Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7A65594BA2711EFA640484F762E951A.roa
File: E7A65594BA2711EFA640484F762E951A.roa (raw, json)
Hash identifier: rR/Y20vQzF3yVNCDlTDB0jNvXbFF1/m0EgS78ftqE9U=
Subject key identifier: 28:E4:DD:4B:1C:F7:FE:88:26:64:3C:49:43:A4:10:CA:1D:5C:07:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7A65594BA2711EFA640484F762E951A.roa
Signing time: Sat 14 Dec 2024 14:30:03 +0000
ROA not before: Sat 14 Dec 2024 14:29:59 +0000
ROA not after: Mon 20 Jan 2025 14:29:59 +0000
asID: 200080
IP address blocks: 156.253.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58284 (0xe3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 14 14:29:59 2024 GMT
Not After : Jan 20 14:29:59 2025 GMT
Subject: CN=675d966a-84d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:1b:14:7c:e2:77:10:77:8c:c1:36:b4:31:
05:d1:1c:37:8b:65:3a:a3:69:9f:74:ac:0d:c1:53:
35:06:b4:64:70:c1:19:7d:39:8a:27:a2:f1:18:07:
55:2b:3d:05:dc:3f:2d:51:12:88:41:21:39:1b:84:
0c:de:e1:68:60:ea:56:af:0e:cd:5b:98:d0:54:6a:
b7:2b:4a:6a:8d:93:eb:46:31:9f:d7:3b:c7:90:f2:
61:79:c0:9d:42:73:09:be:b8:f7:a4:89:b2:f8:65:
e5:c7:96:9a:76:8f:14:14:cc:7e:49:ea:97:a9:c2:
45:89:39:fb:d9:df:37:75:be:97:51:55:1c:15:3d:
03:01:e9:c0:5f:99:44:74:5f:17:60:64:c0:46:60:
32:3e:2d:a4:73:6b:2a:4c:6a:a0:82:2e:b7:20:84:
ff:81:05:55:b5:67:7d:b5:a5:fb:97:5f:a1:e8:21:
cf:21:37:91:b0:f0:96:2c:b2:c3:0f:84:94:ee:a1:
60:92:ec:2c:12:fb:43:10:0f:a9:e6:08:cf:23:ae:
f3:8e:af:8f:ff:c3:f5:ba:0b:ae:62:e6:62:eb:f7:
48:f4:59:84:42:b4:3c:5b:fa:27:13:da:e0:96:93:
78:4c:4b:8e:7c:25:85:5d:79:9f:b0:63:70:b9:d6:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:DD:4B:1C:F7:FE:88:26:64:3C:49:43:A4:10:CA:1D:5C:07:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7A65594BA2711EFA640484F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:08:4e:f3:86:30:f1:a9:1b:99:86:a7:4b:44:f8:c3:0f:83:
62:fd:91:5f:73:8e:ec:60:02:47:1a:7d:76:ff:e6:8e:de:0d:
c0:0d:65:58:18:1f:8b:09:3c:23:2d:48:87:f1:6c:4e:13:3b:
a3:44:ff:67:11:a1:94:71:dd:d2:db:40:be:53:8e:bc:08:fb:
82:55:c7:04:dc:d5:7b:21:94:fd:e2:77:7e:e5:8b:59:e4:be:
48:5c:bf:f8:5a:07:0d:08:38:25:58:84:4b:53:07:b8:f5:9d:
97:a2:88:5f:8a:16:b9:33:63:7f:37:b5:34:0a:7d:72:91:2c:
41:94:f7:50:50:67:dc:72:70:eb:b7:73:4b:85:f0:9e:35:d6:
21:9d:3b:3b:4f:6a:1a:49:65:2b:63:59:32:fa:5d:83:1a:df:
2f:c8:ba:03:2e:ae:28:cc:2d:a8:ee:96:b7:67:84:03:91:8e:
09:6b:b8:80:cb:3a:a5:62:f0:1b:bf:8f:99:2c:ce:a0:f9:56:
38:4f:e7:0f:28:85:9e:73:4a:e3:84:de:61:63:e0:26:b5:a9:
67:c1:65:69:af:e9:41:5c:e2:6d:f7:39:63:1e:8e:94:95:1e:
6f:9a:e0:c2:3f:5e:ed:bd:20:17:64:cc:df:7c:47:54:fe:0e:
78:cd:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:01 2025 by rpki-client