Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE204D4EB21811EF9B6814A2762E951A.roa
File: CE204D4EB21811EF9B6814A2762E951A.roa (raw, json)
Hash identifier: YQ1ewTZ9ZvfZGfboy0OsNAkk7usOROZTJEv3xhEgods=
Subject key identifier: 0A:99:D6:E1:5A:44:2F:81:07:43:8E:47:EE:86:CD:06:E2:F8:AC:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE204D4EB21811EF9B6814A2762E951A.roa
Signing time: Wed 04 Dec 2024 08:21:48 +0000
ROA not before: Wed 04 Dec 2024 08:21:44 +0000
ROA not after: Thu 23 Jan 2025 08:21:44 +0000
asID: 63139
IP address blocks: 156.227.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57194 (0xdf6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:21:44 2024 GMT
Not After : Jan 23 08:21:44 2025 GMT
Subject: CN=6750111c-17c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:5c:a7:9f:a9:8f:3a:47:1a:c6:f8:23:1a:
a7:b0:1c:dc:43:51:da:03:de:b3:f6:8b:51:c9:00:
c1:5e:7e:78:9b:d2:86:92:9a:fb:93:fa:8b:64:33:
4b:e1:10:ef:c2:76:43:99:13:63:8c:51:3c:82:2c:
8a:61:d9:2c:eb:06:0b:1b:d1:80:c6:3b:e1:81:6e:
97:d6:2f:e2:dd:74:84:3e:ce:f6:86:a9:6c:8a:41:
68:3c:34:fa:22:92:dd:09:d7:07:c8:3f:9b:cb:0c:
b6:b3:a0:82:5f:28:eb:f9:57:43:28:ba:6c:10:dc:
95:73:1f:dc:1d:fb:38:d7:d5:71:2a:82:da:b1:ca:
a2:dc:a9:09:8a:fe:a7:24:fb:ef:d6:f7:bc:7e:dc:
87:48:eb:05:e1:2b:ee:81:4c:44:f4:ee:2b:ec:7a:
39:e2:d0:ad:cb:46:01:87:ae:5c:19:31:c7:29:62:
33:fc:15:50:fc:8a:47:03:6d:45:ae:99:7a:4a:00:
f5:78:02:7b:42:66:56:82:86:a0:27:2b:2f:2f:66:
cb:7f:5f:cf:46:b5:12:9e:16:39:1f:e2:a1:90:cc:
8d:0e:fd:51:e6:e6:17:3f:f6:e1:38:3d:eb:36:32:
09:38:f6:61:87:af:30:49:d8:29:b1:92:82:91:95:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:D6:E1:5A:44:2F:81:07:43:8E:47:EE:86:CD:06:E2:F8:AC:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE204D4EB21811EF9B6814A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:be:33:5a:24:d8:62:39:9c:9a:db:7e:51:6f:33:97:46:0d:
d4:c6:8b:57:d9:ba:b8:a8:4f:93:b2:8e:a7:8d:34:cb:9f:63:
b1:4b:77:7e:1c:e9:bc:98:12:51:0a:fd:30:6d:6b:8f:5f:65:
11:da:3f:45:ec:fc:7d:31:83:8c:2d:d4:80:b0:1e:92:b6:4d:
2f:fb:02:8f:60:a8:37:a0:e0:d1:47:0b:42:15:d5:77:0a:72:
c4:28:9f:19:61:17:66:73:b2:ea:4f:7d:04:a8:35:0c:fc:fd:
15:8c:97:40:7d:5a:c3:c9:c5:57:83:cb:53:db:18:6b:5a:d7:
90:51:23:7b:d7:84:c2:e8:67:a6:33:95:f1:74:f1:df:44:e3:
2f:47:bf:73:21:1f:bc:73:a3:7e:ab:14:31:fb:d9:d8:e0:a1:
ba:fa:86:d3:24:e7:f2:d1:05:6b:0b:68:5f:01:d0:d0:e0:bc:
e8:2d:e6:0b:37:c7:b1:72:24:7a:18:d2:36:8b:a6:91:b4:a8:
fe:a6:57:a7:03:35:46:0d:cd:1c:34:85:78:5f:4d:dd:81:2c:
3b:2e:d2:8c:71:b6:f8:05:48:30:bf:92:65:9e:90:c6:df:80:
f9:fc:75:ea:e1:49:b4:4c:45:a1:b6:5c:7d:73:9b:e5:0e:44:
4e:5b:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:10 2025 by rpki-client