Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E943B2CCD911EF843305B8762E951A.roa
File: E7E943B2CCD911EF843305B8762E951A.roa (raw, json)
Hash identifier: nwldyvc6VUZtzkLrj6GmVPWaUwvWGvzNsDc5gNYbDiQ=
Subject key identifier: E9:33:77:AD:C9:17:0E:62:63:A1:EB:37:28:34:39:D8:B1:2F:63:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E943B2CCD911EF843305B8762E951A.roa
Signing time: Tue 07 Jan 2025 09:29:34 +0000
ROA not before: Tue 07 Jan 2025 09:29:30 +0000
ROA not after: Sat 18 Jan 2025 09:29:30 +0000
asID: 137547
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64322 (0xfb42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:29:30 2025 GMT
Not After : Jan 18 09:29:30 2025 GMT
Subject: CN=677cf3fe-2091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:08:1a:e1:27:16:a2:db:04:c4:66:6a:87:
aa:c5:e7:d6:97:a8:11:58:5b:fb:fa:80:cd:6e:ef:
77:e5:b5:3e:a3:c9:ca:a5:ad:91:76:22:c0:4f:78:
a8:8f:28:95:fa:54:54:25:12:ea:7c:fc:a1:14:67:
9b:f2:2e:04:44:f3:ee:c6:4a:21:d6:b7:47:05:0b:
f3:82:4e:c2:03:d5:6c:5f:ab:13:a5:4d:e8:0c:01:
c7:11:4e:2d:df:99:80:d9:1b:43:d8:f0:14:5e:82:
02:25:ed:04:71:f0:5e:30:bf:dd:d2:54:be:b5:c4:
4f:a2:92:a4:d1:55:c6:d2:2e:5f:71:75:95:08:97:
42:13:12:2f:de:50:79:cc:2e:11:4c:6b:8b:c5:01:
01:cf:41:cc:0e:07:d5:e4:a5:23:a0:b9:2c:37:d7:
a6:19:c1:7f:b3:bf:40:c8:9e:8e:f4:4a:c0:b9:43:
6b:be:98:61:2a:35:31:f2:5e:47:0e:63:e0:84:cd:
30:87:51:2e:37:df:45:74:9c:90:ff:ab:24:db:48:
45:77:10:b1:64:66:fc:36:1e:68:b1:b6:3e:7f:e7:
e3:73:0e:dd:e6:10:e8:f5:10:a2:66:e1:40:a7:d0:
89:93:69:52:8b:f7:68:27:af:92:a0:d5:1f:d9:66:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:33:77:AD:C9:17:0E:62:63:A1:EB:37:28:34:39:D8:B1:2F:63:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E943B2CCD911EF843305B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:c4:42:51:c7:85:f7:5c:4e:ce:60:a6:66:08:53:f8:72:7d:
d8:57:72:dc:8d:9e:db:17:a4:d0:11:36:0d:4b:9a:89:64:5e:
95:4f:bc:2e:1e:40:ac:07:0a:96:24:ad:a8:b5:fa:df:30:47:
c5:6c:69:b4:57:cd:2a:1c:0d:8d:d9:a0:4c:8e:93:48:eb:c4:
8b:83:7a:5e:de:3b:1c:9a:de:3e:fc:77:65:57:7c:fd:6e:24:
9c:78:11:60:1b:7f:67:de:fe:d7:c8:9c:6e:06:1a:5b:ff:df:
63:9b:83:77:02:58:a4:3f:02:1c:1b:5d:07:11:c3:b6:aa:70:
3d:73:56:67:ef:38:fd:62:5c:60:9b:21:35:e1:14:3d:95:b7:
a1:74:93:be:f2:4b:06:d5:6f:c6:0c:93:a2:15:12:5f:20:a5:
af:f2:02:bf:2a:ad:14:12:24:79:1d:8b:79:80:64:c5:83:d8:
f8:1e:1a:7b:b4:7d:6b:45:da:e0:2e:a7:04:ce:55:7c:08:e1:
96:14:61:1a:0c:93:61:5c:fa:55:5d:90:bd:a2:a1:1f:20:74:
ff:98:c2:a0:19:f8:d6:b2:ce:0f:82:b1:3f:cb:25:47:0b:12:
b4:46:60:be:89:55:a2:b9:41:86:20:d4:de:bc:ca:10:f7:8f:
22:36:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:04 2025 by rpki-client