Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFCAF54D25411EFA5C5EB84762E951A.roa
File: CDFCAF54D25411EFA5C5EB84762E951A.roa (raw, json)
Hash identifier: BMgWsF1MDOEZ2c6ynnOmWLqqXU4o2/NT/h1batc8J5o=
Subject key identifier: BB:FD:B4:25:CF:CC:DC:1F:05:B0:DE:DD:BB:85:6C:09:7C:35:C6:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010712
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFCAF54D25411EFA5C5EB84762E951A.roa
Signing time: Tue 14 Jan 2025 08:51:55 +0000
ROA not before: Tue 14 Jan 2025 08:51:51 +0000
ROA not after: Wed 22 Jan 2025 08:51:51 +0000
asID: 40065
IP address blocks: 156.251.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67346 (0x10712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 08:51:51 2025 GMT
Not After : Jan 22 08:51:51 2025 GMT
Subject: CN=678625ab-bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:bb:4f:b9:83:31:90:1a:72:70:e7:f8:de:
a6:b9:5f:9d:89:21:4a:1a:68:52:46:d6:73:87:4c:
c9:53:8c:4a:5c:35:a2:d1:3d:4d:c3:77:a3:6b:87:
67:3f:f9:49:0d:cc:53:ba:4a:2a:8b:74:91:21:12:
f2:06:ec:2a:d7:95:db:db:24:3b:cb:e7:ff:da:e8:
f9:23:a8:29:b3:18:ce:95:a4:da:80:87:21:f5:6c:
dc:9c:e4:5c:19:e8:93:7d:51:a3:58:3d:7e:fd:37:
51:9e:b4:2f:f7:7f:96:23:dc:28:d1:b5:2c:d3:e6:
c7:1c:27:34:0b:f1:08:bb:04:d1:42:00:bd:ae:b7:
52:2a:23:23:20:a1:0f:ff:35:4e:60:19:35:8a:92:
bc:c7:b2:cc:9e:dd:99:dd:a0:a5:93:c7:02:62:2c:
f7:80:f8:ce:3a:3a:8b:eb:e8:3a:f5:08:a6:67:5b:
6d:f8:cf:98:fa:9a:31:98:05:d4:dc:14:ad:ea:f0:
21:a7:e0:8a:14:3e:87:d5:32:60:99:7e:a0:94:c7:
a1:22:55:15:5e:cd:91:29:e0:98:db:1f:67:70:61:
70:ea:d8:58:21:97:76:18:d7:8e:7a:3a:e1:96:56:
a9:1f:db:2b:d3:1c:33:91:ce:fa:ae:1d:12:d4:7f:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:B4:25:CF:CC:DC:1F:05:B0:DE:DD:BB:85:6C:09:7C:35:C6:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFCAF54D25411EFA5C5EB84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3b:73:9e:69:d1:58:a7:70:aa:2f:0c:17:e7:52:fd:52:e7:a1:
32:c7:f8:02:ae:90:c7:39:14:97:14:99:7a:90:40:6b:31:b4:
01:fb:b7:f2:98:54:c2:6d:c1:8f:f1:7a:92:ac:29:64:44:c7:
4d:db:ab:f9:1d:0e:e0:c8:ba:d0:38:5f:89:8e:cc:c1:b0:d9:
9c:cd:46:b7:fb:fc:2e:cb:92:8a:cf:7d:0a:b2:4e:c5:e1:9e:
96:fa:8c:7e:cd:41:a4:fc:3c:fd:b2:7f:46:48:35:dc:d9:cc:
92:7f:5d:70:2e:df:60:32:bd:57:59:e3:ed:1a:f2:52:ee:ff:
4b:d2:50:c9:b6:26:9b:e4:97:69:c5:df:0c:af:8d:2a:73:3c:
5c:81:2e:ef:22:f7:4c:a1:ac:f6:ce:e1:2b:2b:1e:ce:14:11:
b0:f0:f0:3e:7b:38:da:b0:37:9c:e4:51:9d:fc:53:72:5b:17:
eb:7a:5d:ff:39:88:83:f6:45:ae:b0:42:87:7f:a9:d8:dd:e5:
ef:1c:55:0d:fb:03:b4:47:cd:05:18:e2:c6:b7:12:1f:35:98:
50:f8:ef:a9:9f:90:1a:e8:31:ef:ea:2d:a7:bb:31:3c:6a:66:
50:84:dd:bb:18:8b:f6:8c:f4:30:cd:81:d0:13:04:e3:42:77:
2c:2c:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:13 2025 by rpki-client