Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9B2E4ABAF611EF97947262762E951A.roa
File: DF9B2E4ABAF611EF97947262762E951A.roa (raw, json)
Hash identifier: jm30Elw3CLjO8NOcF4UinWxSP5yjqZBoWkUPDTfo+eU=
Subject key identifier: C4:B7:66:FF:F9:D1:14:2E:A1:C1:07:60:1C:2F:24:CE:B2:55:42:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9B2E4ABAF611EF97947262762E951A.roa
Signing time: Sun 15 Dec 2024 15:11:35 +0000
ROA not before: Sun 15 Dec 2024 15:11:31 +0000
ROA not after: Sun 19 Jan 2025 15:11:31 +0000
asID: 14315
IP address blocks: 156.224.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58347 (0xe3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:11:31 2024 GMT
Not After : Jan 19 15:11:31 2025 GMT
Subject: CN=675ef1a7-c813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:13:c1:cd:e1:13:bd:16:55:da:e9:b9:b1:
ec:02:87:a7:24:74:69:90:24:5a:62:a1:f9:fc:ee:
c4:93:d7:d0:d0:34:40:d7:8a:08:71:93:c1:5e:ab:
61:da:73:18:2a:13:a0:46:c4:db:3c:55:bf:d6:23:
3a:dd:3c:80:51:95:4e:14:9f:be:6c:4a:1a:03:a9:
ac:c6:7d:c6:db:2c:7a:8d:c6:12:05:76:b0:de:9f:
ad:59:9d:ba:6d:4f:0a:02:84:48:d1:20:8d:40:1b:
ca:34:30:11:31:a4:59:78:23:dc:b1:c8:ff:37:2f:
93:02:30:90:71:04:8d:cf:ec:9b:bc:37:61:28:1e:
69:b0:57:ff:32:d7:40:08:39:4d:7b:40:c6:4c:af:
3e:12:aa:24:61:4a:37:6d:0a:b7:81:9d:28:17:dd:
e1:8e:a5:40:f6:d1:32:25:92:ff:4d:a6:ca:79:b9:
39:73:00:d0:27:96:f5:8b:7b:2e:92:fa:62:f5:0b:
11:7e:df:e2:7d:60:e5:d0:99:be:8c:be:c9:87:b2:
ee:6d:53:52:39:22:b7:eb:ef:83:4d:7a:ca:66:6c:
25:cc:4d:bf:d7:a5:1a:34:7b:64:59:64:b8:06:61:
33:b1:b0:4c:0b:5e:34:4b:2f:ea:81:36:49:48:69:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:66:FF:F9:D1:14:2E:A1:C1:07:60:1C:2F:24:CE:B2:55:42:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9B2E4ABAF611EF97947262762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.64.0/22
Signature Algorithm: sha256WithRSAEncryption
26:0c:32:d6:e6:b0:0f:dd:57:07:34:d1:0e:ad:2e:26:61:15:
84:a5:d8:b1:7c:59:29:e0:c1:5e:26:0b:f5:01:89:10:5a:21:
71:4c:b4:b9:55:22:b3:7f:57:e4:d9:a7:3f:97:f0:c3:47:c7:
75:8c:be:aa:f3:93:f5:32:2a:63:54:74:17:ab:b5:e8:ce:3b:
c3:92:c3:d0:2a:47:33:85:39:1d:6c:14:43:20:69:24:3f:f4:
38:ee:b5:a5:da:52:e7:ab:f7:60:fb:c5:85:10:cc:a1:68:ca:
3e:18:2c:a1:c7:4b:2f:17:d9:0d:8c:85:6f:d4:14:d7:71:53:
1d:61:4d:fd:d3:ae:e9:e0:2a:69:50:d2:a6:fb:89:b0:50:8e:
e6:ff:07:66:5e:49:d9:7a:89:86:bd:31:91:94:f4:61:39:55:
0d:10:d9:13:87:5a:bb:22:d0:48:97:ba:96:0c:c3:89:a9:7f:
6b:a8:ed:4d:49:c7:ae:2c:48:88:55:9c:5d:13:5f:72:ec:f8:
22:71:33:61:02:7b:e0:bf:90:27:05:a3:b4:72:8b:56:1e:80:
16:14:e9:3e:29:67:13:73:73:95:fe:a9:07:56:04:5c:ef:d6:
c8:b6:bc:08:e1:36:28:0b:1a:b1:ae:6a:4f:32:80:3c:31:38:
02:8b:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:01 2025 by rpki-client