Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A588B600B21811EFA204EEA1762E951A.roa
File: A588B600B21811EFA204EEA1762E951A.roa (raw, json)
Hash identifier: zI1/ZoSzm2nm6PWeBgo8lN3/x7Q8POoaQ2qxgdLvPek=
Subject key identifier: BA:B7:93:49:0A:5D:86:3C:08:64:D2:7D:86:A3:C9:53:F8:17:BC:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A588B600B21811EFA204EEA1762E951A.roa
Signing time: Wed 04 Dec 2024 08:20:40 +0000
ROA not before: Wed 04 Dec 2024 08:20:36 +0000
ROA not after: Thu 23 Jan 2025 08:20:36 +0000
asID: 63139
IP address blocks: 156.227.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57192 (0xdf68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:20:36 2024 GMT
Not After : Jan 23 08:20:36 2025 GMT
Subject: CN=675010d8-4804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:59:e0:f0:f2:fa:54:cc:e9:b0:35:78:9c:
56:5b:d7:f0:1a:8c:f6:f8:48:73:e4:53:f0:95:c9:
dd:46:f9:3a:49:3d:90:9b:7e:4c:f0:df:6b:e0:11:
de:7f:44:fe:f0:cc:d3:3c:7c:a2:b0:f6:dd:84:9c:
05:29:3c:da:61:9d:74:3a:95:a6:10:60:0b:da:e1:
c3:9c:21:ad:6c:a6:5c:ed:fc:2a:ad:2b:53:2f:71:
80:ec:b8:76:82:f1:ba:d8:df:45:a9:71:64:4d:1f:
2b:34:36:bc:68:bd:0b:45:e7:8d:44:7f:9d:07:41:
4c:f7:dd:17:c4:8b:a6:f9:41:03:19:c2:7a:51:e8:
a0:29:f1:0a:ee:e8:2c:21:38:8b:cc:a5:cf:bc:fa:
67:b5:a4:ae:80:05:87:e7:1b:ce:11:10:55:de:bb:
b1:2d:b4:e5:dd:c6:f2:7f:07:8a:f6:37:63:40:dc:
4d:ed:35:61:8c:05:8f:57:b9:e5:18:55:52:6b:09:
02:c7:16:9a:d1:eb:68:ab:78:4f:b6:4b:88:09:27:
f2:fd:f4:17:11:95:83:0f:30:e2:7d:bf:2c:d0:98:
30:b2:3a:02:ff:92:5d:d4:95:bf:0b:56:b1:3c:02:
d5:ba:63:f2:a9:5f:c9:07:90:8a:01:08:f7:2c:f7:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B7:93:49:0A:5D:86:3C:08:64:D2:7D:86:A3:C9:53:F8:17:BC:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A588B600B21811EFA204EEA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:7b:e6:d9:98:fc:a4:26:b6:86:47:b2:16:1c:e5:15:c9:0a:
6a:5e:5f:3d:e5:1c:0a:2d:f8:0e:00:d3:7e:6f:82:44:7e:48:
b0:fe:6a:5e:12:ae:03:93:37:58:d4:9d:d2:12:33:43:84:24:
88:36:ac:81:fb:75:32:82:08:59:ce:80:df:00:c9:e2:99:b8:
b9:8b:1d:73:74:4f:3a:32:29:cf:5d:ba:dc:84:cd:8f:65:bc:
fd:7e:b3:ad:84:6e:c2:43:f4:73:6d:cd:d4:dc:83:4e:c6:45:
cd:77:80:68:0d:e5:33:d6:aa:b6:72:0f:8f:c5:96:02:db:ac:
fb:de:84:35:dd:17:d9:92:f3:32:70:86:5d:80:80:4e:60:ec:
c3:dc:aa:91:c1:9d:a9:49:c1:f8:a0:b1:03:99:e8:31:8f:79:
bf:5b:73:64:ea:45:3b:56:e4:c3:b2:bd:0e:fd:8e:3f:e2:0f:
19:9e:d6:03:f8:a9:b9:40:b5:91:5a:0e:e0:20:51:77:3b:51:
ee:6f:98:d2:35:e1:ea:c3:25:8c:69:5d:e1:d3:0b:6e:c6:3d:
ea:27:52:35:77:c7:e5:fa:89:5e:82:14:e0:6c:9c:52:2f:e5:
b5:dd:6e:ac:e6:b6:03:a1:16:f7:a8:0f:b1:d7:49:41:52:5c:
22:19:f9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:10 2025 by rpki-client