Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF0130F6C29811EFBC689B8F762E951A.roa
File: EF0130F6C29811EFBC689B8F762E951A.roa (raw, json)
Hash identifier: XO3ALuo60zmRk3wkrPnX+dDX9bh/f0AsWH/6GEnNsA8=
Subject key identifier: 69:F7:B1:E8:7B:51:61:32:D1:80:56:BE:ED:F8:A7:95:BE:55:7B:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF0130F6C29811EFBC689B8F762E951A.roa
Signing time: Wed 25 Dec 2024 08:19:17 +0000
ROA not before: Wed 25 Dec 2024 08:19:14 +0000
ROA not after: Wed 29 Jan 2025 08:19:14 +0000
asID: 399195
IP address blocks: 156.229.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59863 (0xe9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 08:19:14 2024 GMT
Not After : Jan 29 08:19:14 2025 GMT
Subject: CN=676bc005-d422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:b5:73:6c:37:00:71:27:e8:6f:f5:1e:72:
4e:b5:a3:97:18:e8:2f:44:0b:27:55:19:3b:ec:4b:
76:ba:2c:ec:91:5e:26:fc:1e:d8:43:07:b2:cd:6d:
2e:e6:fc:9f:03:a5:10:bb:33:46:08:ae:0c:44:07:
73:eb:3f:85:00:20:6c:f0:77:51:eb:7e:2f:7d:68:
b5:b7:bf:58:13:fc:51:38:e8:c0:81:65:1b:ba:84:
e7:02:e4:60:e3:85:1f:e2:da:c9:45:c4:c7:bd:a9:
40:4e:cb:c4:39:31:89:3d:fb:6d:49:74:f5:e0:04:
07:ed:ad:76:87:21:a6:ea:78:7e:73:a5:eb:fc:e0:
04:f2:e8:fe:3f:38:dc:3a:a4:0f:bc:ea:34:83:81:
29:e8:bb:2a:48:ad:07:c7:fc:25:50:70:ca:b9:9c:
c3:d1:6f:e8:5d:fb:48:45:74:52:8c:75:43:30:5d:
9d:03:b9:80:2a:20:56:63:fa:18:83:c7:e9:03:8f:
2e:df:ff:7a:4f:8a:96:10:f4:93:45:bd:0c:67:60:
53:6b:62:ef:a8:b0:e1:22:cf:22:86:20:d1:21:1e:
4f:fb:5d:8f:c2:8b:00:85:88:f9:9a:5a:70:b3:e4:
09:48:eb:98:b1:74:af:73:aa:d5:b1:9c:b0:d7:85:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F7:B1:E8:7B:51:61:32:D1:80:56:BE:ED:F8:A7:95:BE:55:7B:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF0130F6C29811EFBC689B8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0/20
Signature Algorithm: sha256WithRSAEncryption
05:a3:f5:61:42:52:29:2a:e7:96:2e:b8:8a:79:97:94:99:42:
82:57:94:92:f7:57:d8:91:e6:48:90:cd:43:d8:0c:a1:d0:d7:
ee:dd:3e:b0:0e:e7:33:fc:f8:51:ca:39:8e:e4:65:b7:57:57:
e8:02:bd:12:88:1e:1b:f1:26:ea:39:bf:5c:26:d4:65:26:0c:
81:42:5e:48:bf:5b:1b:4a:c7:e1:35:e2:d0:8b:e8:1e:b4:f2:
cd:95:90:b0:5c:41:89:f7:61:f4:e8:c2:cf:f8:52:5f:f7:3b:
4e:84:c4:da:5a:0d:30:d7:54:43:b7:05:99:49:a6:b4:86:f1:
23:8e:a4:a6:eb:bc:25:a1:89:15:2c:7e:31:1a:49:05:8f:26:
f1:f3:18:06:73:56:31:15:b1:e3:ce:90:eb:ee:61:ed:dd:7a:
ec:69:a1:5f:ca:28:45:ec:83:03:4e:e6:14:7e:27:4b:5b:82:
a8:c8:b4:4d:bd:90:c2:e3:96:33:76:be:f1:e0:37:3e:ad:82:
70:81:8c:38:13:14:ef:aa:f9:95:fc:26:62:7b:7d:52:4c:18:
c4:32:c3:64:42:7f:e7:01:31:05:40:2a:48:02:37:ff:b7:94:
a0:06:8b:ad:51:9f:0c:8b:1a:bd:35:53:5b:c9:81:c9:a0:97:
0b:71:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:32 2025 by rpki-client