Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1A87734D01C11EF8475DE82762E951A.roa
File: E1A87734D01C11EF8475DE82762E951A.roa (raw, json)
Hash identifier: 3LgjVj70O7H87NPiRAhSQi7DX1B/TWixMFES2vbg5wM=
Subject key identifier: A0:3E:95:5D:7F:34:26:12:AB:AC:72:4F:B6:49:0D:79:51:B9:33:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1A87734D01C11EF8475DE82762E951A.roa
Signing time: Sat 11 Jan 2025 13:06:34 +0000
ROA not before: Sat 11 Jan 2025 13:06:30 +0000
ROA not after: Sat 25 Jan 2025 13:06:30 +0000
asID: 141883
IP address blocks: 156.240.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67070 (0x105fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 13:06:30 2025 GMT
Not After : Jan 25 13:06:30 2025 GMT
Subject: CN=67826cd9-cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:f4:23:18:13:0a:3b:cc:db:37:7f:bd:b7:
ee:0e:49:2f:93:39:6b:53:81:5d:ca:09:f0:fa:50:
d6:d1:08:a7:6c:95:85:f0:94:cb:d4:03:2c:f7:e2:
f2:4f:d3:2d:91:54:c9:c2:64:2c:de:cb:65:3f:fc:
3e:97:a3:d4:74:c8:4c:b4:57:4e:5f:9c:57:0a:a4:
cb:33:1f:07:c8:c1:77:52:f8:fe:d0:5b:ff:08:a8:
10:41:b7:70:dc:b5:60:b6:73:3f:ce:96:25:9c:c6:
48:f2:ee:77:2f:47:4e:14:cd:f6:2c:bf:7b:e7:d5:
e4:85:d8:de:73:61:a9:2e:08:3c:ea:ed:e2:a0:ec:
30:c9:c9:5a:b0:e1:cf:49:c3:9b:8b:bc:95:bd:63:
c2:d4:00:4a:7a:16:99:63:50:40:e9:03:b9:32:f9:
c7:a3:72:88:67:5f:ee:8e:ef:8d:54:97:5d:17:34:
1f:0d:95:1a:ef:fc:00:0e:64:e0:e9:94:95:43:89:
c4:49:d1:d8:a7:a5:cf:03:03:b6:2e:50:22:76:ae:
26:db:01:3b:8f:10:05:ad:c1:3a:94:09:f7:48:d9:
96:e7:2f:d8:f4:c9:83:cc:e9:0d:0c:eb:f5:a6:86:
cb:c3:0d:d6:d5:84:21:f6:80:16:33:e7:8b:42:4a:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:95:5D:7F:34:26:12:AB:AC:72:4F:B6:49:0D:79:51:B9:33:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1A87734D01C11EF8475DE82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.48.0/21
Signature Algorithm: sha256WithRSAEncryption
82:5b:95:1c:24:19:58:3b:cb:8e:34:e4:6a:11:4e:50:d1:2b:
5a:be:42:d9:b9:03:a6:fd:c7:69:44:75:09:d6:e1:b0:00:56:
f0:54:93:6b:1a:66:df:c7:f0:b4:74:b3:b7:38:70:4f:48:4e:
f7:ac:30:34:1c:43:1b:81:99:78:e0:15:9c:32:4d:dd:1a:f7:
2e:73:c5:02:11:f7:5d:89:d0:2a:d8:78:0a:11:05:c2:02:eb:
0a:9c:62:2b:7a:0d:f8:f9:ce:1f:91:40:ef:07:d2:22:ee:0d:
8d:a5:d3:b7:65:25:35:70:f1:27:1a:d9:9d:89:6b:86:a9:33:
b7:7f:a6:dd:9b:e7:f1:cf:da:9d:14:c7:0c:16:43:2c:3a:6f:
46:33:f3:f5:a7:e5:9f:7d:a6:9d:46:e3:ba:92:3c:61:44:75:
85:a3:ac:09:b8:f5:0d:a8:0d:31:38:54:97:51:c0:a7:19:b3:
08:59:8b:66:d8:e8:48:a9:f1:45:ac:ee:d3:4d:fb:52:79:bd:
02:15:16:a8:c5:79:30:80:7e:c5:0d:90:e4:c9:40:48:4a:91:
6b:34:99:d0:1c:e9:37:ab:60:10:19:83:ef:44:b4:e9:17:f4:
e4:44:60:85:a1:70:ea:4e:46:81:31:b5:d2:26:6d:0f:1e:b4:
d7:c6:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:00 2025 by rpki-client