Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D51EC666BDD511EF9942D974762E951A.roa
File: D51EC666BDD511EF9942D974762E951A.roa (raw, json)
Hash identifier: nNlnqaufWUk34+grwWU0Ox3zftpX3aXmcHR0O62ZSGk=
Subject key identifier: 06:85:A2:91:68:2C:44:9E:34:45:05:D7:A3:9F:71:51:A7:EC:1C:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E599
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D51EC666BDD511EF9942D974762E951A.roa
Signing time: Thu 19 Dec 2024 06:52:37 +0000
ROA not before: Thu 19 Dec 2024 06:52:34 +0000
ROA not after: Thu 23 Jan 2025 06:52:34 +0000
asID: 202656
IP address blocks: 156.236.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58777 (0xe599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 06:52:34 2024 GMT
Not After : Jan 23 06:52:34 2025 GMT
Subject: CN=6763c2b5-073e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:ee:a5:97:fa:6d:c5:61:40:0a:58:f0:7b:
b3:e0:8a:75:20:b4:6b:8c:54:a3:33:20:d1:f3:70:
2d:6f:d2:ad:b8:94:c3:fb:b3:b6:bb:51:29:ab:b9:
d5:80:29:4d:47:8c:7f:89:bb:81:47:ce:a8:41:19:
f1:6f:3e:ed:72:f7:2a:f7:03:93:41:eb:f9:35:e9:
13:43:80:36:55:dc:89:fc:4e:0c:e4:be:4b:7c:2a:
71:a2:a3:7b:ba:56:93:95:24:fe:cf:9a:36:43:68:
de:0d:05:12:65:06:b2:21:45:00:06:38:51:80:fb:
0e:25:f1:a4:97:10:79:ab:fc:f9:f3:01:37:5b:3b:
33:c7:01:1d:df:15:54:11:62:a8:41:90:13:8c:5c:
46:b9:80:3b:83:2b:de:5d:0f:b7:de:d5:b0:c9:7a:
98:35:7f:a7:41:b3:c9:c4:37:1f:5c:69:ea:f4:f0:
1f:a3:80:a0:51:b0:29:27:7e:ce:78:b6:8e:61:80:
24:88:b7:17:1f:79:cf:02:a6:94:87:6d:3e:21:d4:
53:1a:08:ae:22:e4:f4:62:d2:71:b1:fa:04:51:3c:
2d:78:f8:75:26:24:77:c4:4b:27:9b:aa:e7:4e:1c:
89:ab:96:5f:24:49:f1:01:4e:a0:22:ac:2c:f0:fe:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:A2:91:68:2C:44:9E:34:45:05:D7:A3:9F:71:51:A7:EC:1C:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D51EC666BDD511EF9942D974762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.106.0/23
Signature Algorithm: sha256WithRSAEncryption
77:67:d8:53:f3:2f:89:be:97:af:5f:5d:f7:12:d7:a8:8b:6d:
57:86:f9:e9:29:5c:ac:df:6f:a5:60:c4:ec:f5:1d:ec:02:0c:
66:cf:de:dd:98:e2:73:28:49:aa:d4:4f:bb:94:ff:e5:ff:95:
6f:cf:f0:8d:73:6d:40:b9:46:70:ae:9f:9f:ae:5a:e6:d1:52:
ea:3e:d2:9d:49:70:7a:c1:8a:89:f8:86:0b:b9:77:0f:64:bf:
e5:2d:52:b9:50:7a:18:c9:6c:2c:58:c0:7f:1b:47:68:30:9e:
50:b8:f2:2d:82:e4:3c:32:b3:28:35:71:b1:6b:81:54:95:be:
c0:f3:71:07:56:ac:4c:19:ed:71:85:f2:2b:53:25:be:d4:e2:
03:d8:42:2c:33:7f:70:fb:01:69:0f:a7:59:69:9b:80:c8:41:
c7:68:71:17:93:4f:a0:08:dd:4b:b1:1e:b3:a0:1b:df:98:62:
fb:8d:8a:db:5d:6a:48:9f:46:04:e7:dd:d0:92:12:58:b4:c5:
cf:f0:04:fc:12:4b:55:78:a8:19:23:f7:f3:d0:04:20:fd:fa:
26:8d:16:b0:3c:5c:28:96:85:0e:a7:b4:42:ef:24:53:7d:58:
12:b7:ca:f2:d8:61:76:42:8b:75:5b:63:0d:4a:3d:46:87:3a:
6d:df:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:18 2025 by rpki-client