Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3E7E6FED00E11EFA0D51CAB762E951A.roa
File: A3E7E6FED00E11EFA0D51CAB762E951A.roa (raw, json)
Hash identifier: 5hT+/iVJrzDzXpOGgoTdDgucXSm5hR44csELiQHxXaw=
Subject key identifier: F4:9F:74:97:2B:7E:75:58:57:97:33:DB:FE:3E:2C:88:CC:AF:C5:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3E7E6FED00E11EFA0D51CAB762E951A.roa
Signing time: Sat 11 Jan 2025 11:24:37 +0000
ROA not before: Sat 11 Jan 2025 11:24:33 +0000
ROA not after: Sat 25 Jan 2025 11:24:33 +0000
asID: 139646
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67028 (0x105d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 11:24:33 2025 GMT
Not After : Jan 25 11:24:33 2025 GMT
Subject: CN=678254f5-04d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:df:f1:bf:9b:09:71:fb:02:de:3d:48:8b:
db:b3:43:0f:1b:f4:79:90:40:a5:7d:be:2f:01:fe:
49:1d:8e:93:9b:df:6a:2b:f3:04:d7:02:f9:59:74:
75:ba:31:17:5f:f9:e9:cb:17:f6:2b:e9:95:2d:b2:
a2:75:49:06:30:ef:8f:15:da:31:28:5a:85:17:be:
26:70:c7:10:7d:44:cd:b6:6a:45:2c:5b:64:81:95:
67:3d:af:bc:62:ae:2c:16:d1:02:65:cb:b3:f8:a7:
3c:00:40:6b:dc:73:f4:b0:6d:ac:59:52:1e:02:a8:
c9:f7:0d:f6:d5:72:51:de:ff:2c:5c:e8:e6:0d:4d:
49:3c:e4:9f:c9:ea:ae:c5:87:f5:4c:fe:20:67:64:
1e:f5:31:a7:07:d2:b7:a0:42:9c:b7:25:2e:95:5d:
58:57:b6:08:24:39:0f:1f:cb:92:36:5e:37:6f:5c:
0f:ce:3f:f5:17:c2:b1:7b:d0:7c:c5:3e:f5:68:f8:
d1:c7:ec:e6:74:6b:ff:ae:7d:6f:72:ed:c2:88:71:
73:2b:ac:d0:a5:2b:fa:f6:4a:8a:ed:3a:06:80:c4:
bf:5f:c7:c2:b8:0d:0e:d4:77:2a:da:a3:a5:2c:98:
a1:d4:90:e2:24:fd:4b:a4:56:d8:b6:83:32:da:d7:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:74:97:2B:7E:75:58:57:97:33:DB:FE:3E:2C:88:CC:AF:C5:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3E7E6FED00E11EFA0D51CAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
85:25:98:09:ab:75:df:53:6a:a1:37:51:3c:e6:1e:f7:2b:1a:
ae:d3:d0:5f:c9:23:c3:d5:a8:71:c1:e8:6c:25:7d:2f:f3:88:
a2:17:7c:03:bb:95:9c:11:38:82:ee:27:c1:10:5f:44:09:f5:
d0:dd:02:55:cb:87:74:d3:b9:8b:d9:c0:cf:95:24:ae:ef:6d:
7e:1c:78:6f:ef:d5:10:60:b5:be:ce:90:88:64:ad:e7:0a:14:
4f:9c:ec:ab:f6:33:26:53:e3:94:52:b6:fd:09:4e:2c:43:c6:
98:f1:0c:3b:6a:03:25:34:af:69:6c:88:e3:7d:46:21:67:7e:
23:92:b5:08:b5:80:42:31:bf:1d:24:42:ac:99:ec:0f:0c:78:
de:23:c3:91:8d:bf:61:16:4e:0c:bc:9e:9d:1f:f8:17:7e:55:
83:de:e1:67:1d:e4:0f:62:24:63:3c:4a:14:8c:ee:fe:39:17:
90:c4:d8:f1:6e:43:22:e4:b7:1d:6f:01:4d:c8:06:4a:08:0a:
ea:6f:46:1e:a7:f4:2b:b6:ae:d3:e7:4d:b6:25:9b:ac:b2:6b:
15:4b:3a:98:49:61:63:8c:f7:9c:97:0d:3c:89:1a:84:75:90:
7e:f5:98:fa:92:d3:ee:2b:fd:7f:2f:cc:00:c4:e9:48:b9:95:
7e:46:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:29 2025 by rpki-client