Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B320141CB21711EFAED5699B762E951A.roa
File: B320141CB21711EFAED5699B762E951A.roa (raw, json)
Hash identifier: GH2qogEIPdqxAB6O2oYBcHq0jpmfrsYi7AbqDgNoGQg=
Subject key identifier: 19:1C:D8:6D:06:83:80:3B:03:68:C3:01:7F:98:13:F2:B8:FF:2D:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B320141CB21711EFAED5699B762E951A.roa
Signing time: Wed 04 Dec 2024 08:13:53 +0000
ROA not before: Wed 04 Dec 2024 08:13:49 +0000
ROA not after: Thu 23 Jan 2025 08:13:49 +0000
asID: 63139
IP address blocks: 156.227.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57182 (0xdf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:13:49 2024 GMT
Not After : Jan 23 08:13:49 2025 GMT
Subject: CN=67500f41-cd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:05:35:56:8e:7c:5c:90:71:f4:7d:f1:f5:
7c:41:a5:23:50:e9:70:fd:af:7f:43:ac:fe:77:f2:
56:bc:89:5e:8e:42:9b:12:de:18:7b:f3:cc:df:ca:
88:63:e4:b9:ae:fa:61:09:5f:5f:cf:34:7e:bc:3f:
99:79:1a:1e:f4:27:09:8e:f4:5b:6b:af:50:9c:98:
b4:cf:19:32:ab:6e:00:f8:ed:fd:99:8d:e8:36:81:
42:57:0d:76:cc:ae:d5:21:26:07:71:1d:14:20:db:
49:8f:77:4d:8c:02:71:f0:08:a6:e5:0e:42:ee:4a:
81:d9:37:ac:e4:8c:35:21:46:35:81:14:4a:5b:17:
49:75:c5:64:8f:60:d1:33:04:f1:77:bd:09:1d:f8:
00:02:e7:a9:29:49:50:ab:be:30:68:e3:f7:9d:dd:
3e:a0:a6:cc:e7:73:20:fa:fc:24:32:df:87:ec:dc:
8a:28:18:22:82:12:34:2a:e2:ee:d3:a2:6b:1a:76:
09:cc:95:50:c1:d1:2b:f4:aa:2c:dc:ef:be:23:c2:
4e:78:1c:fa:70:75:4a:53:67:ca:b8:df:39:66:07:
35:2d:2b:2b:27:3b:61:21:b2:23:b1:c0:88:e9:ee:
96:22:50:27:f4:16:bd:a5:30:58:dd:93:b7:02:c5:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:D8:6D:06:83:80:3B:03:68:C3:01:7F:98:13:F2:B8:FF:2D:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B320141CB21711EFAED5699B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:8c:f8:37:3d:b6:b9:32:ee:96:5a:c5:22:6c:06:eb:05:ab:
5a:6d:22:79:39:a5:ae:fe:be:64:32:e9:ae:e4:a8:87:e2:44:
76:f2:89:c1:9c:02:e9:47:6d:b3:0d:d7:4b:49:61:da:0f:ab:
50:99:67:61:77:5e:d1:d9:9d:b8:f8:bb:ca:eb:e4:e0:32:c4:
48:64:85:d7:e0:72:34:68:dd:56:f4:1c:f1:8c:07:3e:61:75:
24:52:92:d1:60:e7:4f:cb:69:83:57:59:20:2d:19:c3:72:7a:
a5:a5:2b:8e:10:bb:18:f6:54:68:1c:a7:3b:83:1e:47:e5:bd:
7a:41:1c:13:03:a1:af:37:5f:23:bf:57:68:ba:a7:e3:95:f4:
09:cc:37:69:9f:fd:cd:1b:b1:72:5f:2e:a7:31:45:eb:e9:5c:
18:4f:b2:a2:00:8b:ee:13:87:90:28:a4:cb:5c:ac:6e:db:6e:
58:c1:b8:51:00:8e:18:b3:47:76:97:d0:12:ab:7c:a4:36:61:
98:a8:cf:fe:da:32:02:9e:dc:6e:be:3e:af:81:72:c9:1c:7e:
9b:cb:d4:0b:8c:df:41:e7:be:49:2c:cc:b2:b8:1b:d7:54:28:
23:ec:70:10:fe:ed:fe:57:c1:4f:0a:3c:71:ef:42:c8:82:63:
21:00:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:01 2025 by rpki-client