Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5C7537ABAF711EFBB569568762E951A.roa
File: D5C7537ABAF711EFBB569568762E951A.roa (raw, json)
Hash identifier: nCwEYmD4jeTIhcEpPLogbAPZYVC+HLney1IrtoIisxU=
Subject key identifier: 9A:D0:31:CC:BC:2E:F6:32:08:CC:29:39:ED:C7:AE:7B:D2:2C:3F:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5C7537ABAF711EFBB569568762E951A.roa
Signing time: Sun 15 Dec 2024 15:18:28 +0000
ROA not before: Sun 15 Dec 2024 15:18:24 +0000
ROA not after: Mon 20 Jan 2025 15:18:24 +0000
asID: 8796
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58353 (0xe3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:18:24 2024 GMT
Not After : Jan 20 15:18:24 2025 GMT
Subject: CN=675ef344-e12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:53:67:25:ee:11:f1:62:7b:97:cf:fe:5a:
99:3e:48:93:0f:f2:16:73:b9:c1:38:2f:c5:cf:1e:
c5:1b:2f:96:70:34:14:0c:3e:f8:69:d0:ff:3e:bd:
78:39:7f:99:08:69:d0:a9:34:51:7d:17:ee:88:90:
3e:f6:ab:a1:ab:2c:99:fe:d7:09:50:69:1b:a6:b6:
70:d7:09:1e:a3:9a:3c:f5:41:27:2e:d4:29:db:49:
f5:19:83:08:77:47:a4:87:29:3d:0f:82:87:c4:a0:
9e:ed:45:a3:18:75:e3:82:6a:fb:32:cc:ce:ad:5d:
b5:7c:17:2d:d4:01:b9:e0:18:19:5d:29:b7:18:49:
7c:0c:b2:dd:a0:58:48:87:90:16:c9:d8:f3:af:e4:
ce:e2:08:dd:1e:2a:69:c7:1c:31:34:51:b7:95:43:
75:d4:0e:70:a0:73:a3:5c:a2:3c:81:9f:88:03:b3:
22:0a:1a:24:bc:4c:4b:a3:3f:c0:48:fb:28:ce:6a:
3b:2d:75:8d:e4:6e:1b:0b:96:92:3d:99:d0:eb:db:
f4:7b:59:e6:bd:c5:c3:ec:73:80:b1:84:5f:30:5e:
20:22:cc:9d:7f:01:2d:b1:1d:cd:97:47:b3:c7:29:
d7:db:20:af:f9:4f:2e:55:a1:b6:0a:52:fd:72:66:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:31:CC:BC:2E:F6:32:08:CC:29:39:ED:C7:AE:7B:D2:2C:3F:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5C7537ABAF711EFBB569568762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:1b:6c:93:bd:d0:39:b6:08:9a:4d:f3:98:56:59:79:01:b8:
4b:75:6e:20:5d:b4:57:52:41:98:3c:5e:ed:c6:2a:03:fe:6b:
32:53:6b:07:55:32:18:5f:2d:e3:8f:24:25:94:fa:70:ed:b9:
e8:ed:7e:04:d9:33:ae:74:ea:d3:5d:eb:f8:b9:1c:3c:22:99:
3d:27:36:b6:6e:5d:a1:5e:b9:11:3d:1e:01:3d:e2:b5:0b:ad:
f4:ba:22:78:cc:d7:3a:49:94:11:92:39:7b:cd:08:c5:43:7e:
dc:22:32:14:c5:f0:ee:f4:1e:e4:e9:5b:60:56:77:4e:b7:05:
c1:9b:60:84:03:52:c4:d9:4f:2f:c9:ec:3b:be:0e:fd:9f:ee:
69:16:a6:71:87:f8:86:9a:9e:13:f8:56:da:28:b1:20:4e:49:
e5:4a:79:13:ff:63:3f:9b:10:0a:60:d6:40:e3:9b:fe:e1:48:
6b:ca:85:34:c7:53:23:00:d8:1a:d0:ea:14:0a:f6:25:74:d5:
c4:e8:9a:d2:93:be:47:f6:24:2d:b9:af:db:3e:76:0d:b3:52:
19:bb:81:fd:33:a9:e4:e0:9a:f4:15:ed:c3:80:8e:18:85:ea:
ad:bd:7c:a2:51:cb:38:61:0f:83:69:a1:ac:e2:4e:4c:2f:2d:
11:a0:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:40 2025 by rpki-client