Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF06C1ACD00911EFB992278D762E951A.roa
File: CF06C1ACD00911EFB992278D762E951A.roa (raw, json)
Hash identifier: P+3/Kzbbt9LFux7YQ2rVLHofUWcTRcw+VubQTaaJs5I=
Subject key identifier: 63:81:FB:D5:46:07:DC:33:D9:72:A1:61:D2:C7:06:58:8C:CC:F8:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF06C1ACD00911EFB992278D762E951A.roa
Signing time: Sat 11 Jan 2025 10:50:02 +0000
ROA not before: Sat 11 Jan 2025 10:49:58 +0000
ROA not after: Sat 25 Jan 2025 10:49:58 +0000
asID: 54801
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67004 (0x105bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 10:49:58 2025 GMT
Not After : Jan 25 10:49:58 2025 GMT
Subject: CN=67824cda-d06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:a9:fd:ef:0f:1d:b9:44:52:21:67:19:4c:
37:88:e7:53:92:d4:28:09:60:9b:e2:fb:a9:d7:42:
2a:67:e1:27:62:1d:74:bb:ac:b1:10:04:75:a5:c0:
c5:83:aa:0b:33:2f:11:1b:ad:fa:97:1c:72:f4:64:
91:92:e4:e8:94:4b:48:5b:30:aa:2d:ce:30:f0:ee:
5d:85:30:65:b8:f8:4a:92:3f:38:ca:b2:84:65:5e:
d3:37:a0:ac:b0:dd:30:fa:f6:b0:18:14:71:b1:af:
25:b9:b4:4d:d7:73:72:48:c6:32:8f:bd:8f:e0:8f:
a2:69:09:7e:3d:58:72:5e:1b:75:4a:c3:79:17:b8:
0d:f1:3d:0b:0b:05:70:a2:26:3c:55:99:f6:a2:f2:
90:87:8f:a0:d0:ee:93:ff:f7:ec:c0:46:58:9b:e7:
5a:68:1a:71:be:4d:9f:b5:00:f8:65:2d:a2:1b:bb:
e7:2a:71:74:34:ea:39:c9:c7:37:de:d5:e0:d3:ee:
3c:09:dc:1d:bf:67:97:55:e6:4b:2f:01:ef:41:62:
ec:6d:fa:b8:fd:77:10:c9:30:a7:3b:6b:c3:94:fe:
5c:73:98:46:6a:02:9c:fa:a1:b8:ec:00:94:77:77:
1c:ea:f8:0c:6b:03:8a:e9:6d:32:b2:2a:a9:9e:b5:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:FB:D5:46:07:DC:33:D9:72:A1:61:D2:C7:06:58:8C:CC:F8:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF06C1ACD00911EFB992278D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
17:b3:4b:38:f5:34:3b:c1:b9:a8:22:dd:29:57:e6:5f:90:4b:
aa:ac:da:f9:34:ec:4c:e6:d5:8b:5a:9e:a1:a5:1b:5f:63:a4:
dd:62:c9:6e:68:95:50:3a:23:27:1f:49:c4:29:d8:f3:c0:c8:
99:d3:5c:34:bf:6b:45:b9:10:13:28:6a:fc:98:4d:d1:ea:38:
22:27:c0:7b:4e:5f:20:2c:5c:09:7e:35:69:a6:d3:a4:98:97:
29:f2:b3:d6:8a:ac:72:6e:bd:96:0c:49:d6:44:11:b2:0f:a0:
33:4a:74:85:b6:f7:17:72:7e:a4:2f:17:0c:27:d9:0d:c1:00:
d7:35:9a:15:08:b2:9a:fd:10:ea:21:fb:be:d8:88:1a:cf:09:
bd:18:20:61:f9:12:d8:ce:64:d1:f9:35:c7:56:d7:99:39:53:
98:40:b6:50:5d:71:33:11:84:5e:bd:66:6b:be:92:3f:d7:e6:
17:d7:94:46:bc:a4:2a:15:ae:b4:e1:79:15:a2:28:31:4c:4c:
49:e9:e6:3b:e7:f7:8b:db:0d:da:fb:c0:f8:6b:67:42:e9:eb:
45:83:00:1a:15:aa:7a:0f:fc:73:2e:1a:a0:2c:a8:d0:f1:f5:
49:d6:80:bd:ce:d3:2c:3b:6f:bf:b1:bb:9e:5c:5d:39:33:ac:
72:6f:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:01 2025 by rpki-client