Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB012866CCD811EFA2B474B1762E951A.roa
File: BB012866CCD811EFA2B474B1762E951A.roa (raw, json)
Hash identifier: AoibhzWpKx+NCwOexz6nZHJfZtT1KMBK3rt4ZL6uiao=
Subject key identifier: 54:57:8C:17:45:91:16:8B:9F:26:58:07:23:02:33:12:9B:7F:B3:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB012866CCD811EFA2B474B1762E951A.roa
Signing time: Tue 07 Jan 2025 09:21:09 +0000
ROA not before: Tue 07 Jan 2025 09:21:05 +0000
ROA not after: Sat 18 Jan 2025 09:21:05 +0000
asID: 142062
IP address blocks: 156.232.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64302 (0xfb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:21:05 2025 GMT
Not After : Jan 18 09:21:05 2025 GMT
Subject: CN=677cf205-dc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:02:e8:42:c3:8e:79:2b:49:81:22:f0:4f:
45:c7:84:05:9d:a8:5f:7a:70:4f:0e:13:b8:6d:3c:
82:b9:35:5f:69:fd:4d:30:f5:29:67:b3:2d:31:e8:
23:69:e5:e3:81:c4:cd:de:94:29:0d:04:9b:29:6e:
fe:21:b7:9c:25:ff:c7:c5:e7:51:15:06:d7:cd:7a:
53:21:b5:fe:d5:99:82:92:37:b4:11:c9:f8:4f:7c:
f9:4d:c5:74:21:24:9e:0a:9c:44:4c:62:c4:21:09:
4e:0c:87:76:4e:79:7f:0c:e2:8d:e9:07:b2:e2:30:
9a:94:16:86:fd:f7:ee:40:60:d2:c5:f6:ad:65:02:
9d:b6:51:c8:b9:c7:1e:29:4b:08:b2:f3:4c:70:e2:
00:ef:87:51:19:29:83:7e:ca:32:d9:c5:57:a1:46:
bd:29:f6:ad:41:ed:9d:6b:dd:6d:3a:55:f5:e7:df:
3a:15:f5:25:ff:96:51:48:f6:45:ba:e3:83:e7:1d:
79:32:44:4d:ec:bb:44:b1:90:63:38:0f:74:78:96:
b9:c7:e9:8d:49:d8:b0:58:21:2a:e0:25:31:2e:6e:
fc:85:67:d6:a5:25:96:04:1e:24:b3:e4:4c:cb:51:
ed:81:36:c0:30:11:f6:26:5d:d4:5b:f4:b3:b0:29:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:8C:17:45:91:16:8B:9F:26:58:07:23:02:33:12:9B:7F:B3:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB012866CCD811EFA2B474B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:06:f1:69:bd:64:e7:07:27:3a:e1:c7:cd:0e:1b:8b:f1:1c:
2c:67:48:23:2c:ec:02:c2:4a:d0:45:a2:8d:25:75:f7:c5:84:
40:cb:14:be:23:d8:94:04:c3:53:24:40:3e:9c:f4:6c:0c:7b:
dd:bf:f7:4a:e7:b1:6d:51:e5:f2:50:60:66:8a:8e:0e:b1:a4:
b2:71:17:dc:ab:f7:4a:d1:35:bd:45:4c:de:71:a7:f4:f9:2b:
ee:82:ff:68:e1:6b:6c:7e:a8:23:5c:f5:d8:63:81:7e:66:05:
a6:a6:1c:3f:04:ec:da:9d:b5:cd:77:3e:08:c8:45:d2:78:b6:
69:d3:48:3b:dd:55:33:a6:35:b3:e3:c6:2f:c7:fe:d5:b7:68:
b2:94:8e:60:00:cf:cd:49:2a:d1:cd:ec:90:f4:0c:f5:f6:da:
cb:a8:c7:c2:2a:88:15:e1:16:21:aa:31:43:5f:fd:6a:0f:62:
18:83:d2:eb:43:ee:1a:ee:b9:e9:56:0e:2b:26:9f:b0:f6:80:
d6:0c:5c:4b:9e:0c:a9:18:3b:fa:3b:61:6c:72:b1:c6:e8:ae:
f0:d8:f2:2f:c8:9e:02:57:e4:dd:41:fe:a9:c5:31:2d:f4:0e:
7b:27:0e:17:a0:13:30:8b:53:aa:b0:30:c8:6a:96:25:40:71:
b1:65:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:13 2025 by rpki-client