Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB47669EC47111EFAF71F34C762E951A.roa
File: EB47669EC47111EFAF71F34C762E951A.roa (raw, json)
Hash identifier: bOgu4YWy4ZgMgkallAbUBblfi0uUMmV1m4lIx/u3wg0=
Subject key identifier: 4E:29:6E:BC:2E:53:5C:B6:77:46:0A:EF:FF:70:8B:F1:92:90:72:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB47669EC47111EFAF71F34C762E951A.roa
Signing time: Fri 27 Dec 2024 16:45:03 +0000
ROA not before: Fri 27 Dec 2024 16:44:59 +0000
ROA not after: Sat 01 Feb 2025 16:44:59 +0000
asID: 203020
IP address blocks: 156.228.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61630 (0xf0be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 16:44:59 2024 GMT
Not After : Feb 1 16:44:59 2025 GMT
Subject: CN=676ed98f-ee1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d2:73:89:50:c5:34:64:6f:4b:b1:0a:8d:39:
5d:6c:33:b5:5f:40:29:54:07:04:4e:95:01:b6:0b:
bd:8c:6a:a7:e6:25:c8:f1:20:bf:0c:9d:ea:16:6e:
7d:bc:98:11:6c:4b:84:a1:03:40:5c:a7:cd:f1:28:
29:fd:e5:6a:03:b9:54:ab:ca:32:21:bc:63:2c:3e:
43:14:a1:fb:e3:05:db:b6:d0:f2:ae:66:3d:e8:1d:
71:99:e1:6b:17:1f:24:6f:30:54:19:8a:86:e2:0c:
f9:c1:f6:79:0a:63:ff:e4:70:ee:e2:34:e8:1b:9a:
ce:c4:c0:a9:ff:79:af:08:27:85:c7:c6:9a:7b:c8:
d3:39:2c:dc:53:9a:db:8a:d6:10:6f:b3:97:b8:c1:
df:c6:f0:7a:30:10:47:cc:28:66:da:10:cc:91:af:
4c:15:1c:83:26:c0:05:e3:d2:70:5a:50:1f:77:01:
94:37:a6:35:97:07:5d:00:63:e0:fc:89:7e:bb:ce:
20:9f:fa:ed:75:fa:55:dd:88:cd:cc:8e:f7:26:ab:
6c:aa:63:63:8c:9a:56:ec:2e:7d:a2:21:30:fe:6c:
bd:c0:68:f8:c4:06:3b:0a:7d:ca:5a:64:84:7b:9f:
f1:df:14:3f:a1:ee:da:bd:f6:1a:a6:49:16:7f:c0:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:6E:BC:2E:53:5C:B6:77:46:0A:EF:FF:70:8B:F1:92:90:72:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB47669EC47111EFAF71F34C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.251.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:40:a3:c1:8c:0c:43:c5:e3:2e:85:fd:af:45:cf:c2:22:86:
15:33:8b:79:23:b0:15:d9:39:9c:82:f4:a1:3d:79:bc:0e:84:
de:ab:25:d8:be:19:8f:3f:05:90:75:23:55:a7:b7:3b:c0:14:
86:08:62:f8:c2:1b:2c:cc:e4:29:8d:85:36:37:9d:7b:ac:dd:
4a:66:92:13:e5:b4:1e:9b:8a:28:04:a6:a6:c4:ba:9d:cf:46:
77:89:35:24:9c:9e:89:90:8c:f1:dd:91:44:40:ab:79:6f:b0:
a5:f6:fa:0c:78:0b:db:4c:3b:cd:ca:48:66:fd:de:20:d4:82:
a3:1b:ea:6f:6b:b7:5f:7b:57:ac:49:32:dd:77:f5:1f:d6:29:
a5:86:22:ad:d0:6f:e0:d4:4e:06:67:b2:05:7f:e5:b3:10:d9:
ad:40:f2:77:38:3f:d1:cc:e0:0b:0f:ef:f9:c3:e9:9c:d1:3a:
ae:dc:50:1b:f6:8c:43:12:af:5d:0e:60:15:9b:96:ae:33:af:
6a:88:15:50:08:d3:2f:a8:5c:84:c4:c3:e3:be:89:65:5c:7b:
aa:67:48:72:69:5e:76:58:1d:71:03:00:f6:3d:2d:96:4a:a1:
c2:bf:74:2e:dd:d0:dd:cf:02:b5:83:a0:5c:ec:c5:5e:f6:f7:
32:6a:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:08 2025 by rpki-client