Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD1055ECACE11EFBEDD3DB7762E951A.roa
File: CCD1055ECACE11EFBEDD3DB7762E951A.roa (raw, json)
Hash identifier: TKopLLHzbTLwGhZY1offDfbP+q5nreWxhjFU7airkB0=
Subject key identifier: 9B:B9:F1:AF:32:B2:E5:D8:6B:0A:9D:BA:63:C0:6C:6C:A5:63:F0:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F76E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD1055ECACE11EFBEDD3DB7762E951A.roa
Signing time: Sat 04 Jan 2025 19:05:02 +0000
ROA not before: Sun 05 Jan 2025 19:04:58 +0000
ROA not after: Sat 18 Jan 2025 19:04:58 +0000
asID: 142286
IP address blocks: 156.244.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63342 (0xf76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:04:58 2025 GMT
Not After : Jan 18 19:04:58 2025 GMT
Subject: CN=6779865e-3109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:b7:1c:3e:be:01:7d:72:75:9c:de:52:29:
fd:a9:6a:75:ac:b5:3e:4d:a9:ae:59:8e:57:75:42:
3a:c7:39:47:52:f1:be:e2:a1:08:c3:de:dd:f2:35:
5f:5d:98:16:15:ae:91:eb:12:19:48:68:c7:c3:e1:
5d:f9:10:2c:bd:a1:c9:85:f4:5d:5a:dc:67:e3:20:
04:ef:b6:ad:bf:ac:49:63:22:4b:fe:6a:bf:83:95:
95:16:63:a2:9c:fd:14:da:d6:7d:1d:7d:5b:bd:09:
57:34:bf:b8:b4:79:11:65:a9:d2:e9:f6:93:ac:c4:
17:fc:55:f1:e6:b4:1a:90:90:8e:98:a3:cc:6b:7d:
e0:31:6f:79:2d:6e:db:72:67:1e:91:eb:98:3d:a7:
1e:1a:63:34:2b:0a:9c:3e:f8:b1:ef:b7:c3:ff:55:
96:03:52:56:ff:c7:3e:36:89:09:05:fb:34:7f:b5:
69:db:03:f6:b5:08:7c:ba:de:18:52:2e:71:17:61:
01:90:86:e4:37:47:f8:ad:9b:85:6d:b7:20:55:26:
da:3d:91:e7:ee:da:50:7a:32:5e:c4:3b:7d:08:f5:
0f:90:64:0e:36:f4:c6:c5:c1:79:d1:89:08:7f:4a:
c0:bb:0b:1c:64:77:27:90:eb:2b:04:6f:fa:6a:5f:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:F1:AF:32:B2:E5:D8:6B:0A:9D:BA:63:C0:6C:6C:A5:63:F0:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD1055ECACE11EFBEDD3DB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
54:d4:4d:c9:80:7c:29:95:49:84:48:83:8b:34:8a:7d:eb:22:
c0:f1:6e:43:53:96:6f:74:28:ae:44:fe:ae:33:95:52:bf:ca:
95:2e:21:e3:3f:88:42:5b:97:0e:f1:09:17:f6:fa:03:26:93:
8d:7b:3a:e2:d6:61:05:6f:29:cb:87:7f:ad:af:ed:5b:3e:21:
ac:06:49:6f:86:68:11:f2:d8:76:4c:bc:2f:42:83:cb:8c:c4:
59:fc:43:00:bc:5c:87:ed:97:03:11:89:5f:da:67:6a:29:96:
5e:ea:2d:8a:13:36:08:e4:64:12:ac:c8:47:c4:47:0c:a7:2d:
8d:a5:37:6a:00:de:5a:ec:9e:c5:f3:24:3e:0f:f6:e5:14:bb:
6d:2d:0a:e6:66:df:fe:9e:ed:07:43:6e:e9:81:a5:b2:f6:33:
d0:a2:fe:19:c2:f5:7f:bb:e9:f1:47:8c:12:d8:fc:77:72:9c:
7b:cd:13:4d:50:ee:d9:41:2a:8c:aa:29:3d:08:44:ef:a4:30:
20:2c:7e:a7:e8:7a:72:48:12:ac:c4:d3:de:e2:9d:20:13:31:
5c:cc:65:06:88:a7:46:72:bf:4e:d0:7a:e9:91:62:45:2b:3f:
a0:a7:0c:cd:31:26:a5:84:47:b3:2e:49:56:a7:6d:2f:b8:9a:
0b:c5:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:04 2025 by rpki-client