Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC80A8ACCE5511EFA75771BB762E951A.roa
File: EC80A8ACCE5511EFA75771BB762E951A.roa (raw, json)
Hash identifier: 2Tiuyx1GVq3l0/3/IqVkAQ97GKKK7AI3Spl5aoPewPE=
Subject key identifier: AD:BB:96:1F:E4:49:18:69:35:EB:B5:2F:0A:6C:AC:87:28:15:00:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC80A8ACCE5511EFA75771BB762E951A.roa
Signing time: Thu 09 Jan 2025 06:49:51 +0000
ROA not before: Thu 09 Jan 2025 06:49:47 +0000
ROA not after: Tue 21 Jan 2025 06:49:47 +0000
asID: 209242
IP address blocks: 156.238.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66271 (0x102df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 06:49:47 2025 GMT
Not After : Jan 21 06:49:47 2025 GMT
Subject: CN=677f718f-e9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d6:70:a3:df:92:1a:d5:39:ff:1f:77:7e:3d:
6b:07:66:0a:c5:21:96:cb:21:0a:11:54:83:d4:4c:
2f:bb:e2:c2:e1:80:e8:62:4b:9b:93:5b:75:d1:c3:
70:6d:9a:f2:f5:a6:57:57:92:97:5d:de:53:a3:5d:
4a:ed:da:e4:ef:24:b0:ea:f1:2d:53:9e:ab:ec:95:
e0:56:95:99:11:3d:64:44:23:e4:12:0d:23:2f:1c:
2f:35:39:64:b8:8a:b9:7d:95:11:b3:ae:7d:de:77:
d5:d7:12:db:b8:9c:ac:0d:9e:5a:6c:4f:78:08:7a:
15:7c:d1:5e:9a:20:b0:4e:6e:8a:6f:bb:66:0f:c4:
31:f2:27:42:a3:dd:17:53:2f:67:7e:8c:14:48:8c:
f8:93:de:d6:2a:2e:12:4b:d6:fd:d8:d8:47:18:d2:
4d:8d:47:af:8d:28:21:9f:7b:52:26:66:33:34:b8:
e8:55:d4:9c:43:41:d5:7b:d6:a4:21:a1:ec:30:4e:
3f:fb:a2:1c:a8:79:c6:40:5f:a6:17:33:13:21:f5:
f2:ce:ab:73:c9:80:b8:9b:a4:de:47:03:f2:c3:b2:
14:ab:27:b9:51:c5:ac:ae:a9:ec:27:14:d8:a9:0a:
b1:b2:d8:8c:2f:78:bf:59:4d:2f:53:16:e7:2f:63:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:96:1F:E4:49:18:69:35:EB:B5:2F:0A:6C:AC:87:28:15:00:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC80A8ACCE5511EFA75771BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:44:2b:d4:e5:8d:56:eb:9c:ec:8e:71:b3:cd:a2:e7:0f:ee:
50:0d:fa:b3:9c:97:a7:03:60:b2:71:21:3d:9d:42:0b:a4:77:
c4:db:65:bb:aa:d0:96:49:8d:d0:d0:75:e7:aa:6c:67:22:20:
27:a9:0e:b4:f9:7a:6d:4c:6d:c8:a6:3e:3c:d5:44:2c:ef:b6:
34:a7:d1:43:13:2e:53:a4:36:3b:26:ef:6c:27:20:ba:3f:98:
94:67:ef:a4:21:d9:10:c4:9d:bd:12:57:52:c0:87:ed:8c:56:
c5:58:e3:eb:25:74:6e:59:72:e1:71:e5:35:8e:cf:7e:0d:46:
78:8c:96:fe:4e:51:dc:42:cf:78:2e:9b:15:bd:55:a8:5e:0c:
78:a3:c5:4a:b1:cc:97:e1:60:c8:95:48:00:6d:4b:db:51:18:
74:4b:7a:2f:f2:00:a2:d8:0a:70:63:37:ac:8d:3b:8d:35:5b:
58:fa:78:d0:f7:aa:ea:96:cc:cf:94:57:35:07:f9:f3:0e:cd:
60:a8:ac:2f:86:b6:ce:16:34:c9:85:e3:37:b7:8a:a8:be:cd:
88:28:cb:0c:6b:3d:f9:61:4b:84:db:30:4d:89:c0:16:35:17:
4a:80:70:f0:a1:7f:0f:e4:13:81:cc:b3:08:de:ed:10:a5:0e:
7c:84:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:27 2025 by rpki-client