Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB080C0C5CB11EFA8389B60762E951A.roa
File: DBB080C0C5CB11EFA8389B60762E951A.roa (raw, json)
Hash identifier: RhiDBx5/ScPNjDyOVs/crHN8GDpQ0IPnj9NzRulQyW8=
Subject key identifier: 91:7C:F1:B3:46:7C:C3:AC:0D:E3:63:B1:95:97:AA:5D:73:2D:60:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F1BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB080C0C5CB11EFA8389B60762E951A.roa
Signing time: Sun 29 Dec 2024 10:01:23 +0000
ROA not before: Sun 29 Dec 2024 10:01:19 +0000
ROA not after: Fri 31 Jan 2025 10:01:19 +0000
asID: 205125
IP address blocks: 156.255.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61886 (0xf1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 29 10:01:19 2024 GMT
Not After : Jan 31 10:01:19 2025 GMT
Subject: CN=67711df3-055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:41:3d:de:03:c6:e3:84:16:2e:8f:6c:d9:
f1:02:81:b3:eb:a6:a5:1a:49:cc:74:1b:2f:78:26:
c5:ec:2b:01:19:86:c9:49:8f:1a:60:00:79:aa:ab:
64:63:b7:a6:21:19:6a:01:7d:c0:f0:51:62:73:c5:
ee:ab:fc:48:87:41:e6:ad:6f:1a:94:52:a6:5b:30:
c3:f2:0d:6b:1a:10:79:b7:dd:ba:74:9e:8d:f9:d5:
67:09:44:46:ec:3c:69:b8:e3:d2:5d:82:5b:a0:2a:
43:61:4f:90:44:f2:e8:9f:f5:5f:7e:25:39:74:09:
6c:4e:15:c9:ba:16:62:18:09:f2:b3:cb:69:28:36:
c0:7c:ea:f5:59:21:56:5f:0d:00:e9:80:cb:26:49:
af:68:bf:55:46:96:9a:a3:be:2a:52:ce:88:20:e3:
a6:93:46:5b:4b:92:58:7f:05:ec:8f:f5:ac:2b:47:
60:79:93:14:56:ef:bf:1a:31:c3:8d:18:52:e8:7b:
5d:ef:a0:03:a3:ec:98:1f:d2:12:c3:5d:a4:a7:c4:
3e:87:51:2f:84:b6:69:a3:67:80:5a:c3:8e:ac:45:
21:4d:81:07:55:ba:b5:3a:02:10:bb:ff:38:ac:e9:
12:08:01:af:3b:8c:2c:b2:6c:54:ee:55:a7:b2:ab:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:F1:B3:46:7C:C3:AC:0D:E3:63:B1:95:97:AA:5D:73:2D:60:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB080C0C5CB11EFA8389B60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:40:94:f5:96:53:a4:3b:1d:9b:84:0f:df:31:f6:cf:30:f9:
d1:04:3f:5b:c8:0f:97:44:bf:83:1a:d5:64:97:9e:69:16:ee:
9c:b4:11:5b:d2:aa:55:5a:c6:f6:75:64:3d:62:5b:36:9b:b6:
ef:2e:66:e2:4a:09:07:6d:ab:d7:47:bb:4b:3e:ee:0b:88:55:
70:37:bf:7d:04:5c:dd:3a:6e:22:1f:67:71:40:74:43:77:72:
ef:a2:82:c7:11:cf:9e:0a:30:0f:3b:08:fb:01:c2:b0:14:35:
d5:56:15:1a:6d:e1:13:e1:32:75:ac:a8:07:b4:12:a3:13:cb:
64:e2:b4:79:70:35:7a:7e:9f:9b:89:c6:f6:a5:5f:41:aa:6c:
76:82:f4:3d:9a:52:e6:34:ca:f7:20:be:a1:ab:cc:f4:1d:7a:
ee:07:a6:ee:50:ca:23:b8:15:59:40:b6:44:c4:1f:10:a9:9c:
b7:e0:82:6a:3f:01:d1:38:a7:87:34:28:de:72:6d:5e:d2:4d:
b1:18:e1:07:3c:f7:94:53:af:d0:e0:e3:6b:a1:d1:b0:ad:c0:
81:34:66:e3:e3:a1:f0:23:5c:a9:08:73:c2:e7:b2:29:44:23:
97:6c:4d:a8:1b:74:a3:61:5d:e9:a8:9d:09:6d:6f:58:f1:75:
49:00:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:51 2025 by rpki-client