Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA538718BF9C11EFADEB289D762E951A.roa
File: BA538718BF9C11EFADEB289D762E951A.roa (raw, json)
Hash identifier: sPcWCos4xo2+/P4TMaXMLpNxYCIiBSU1YeP4/i0buoc=
Subject key identifier: 15:0A:0C:57:61:81:EE:1F:98:CD:BE:63:05:D0:EC:BF:D8:09:86:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA538718BF9C11EFADEB289D762E951A.roa
Signing time: Sat 21 Dec 2024 13:08:53 +0000
ROA not before: Sat 21 Dec 2024 13:08:50 +0000
ROA not after: Fri 31 Jan 2025 13:08:50 +0000
asID: 984
IP address blocks: 156.249.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59316 (0xe7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:08:50 2024 GMT
Not After : Jan 31 13:08:50 2025 GMT
Subject: CN=6766bde5-e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:73:d8:41:1c:5d:ac:b9:97:38:f2:eb:fb:
9b:83:3d:99:29:9f:e1:c7:b5:20:17:97:7d:79:53:
7f:af:88:67:b4:cc:67:86:ea:a1:4b:21:a5:39:8d:
1b:3a:a7:04:a0:0c:f7:c5:23:a7:7a:d5:d7:7c:60:
09:9c:cc:00:6b:b8:41:22:8f:3f:a9:4d:5d:f6:ed:
d6:8b:2c:42:36:9b:f8:08:54:86:1a:72:45:b6:7e:
e7:a6:63:61:5a:c7:c6:d3:05:d9:71:4b:c4:bc:67:
40:0e:6e:33:80:54:20:30:70:da:56:63:68:24:63:
f7:87:36:f9:0b:d0:d9:ee:5b:d8:32:2d:ab:9f:42:
02:74:a6:06:44:23:87:e8:b4:72:83:e7:bb:73:9a:
8b:3c:24:10:93:50:cd:1a:8d:d7:1f:67:41:86:69:
8f:a7:86:c3:66:41:80:bf:d7:e4:95:82:57:a5:26:
7f:d5:84:67:59:2e:5a:d6:e4:06:cf:91:6f:e7:a0:
ca:2e:38:85:2a:a1:57:74:85:52:08:e3:c5:3b:d7:
b2:f3:5e:0d:fb:4c:c4:fc:38:53:26:c6:a3:0e:39:
38:c1:4a:72:86:be:a9:53:50:ca:38:f6:b4:40:44:
4a:2b:42:28:86:2c:3c:20:87:b9:f9:b0:04:76:0d:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0A:0C:57:61:81:EE:1F:98:CD:BE:63:05:D0:EC:BF:D8:09:86:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA538718BF9C11EFADEB289D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.197.0/24
Signature Algorithm: sha256WithRSAEncryption
97:07:f0:bd:76:90:5d:00:fb:67:28:f1:90:7f:16:dc:41:ab:
dc:e1:12:7c:0f:aa:7e:1e:98:89:e6:cf:07:68:94:16:d7:59:
a8:19:48:b5:03:bc:12:0d:e5:a2:ec:44:f6:2e:21:14:73:77:
6f:3d:11:b0:fd:47:a7:e3:b1:84:ba:b2:2a:f5:a2:08:bb:7f:
0e:1a:72:7c:ac:87:36:ee:40:eb:9d:a5:2c:61:09:9c:65:bd:
ba:de:09:29:17:02:cc:31:01:71:bb:71:8c:0a:dd:94:d6:dc:
04:a8:48:63:bd:01:be:68:8a:b8:ab:42:58:67:00:e9:b6:d7:
91:7e:94:c4:ff:f2:20:e6:82:d2:a8:d0:5f:17:10:8d:1c:6d:
a6:01:80:43:61:96:4a:0b:22:78:cd:46:eb:41:57:b4:a2:12:
91:ca:96:72:3e:c7:be:30:8d:f0:4f:ae:cc:ed:34:38:c8:6b:
f0:77:49:ff:ca:c2:0c:54:74:21:97:ae:5a:e0:1f:b1:25:49:
43:0b:0f:02:5b:05:65:c7:78:72:9a:ea:64:0e:a4:a8:4b:ef:
4c:63:2d:8f:04:e2:62:15:8f:19:d7:d1:2b:4e:98:61:c9:41:
eb:08:d1:ec:cc:9a:08:0d:31:5d:12:f0:bd:20:37:13:3d:1b:
bb:51:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:44 2025 by rpki-client