Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E434EC62C9B411EF9C41E947762E951A.roa
File: E434EC62C9B411EF9C41E947762E951A.roa (raw, json)
Hash identifier: rlaxupOyJFKnbKmBt9gr1zxVlzKu/CW+1l91FijRkFA=
Subject key identifier: B6:17:02:19:D9:DE:A1:A8:93:83:7A:06:67:27:5E:15:E0:69:88:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E434EC62C9B411EF9C41E947762E951A.roa
Signing time: Fri 03 Jan 2025 09:27:03 +0000
ROA not before: Fri 03 Jan 2025 09:27:00 +0000
ROA not after: Sat 18 Jan 2025 09:27:00 +0000
asID: 139646
IP address blocks: 156.255.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63181 (0xf6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:27:00 2025 GMT
Not After : Jan 18 09:27:00 2025 GMT
Subject: CN=6777ad67-add7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:7b:97:99:09:5b:d8:e7:a3:b6:e3:77:41:
4f:e7:a7:b3:2e:70:7e:74:c6:55:b6:8f:12:01:cc:
c2:d1:1c:3e:fa:f2:7d:4e:c6:81:ad:1b:8a:84:a2:
7e:ea:1b:b7:35:eb:9b:1a:2d:c4:14:2d:72:a5:db:
59:e4:2a:87:d4:ac:67:9a:9c:4f:66:aa:66:b6:b2:
84:c4:d2:f1:89:69:0b:7f:43:25:a6:4d:7d:b4:aa:
f9:c6:8a:10:6d:51:cd:0e:d0:4c:d1:ff:06:cd:e8:
92:57:bb:52:0d:be:12:e7:64:38:14:c2:11:75:c8:
53:8f:11:a8:4a:60:45:dd:72:0e:c4:23:46:91:be:
05:ea:04:8c:ea:e0:5f:bb:24:88:5e:e2:3e:24:88:
7a:1d:59:2a:ba:e7:8a:17:3a:c0:1e:93:2e:3d:7b:
af:1c:8e:12:19:f9:d0:40:b8:01:09:99:e4:ef:1e:
4c:bc:29:0f:2e:d5:ad:bf:50:f3:e6:88:b8:39:06:
bd:2c:c6:60:57:45:e8:c5:68:ce:15:30:cb:b0:43:
49:91:78:2a:58:dc:90:ff:88:f3:9b:79:02:85:d7:
c7:27:23:64:54:75:78:c3:8d:2e:ce:8b:d4:16:2a:
be:cd:99:a5:25:e1:9f:6f:e5:c3:cd:94:e7:d3:7e:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:02:19:D9:DE:A1:A8:93:83:7A:06:67:27:5E:15:E0:69:88:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E434EC62C9B411EF9C41E947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:32:5a:45:cf:e1:f9:09:b5:e4:00:77:7d:21:eb:98:5f:2a:
b8:bd:d9:35:ae:e2:6d:66:e5:39:ff:e0:6d:17:91:6b:4f:74:
16:e5:c7:d2:a0:e1:75:f8:03:9f:2d:c5:6b:cc:37:67:67:50:
c3:77:5c:90:ce:76:b9:02:39:83:d3:52:29:d3:dc:44:b1:13:
f8:a1:b8:1c:cd:2a:dc:bb:00:d9:aa:68:e9:f0:82:fe:d8:53:
e0:8f:31:21:63:0b:ec:59:13:85:2f:0c:8f:28:a4:d0:a4:a9:
a7:e4:05:d1:a5:d5:4c:54:8b:93:5e:c9:38:ee:33:7a:18:c6:
eb:4b:77:bf:c9:83:d1:97:b6:ba:67:a4:30:b4:db:c6:4b:24:
24:8d:9d:0a:30:1f:70:91:49:26:fa:0a:f1:48:79:ae:5b:84:
41:eb:a7:14:f5:17:54:61:30:21:37:4a:8f:f0:b3:96:bc:3b:
73:37:2e:f3:4a:d2:10:8a:48:15:75:f1:68:b4:2f:48:84:63:
ea:27:a8:aa:a0:60:64:96:21:d4:38:2e:16:27:f4:d5:80:2e:
5e:83:9a:a1:4a:40:71:e1:3a:d5:df:48:c4:77:87:bc:58:df:
0b:33:78:3e:4d:18:60:1b:c2:7f:e3:bf:80:a6:60:db:46:c6:
5b:12:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:40 2025 by rpki-client