Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A855A148CAC511EFAF70AC7C762E951A.roa
File: A855A148CAC511EFAF70AC7C762E951A.roa (raw, json)
Hash identifier: RFjRHx+ly2gDtO0r47gDu+Xo2uR4eq4lv7lRL3OLbbg=
Subject key identifier: 0A:EA:AB:33:6D:D6:BB:81:DA:86:EA:FB:1D:16:83:93:4B:90:3E:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F732
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A855A148CAC511EFAF70AC7C762E951A.roa
Signing time: Sat 04 Jan 2025 17:59:35 +0000
ROA not before: Sun 05 Jan 2025 17:59:32 +0000
ROA not after: Fri 17 Jan 2025 17:59:32 +0000
asID: 7018
IP address blocks: 156.238.190.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63282 (0xf732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:59:32 2025 GMT
Not After : Jan 17 17:59:32 2025 GMT
Subject: CN=67797707-58cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:a2:b3:d1:c2:9a:0c:d7:ed:68:b8:82:d2:
7e:12:6e:6b:5b:f7:78:1b:7b:4e:22:ca:4e:50:10:
20:89:f7:cc:1f:8e:5c:fe:36:a8:26:b0:9f:85:08:
20:84:c2:c7:eb:70:e5:e9:66:43:da:86:45:a5:e2:
cc:8f:72:42:75:86:8a:57:ad:d4:4f:eb:48:51:26:
be:5b:f0:db:17:dd:73:b9:0f:98:7b:c6:c3:f5:0d:
7f:e4:42:29:bb:bf:c4:45:2d:44:a7:44:a1:dd:97:
97:88:61:6e:f0:ea:a9:48:d0:fb:6a:31:4c:6c:35:
b6:fb:6b:b0:27:04:05:02:6d:11:7c:4b:c0:5a:46:
b8:99:c7:67:89:ce:9f:6b:86:d9:7b:b6:67:5d:5c:
f3:d9:37:d2:ad:3b:6b:0b:d6:49:a8:39:d2:ed:68:
29:cb:06:75:79:14:9a:d3:df:76:69:e8:c3:1f:d6:
73:49:ea:66:bc:bd:5b:79:f9:bc:92:b8:7d:82:cd:
8f:b6:79:3f:1d:a6:ee:80:cb:ef:0a:8c:75:86:38:
4a:d0:4c:ec:93:ea:18:3e:97:08:7f:6e:10:88:77:
a9:8a:ae:09:34:45:d9:79:d3:e1:77:1c:0c:2e:a7:
7a:48:90:df:2f:ab:45:42:55:32:6e:75:84:3c:ba:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EA:AB:33:6D:D6:BB:81:DA:86:EA:FB:1D:16:83:93:4B:90:3E:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A855A148CAC511EFAF70AC7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.190.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:89:c3:8f:46:69:42:75:a2:fd:6c:5a:52:54:0c:b1:1e:da:
bd:a5:a8:3c:cd:6f:82:3d:b6:6a:9e:1e:32:99:32:7e:92:a1:
f8:4e:81:04:b9:49:b6:78:a9:71:58:aa:80:be:6c:86:ee:e6:
58:19:bc:3d:6a:09:db:2f:50:17:c1:93:23:32:e3:37:f5:a3:
7a:30:1c:22:b1:74:20:45:34:0b:3c:09:f1:e6:c2:06:e8:10:
27:a4:3d:6d:b5:f6:f2:72:a6:67:60:ba:14:bf:6b:ae:b6:d8:
f3:d2:e8:3c:60:d3:c6:0d:74:a9:29:5b:4c:c2:c0:89:85:44:
e3:b6:64:10:11:e5:4d:49:b2:9b:1c:28:b4:3b:d7:c5:3e:a6:
72:2e:ab:de:88:ea:02:9f:b1:20:1f:57:71:37:b3:9c:52:91:
b6:fd:81:48:4b:db:b1:2f:dd:4e:32:b7:ce:a2:13:a0:8b:fb:
48:11:84:71:13:4c:c8:e2:ab:86:6e:7f:73:dd:d7:c3:be:26:
ae:86:1a:87:4d:99:fe:f3:f9:f8:71:f0:85:a8:89:56:d2:4a:
75:f5:23:20:32:49:21:1d:15:d8:2b:43:4e:65:d4:8d:2d:a8:
5d:cc:29:d9:53:fb:73:92:b6:1b:95:54:3f:36:75:b3:e8:93:
da:e2:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:29 2025 by rpki-client