Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E64FEC0ED25111EF922E7B72762E951A.roa
File: E64FEC0ED25111EF922E7B72762E951A.roa (raw, json)
Hash identifier: S8Erzk6u52BnZxJu4tVTOcvU+RhLJHVlTFYgDo7uGC8=
Subject key identifier: 9D:88:B5:50:1E:1E:B2:26:6E:97:9E:8F:C5:20:A0:A5:5C:8D:B8:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E64FEC0ED25111EF922E7B72762E951A.roa
Signing time: Tue 14 Jan 2025 08:31:07 +0000
ROA not before: Tue 14 Jan 2025 08:31:03 +0000
ROA not after: Wed 22 Jan 2025 08:31:03 +0000
asID: 40065
IP address blocks: 156.227.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67326 (0x106fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 08:31:03 2025 GMT
Not After : Jan 22 08:31:03 2025 GMT
Subject: CN=678620cb-b4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:76:75:7e:cd:7b:be:6e:1f:0e:f5:73:00:
07:a6:42:6d:fd:b9:3a:2b:04:1d:b5:22:b4:4a:1e:
73:99:4c:0b:85:4e:15:0d:b8:ac:1f:42:7e:bb:88:
fe:d7:e4:20:e8:1c:98:16:d4:e9:21:33:23:f9:28:
11:35:c5:2b:cc:d8:16:20:c5:60:40:8b:65:fe:ef:
58:ce:ec:ea:72:0c:24:58:f0:06:d6:8f:22:a7:63:
1a:ce:84:65:87:b9:03:6f:54:c1:7f:10:8e:27:0d:
cc:0d:5f:f3:99:a8:9d:b5:1e:f9:28:ac:a7:26:dc:
8a:f6:78:ce:ed:17:cb:d3:66:01:7e:70:ef:7c:9c:
ee:ce:f6:97:ed:27:89:09:97:9e:6a:05:ba:d0:c6:
6d:af:49:ed:d4:6b:27:2c:18:90:5d:70:ef:79:94:
38:18:57:3c:47:b1:1b:3a:9a:8c:c7:4e:61:4b:f8:
ee:1f:ec:06:87:4d:92:61:6a:f2:c1:8c:02:ee:37:
7b:ad:c5:ba:05:01:cb:0c:3d:72:29:91:32:c9:55:
9e:56:f1:ad:f3:89:46:3d:f3:d8:bb:42:5d:b9:8b:
b7:27:e7:2d:54:75:a9:7c:f2:01:99:31:ed:c7:86:
7c:30:08:4b:7c:ed:d9:b9:95:aa:d4:32:73:56:41:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:88:B5:50:1E:1E:B2:26:6E:97:9E:8F:C5:20:A0:A5:5C:8D:B8:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E64FEC0ED25111EF922E7B72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.16.0/22
Signature Algorithm: sha256WithRSAEncryption
95:18:14:80:e5:86:65:e0:35:e6:d0:5a:39:08:b9:6d:03:4a:
eb:93:07:4e:22:cd:99:1d:f5:68:a5:dd:fb:98:76:39:fb:b7:
a0:49:a7:f4:c2:ec:00:b4:81:0f:38:74:1b:0c:b8:4c:8a:f0:
c5:23:62:cb:48:60:3a:b1:8a:ea:67:57:e3:5e:6b:a7:d0:e2:
9a:46:b4:cf:d7:20:2c:e4:a7:0a:37:cd:46:24:c0:23:14:ed:
b4:33:88:31:c1:71:64:f6:c4:fb:17:6b:0b:fe:4c:fd:5e:82:
c4:ff:96:2b:8a:08:b6:a0:85:fe:6b:1d:f1:fd:e1:85:a1:a3:
6e:13:06:b2:83:a9:a9:04:cb:a0:1c:27:62:30:ea:91:3b:de:
b2:3c:d7:86:00:ed:b7:00:9a:85:9b:51:cb:bf:bf:ed:30:e5:
b6:64:e8:e2:5e:58:67:3e:e5:5e:3b:70:18:23:4c:b3:72:68:
31:5b:ec:e4:29:a8:cd:10:b0:22:4f:fe:c9:05:c4:cc:be:17:
26:86:6b:7b:23:16:6c:c6:1f:99:f0:5c:2f:8a:89:80:56:c5:
0e:0c:c8:57:4d:ee:ca:56:0e:70:00:10:4e:8c:83:13:b9:8d:
00:bc:46:1a:f7:2f:91:ea:b9:f0:19:46:c3:c9:94:14:ef:3a:
1e:f1:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:25 2025 by rpki-client