Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8386602B92611EFB368FE85762E951A.roa
File: E8386602B92611EFB368FE85762E951A.roa (raw, json)
Hash identifier: NCf4k3NoBkm+UT4zzclV3pzhtf87+teJJU98SQ1yfHc=
Subject key identifier: BA:A9:F8:9F:E7:D5:B0:22:42:F8:FA:1F:40:36:2A:6A:02:2C:A5:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E313
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8386602B92611EFB368FE85762E951A.roa
Signing time: Fri 13 Dec 2024 07:50:23 +0000
ROA not before: Fri 13 Dec 2024 07:50:19 +0000
ROA not after: Sat 25 Jan 2025 07:50:19 +0000
asID: 48031
IP address blocks: 156.246.148.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58131 (0xe313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:50:19 2024 GMT
Not After : Jan 25 07:50:19 2025 GMT
Subject: CN=675be73f-6694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:f6:85:f4:c2:23:d9:4c:cc:08:a6:98:34:
05:f3:cd:67:98:74:fa:0b:32:62:9f:43:35:11:db:
cd:e5:e9:e2:de:c5:e1:9e:65:2b:46:bf:d5:21:b2:
2e:62:c8:e9:3a:96:54:62:4f:c2:ea:c1:a7:c7:62:
69:ef:80:4e:2d:5d:a5:8d:55:41:a7:17:84:16:a9:
9a:8d:13:0f:f0:01:77:8e:fb:07:78:6b:ff:66:99:
4d:c5:4f:08:d2:c7:24:cb:35:b7:4b:90:af:c1:11:
5b:f3:b5:cc:d6:58:42:7f:6d:ae:70:8a:a7:e4:ec:
a9:b9:5e:25:c7:aa:2b:70:77:1c:2d:04:41:43:e3:
ff:8f:1e:a3:0b:f9:f0:75:e6:4e:94:31:00:22:06:
be:5b:6a:72:18:d8:4a:93:94:53:1e:17:fb:7a:ec:
f1:8c:f7:60:52:32:40:7f:40:91:54:93:d1:ad:e8:
36:89:d1:d3:09:15:74:59:6b:29:59:40:f4:56:12:
3b:5b:97:0b:3e:cc:2e:5c:52:8e:0d:d6:e2:6d:b2:
ba:e6:95:fa:a5:44:c8:53:83:82:21:2c:6e:9e:91:
63:5e:6c:3f:30:2d:2b:39:29:a5:0b:a7:fe:31:ed:
b1:0d:4e:90:5e:1e:c2:be:fb:95:b3:45:51:e8:52:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:F8:9F:E7:D5:B0:22:42:F8:FA:1F:40:36:2A:6A:02:2C:A5:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8386602B92611EFB368FE85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.148.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:ab:a0:74:47:d6:eb:23:30:10:4c:2f:df:9e:3e:00:79:cb:
b3:46:37:0d:90:c7:07:00:d9:2c:2d:a4:42:41:cb:e0:1c:7e:
92:af:2a:e4:a7:b4:da:c4:08:f8:67:39:6d:20:bb:36:87:1e:
d9:07:4c:44:1a:dc:93:14:3e:ee:47:2d:d0:38:7e:b7:3e:59:
37:b5:b7:00:76:4a:0d:d8:d1:bf:f0:5c:47:0f:fd:33:41:d5:
5e:dc:6f:9a:f3:2d:0f:48:4b:88:d2:54:fa:71:01:b2:8d:bd:
b5:0b:78:c2:5d:2b:4d:99:87:c9:96:10:82:0b:d7:6d:48:a4:
52:ca:e6:8f:e7:cf:cb:5a:e1:b3:6c:10:ff:55:6d:9a:fa:da:
48:1b:16:0d:5e:08:4b:74:50:be:c3:f5:83:e1:65:e7:85:da:
c7:44:ce:e5:f0:5c:ce:47:f5:d8:ae:b4:78:68:a0:6e:04:12:
e9:2f:13:02:8f:bd:89:ad:e9:e3:b1:4b:38:80:8e:20:05:e8:
d8:9a:1c:f7:57:a5:23:38:bf:34:de:b5:50:1e:30:6a:65:b2:
a9:57:93:23:45:cd:16:d0:d7:bb:5b:e1:d6:6b:40:ef:65:22:
18:94:04:82:03:e9:29:81:02:4a:81:a2:8c:bb:ce:8d:40:2e:
d0:f7:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:13 2025 by rpki-client