Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4DC3FEAC4F511EF82585D93762E951A.roa
File: D4DC3FEAC4F511EF82585D93762E951A.roa (raw, json)
Hash identifier: mC7cpPcyJGfpm5xGYnTFKAbHa6sZJW9iUcjJvmX59uU=
Subject key identifier: 5E:36:D8:1D:BB:27:28:14:05:DA:57:1C:85:B6:6D:AF:82:51:EC:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F121
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4DC3FEAC4F511EF82585D93762E951A.roa
Signing time: Sat 28 Dec 2024 08:29:19 +0000
ROA not before: Sat 28 Dec 2024 08:29:15 +0000
ROA not after: Wed 22 Jan 2025 08:29:15 +0000
asID: 141342
IP address blocks: 156.238.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61729 (0xf121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 28 08:29:15 2024 GMT
Not After : Jan 22 08:29:15 2025 GMT
Subject: CN=676fb6df-c2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:d2:01:0b:b9:45:a1:d6:cd:3d:1b:a6:de:
30:e1:42:7b:ce:17:ec:0c:c0:35:0a:03:3a:16:59:
3f:83:9f:49:fe:5b:c3:2b:d1:bc:03:b3:fd:ac:3f:
c4:f7:40:57:82:49:56:1a:b0:2b:65:53:25:26:8d:
12:43:2f:d1:d0:94:68:1e:af:93:0e:dc:f0:35:39:
ff:1b:0b:de:c9:f1:3b:35:6f:05:08:84:0f:23:b8:
ae:d1:ee:c2:3f:5c:ab:81:1e:77:33:c7:d8:e4:ec:
f2:ae:b8:9c:2c:c7:28:e0:e5:86:51:4b:39:b9:96:
89:08:11:23:ee:ec:e6:2b:02:f3:13:33:89:e8:86:
bc:37:3b:21:76:e9:bc:fc:cd:6e:db:05:4f:31:2f:
e6:5c:69:ea:f7:ce:11:6b:84:79:15:4e:f1:3d:b9:
13:88:22:cf:41:c3:51:9d:92:fa:4b:03:ff:52:93:
ff:e5:ff:87:ac:66:d1:42:71:ef:c8:cd:c7:f7:06:
45:d3:86:40:84:51:d5:01:cf:fe:cd:a6:0a:b1:45:
90:00:2d:87:fa:7d:cc:1c:07:e3:26:ba:a2:e5:7d:
bc:b8:a0:3d:9f:6f:74:7a:fb:df:bb:37:3f:a5:77:
c1:66:22:0f:be:97:8f:44:ab:83:f7:0a:e6:68:a2:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:D8:1D:BB:27:28:14:05:DA:57:1C:85:B6:6D:AF:82:51:EC:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4DC3FEAC4F511EF82585D93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:d6:4f:bd:b2:9d:d8:46:fc:54:76:2b:ef:67:03:1f:fa:69:
e9:61:57:4a:cd:49:0e:1c:33:2f:6a:e3:f7:4b:06:17:45:58:
b8:fc:f3:32:27:66:d2:07:51:61:b2:3c:00:d7:f2:0e:e4:e9:
6c:59:27:4d:bb:c7:34:56:33:e3:7e:af:38:3b:01:cf:70:3f:
36:15:4b:56:96:89:47:2c:a7:76:16:84:df:fe:2d:aa:d4:de:
fb:c5:95:af:4d:73:87:75:33:77:ae:41:13:79:14:45:ee:c8:
7e:ac:ad:90:90:b3:5c:db:4b:7d:ef:b9:2e:f7:4f:72:1a:a1:
aa:66:3c:f7:03:df:f7:1e:a7:dc:62:7f:40:08:e7:9b:49:7b:
07:25:6e:da:e5:8e:af:c3:3f:5a:8a:14:af:75:03:5f:43:25:
f5:aa:e2:6c:c2:87:27:20:a1:54:2f:fe:77:c6:a3:db:e5:d4:
94:99:c0:cd:51:2b:18:e1:6e:ed:d1:ec:cf:16:7c:e2:63:b3:
b4:60:83:d7:51:bd:40:8a:6c:e8:8c:70:42:01:dc:fb:16:ad:
6e:9a:6d:c4:ce:24:82:c5:54:6c:22:84:9e:d1:65:54:66:44:
90:df:e0:bf:d4:42:79:67:9c:b1:84:1e:ac:0f:84:f1:ba:89:
82:30:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:07 2025 by rpki-client