Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C149A38ACE7F11EF97121743762E951A.roa
File: C149A38ACE7F11EF97121743762E951A.roa (raw, json)
Hash identifier: 1M+hg55gX14MPksBlBsXgkUN0eymUUOEJ9giCBhF4h4=
Subject key identifier: BD:B3:86:72:1C:79:E6:FA:06:39:FE:35:D9:DF:94:06:2F:66:99:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01038E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C149A38ACE7F11EF97121743762E951A.roa
Signing time: Thu 09 Jan 2025 11:49:20 +0000
ROA not before: Thu 09 Jan 2025 11:49:13 +0000
ROA not after: Wed 22 Jan 2025 11:49:13 +0000
asID: 22773
IP address blocks: 156.246.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66446 (0x1038e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:49:13 2025 GMT
Not After : Jan 22 11:49:13 2025 GMT
Subject: CN=677fb7c0-4561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:c6:4b:51:82:04:43:66:b0:8b:ea:71:70:
4a:63:42:c5:4b:b8:10:fc:10:fa:3d:fd:47:05:a2:
85:95:50:e5:10:67:0d:b0:ee:91:6c:63:09:33:16:
0a:88:e1:e2:79:60:f9:35:af:66:1e:e9:c5:3c:dc:
86:bb:f2:d6:5e:49:42:70:4e:f5:31:4a:a7:47:46:
33:c6:92:cc:58:65:e3:98:8e:ac:d2:f9:ee:4b:f5:
31:18:88:0e:45:2d:7c:d1:4c:0d:b6:4d:10:7b:8e:
3f:e6:16:a5:c6:fc:5c:25:6b:28:44:07:45:69:b4:
a1:87:e7:1c:aa:28:99:f5:93:40:d2:24:f8:d3:28:
ac:f6:06:34:eb:dc:4b:dc:df:bd:36:fb:95:eb:95:
21:e3:d2:ca:63:71:b0:72:1b:2a:77:b4:b4:ee:a1:
a3:fb:f0:3b:43:d1:e3:d3:b4:5b:5f:ed:a7:2c:d2:
e3:c1:8c:8a:85:23:8e:52:83:4f:04:9a:cf:a9:4c:
9d:4a:88:cb:df:54:9e:40:b6:6b:48:ac:45:51:95:
73:bc:6b:62:c0:6e:5c:31:65:a4:48:85:31:24:d8:
e6:07:ec:55:05:18:61:e8:64:ef:6c:3a:ff:4a:bb:
4a:bb:c7:e0:f9:50:c8:e5:55:b3:b9:a9:a2:e6:a6:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:86:72:1C:79:E6:FA:06:39:FE:35:D9:DF:94:06:2F:66:99:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C149A38ACE7F11EF97121743762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6f:c3:ec:bc:e6:e6:6e:c6:9c:02:c7:16:8b:50:35:a9:37:
7d:ad:29:e6:5c:6e:27:bb:c7:d5:c8:fa:88:b6:f1:e7:6a:c2:
4a:43:51:91:5f:b3:82:cd:04:33:e3:e8:b1:b0:31:38:38:62:
d2:81:4a:43:ca:e1:07:c2:d5:ce:ec:e1:3a:f5:f3:47:cf:46:
2e:a9:65:24:3f:25:bf:37:ea:ae:ff:99:15:49:47:17:98:47:
9e:a7:de:c0:00:ec:1e:f4:06:6a:23:97:e1:36:d4:f1:36:93:
65:59:70:36:31:f2:09:e7:47:06:5d:90:9c:34:43:89:5d:ac:
b0:d0:23:36:cc:0a:04:ab:d7:95:cb:e2:34:9c:4a:3d:ec:17:
56:88:b1:e2:50:13:c2:21:9b:52:db:82:ff:49:15:45:7b:db:
f3:7b:e5:6f:b7:0d:41:8d:23:6a:7f:9a:b3:eb:b5:a5:93:f6:
b0:75:93:6c:99:58:8f:c4:2d:ea:12:1f:40:9e:f1:48:1e:19:
33:7c:5f:68:87:f8:24:11:3b:58:8a:92:07:89:30:9a:6a:0d:
de:15:05:bf:f1:77:30:ff:21:f1:10:c1:12:62:81:f1:74:10:
c2:f5:03:84:44:23:43:5c:b4:fb:0c:c6:9a:01:64:e4:88:bb:
8e:bf:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:13 2025 by rpki-client