Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3FF436CD30C11EF96C6169C762E951A.roa
File: E3FF436CD30C11EF96C6169C762E951A.roa (raw, json)
Hash identifier: bCJ6A7e8Cxmx65g+1F1aMHycezRrnUZ9uhoPhyQZo0Y=
Subject key identifier: D0:59:64:52:E1:41:E0:EA:51:7D:00:D8:94:39:6C:F4:62:53:51:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010831
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3FF436CD30C11EF96C6169C762E951A.roa
Signing time: Wed 15 Jan 2025 06:49:39 +0000
ROA not before: Wed 15 Jan 2025 06:49:35 +0000
ROA not after: Mon 27 Jan 2025 06:49:35 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67633 (0x10831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:49:35 2025 GMT
Not After : Jan 27 06:49:35 2025 GMT
Subject: CN=67875a83-7a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:01:a2:d3:89:96:30:ad:18:f3:85:8f:7e:
cb:ca:13:a1:be:29:e5:d6:75:fc:89:ba:2f:92:b8:
44:f4:96:c1:39:74:a5:f2:72:cc:78:07:50:c9:c3:
0c:e1:92:3b:32:26:fb:ac:af:3f:b4:2f:15:b0:16:
37:7a:fc:25:f0:70:ce:b2:75:1a:34:93:21:8e:d2:
bf:4e:ae:91:1f:46:48:01:ad:6e:12:04:bb:3e:ee:
54:4e:7c:47:ae:cc:ff:9b:e5:85:4d:74:67:42:65:
11:26:4c:23:c0:fe:d2:06:1c:61:4c:4d:12:66:87:
56:32:ac:ce:34:76:bf:bf:0b:e9:64:0f:9f:81:9c:
16:62:92:64:55:ec:5d:cf:58:30:79:8f:a6:bb:a6:
b8:2f:34:50:a1:c9:d1:a3:aa:9f:65:0a:77:0a:08:
5c:2a:48:38:df:f9:ef:fb:bc:7e:94:89:29:fd:74:
ae:cd:48:ec:b3:74:31:89:d2:9c:e0:72:9a:de:65:
59:52:46:a1:e7:d7:c8:7a:08:64:c8:d8:30:87:4d:
c6:f3:7b:9a:fc:2d:fd:75:64:1d:62:a5:cc:b6:9e:
a6:d0:3c:3b:2d:fb:4c:8d:c4:ef:a1:81:20:f1:ea:
67:0c:7c:82:fb:c7:b6:c1:36:63:ee:0e:99:c5:fa:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:59:64:52:E1:41:E0:EA:51:7D:00:D8:94:39:6C:F4:62:53:51:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3FF436CD30C11EF96C6169C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:9e:c2:ba:26:cc:a2:02:a7:cc:36:e0:67:aa:5e:21:c0:52:
dc:a6:00:d4:ca:2e:60:62:f3:52:36:d1:d5:61:20:e3:19:4c:
92:c9:72:1c:80:63:1d:9f:bf:7e:00:a8:c4:b7:c0:47:4e:0d:
6d:bc:79:77:dd:be:0e:f4:ae:0e:0e:b2:32:ba:a5:5b:ee:1d:
9c:86:ee:d1:cd:74:46:27:5e:fb:7a:5a:7c:42:c2:83:90:0a:
ad:b2:91:39:a0:96:00:c9:c6:8a:54:88:4b:33:b8:1f:29:3f:
9e:29:a3:47:8e:54:34:39:10:17:af:4b:0d:e9:88:56:4d:8e:
8d:ce:39:8c:67:82:f3:aa:3a:e7:a9:76:84:26:fc:6e:25:ad:
c0:74:85:4b:a7:03:b3:00:87:41:a3:58:c9:0b:4c:ce:a0:13:
ab:05:af:d6:34:28:e9:ff:c8:13:e2:db:b6:2c:5d:45:6b:23:
bc:e8:b1:18:d0:96:05:db:f3:51:36:ff:24:68:46:60:42:56:
6f:c0:a2:73:86:2e:33:44:ef:8f:8d:62:15:ad:a7:f9:c3:8c:
fe:91:8e:2b:50:32:f1:18:38:6b:94:cd:e2:21:b2:04:8f:51:
99:b6:d8:23:5c:4c:20:10:2f:21:a0:d8:d0:0d:51:49:01:ee:
ac:77:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:53 2025 by rpki-client