:14:8a:03:97:ae:
f0:14:e4:b5:39:d7:4c:7b:83:2f:ba:0b:c5:19:b5:
ff:bb:b3:74:80:d4:36:46:d0:ce:16:57:f9:b9:1d:
2d:14:99:3c:5b:e3:72:77:e6:80:88:d5:63:3b:13:
48:63:e0:22:4f:e8:7a:88:80:b0:ab:7f:d4:e1:33:
2c:3d:2c:32:8f:73:31:f0:e7:45:5a:fd:bc:69:2b:
4f:5b:77:cd:5f:a0:67:20:ae:b2:fd:47:4f:ed:5c:
21:45:1e:05:16:c3:32:bf:3b:55:48:12:9c:ce:db:
d4:11:93:46:6b:2a:a2:07:d1:75:29:16:b1:f4:ce:
c8:08:49:e4:76:b9:64:ec:fc:5b:af:e0:1a:e5:cd:
ac:59:0e:fe:83:15:1e:c8:ee:c9:55:06:91:72:69:
0a:71:74:7e:69:61:a4:8c:bd:78:3c:88:18:69:b9:
7c:f2:2c:fc:7c:4e:5c:86:97:c4:f1:52:68:e6:34:
87:94:3f:4f:dd:17:1f:7b:82:04:b4:0e:ed:8c:a9:
fc:7d:02:f6:d2:71:16:fb:1a:e0:0a:00:9a:d9:52:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:D0:34:5F:15:00:A6:17:8D:5F:BF:C0:27:C6:46:F3:1E:B6:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A182BCF6CEA411EF907934AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.82.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:3e:80:9a:db:39:a7:46:f3:40:58:47:6d:b1:74:d0:e5:ca:
77:24:7b:57:4e:bf:81:3c:58:ec:4e:28:b7:a0:50:00:9f:c6:
21:72:83:c4:e9:fc:9f:9b:be:43:9f:5c:fb:4a:fe:3e:6c:37:
07:5f:f3:57:ed:70:e0:4e:48:04:2e:1e:7a:68:dd:39:5f:d2:
6a:06:1c:85:d9:b4:95:9a:90:bf:2d:35:f1:dc:f2:28:58:90:
02:a4:2d:35:da:01:5d:14:f7:f8:24:4c:ec:ab:74:76:b2:4c:
f2:07:79:a8:33:4e:72:92:de:37:3a:e5:87:78:02:65:04:15:
e1:66:ab:7b:98:99:34:5c:0f:aa:3f:84:c5:61:9a:6e:fa:48:
d5:d0:62:2b:78:dc:c3:7e:74:90:63:e9:37:87:bc:87:bb:f4:
8e:6f:36:bb:f7:53:7a:27:71:ee:7f:b8:08:c7:67:50:ef:56:
f3:72:07:cd:6f:58:61:44:f0:ac:45:aa:ea:de:c7:57:1a:b9:
e3:cc:f5:22:e2:de:a8:59:5d:c4:c2:7d:ec:f4:47:9a:5d:c8:
3e:81:34:9c:f8:be:ef:f8:84:39:7e:9e:41:c0:f9:32:ea:b2:
3c:98:ff:68:60:2a:a1:b9:fc:be:29:10:55:e1:5f:2f:43:94:
98:a6:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:04 2025 by rpki-client