Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F031375CBB7511EF85CD3C89762E951A.roa
File: F031375CBB7511EF85CD3C89762E951A.roa (raw, json)
Hash identifier: EYPq5sacGNY4RRKIVse2qOdP7O3zOI7OjJfyj3K5Q/4=
Subject key identifier: 7E:42:C4:C2:F1:4F:82:04:55:52:08:37:21:E2:E3:97:F8:48:A3:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E402
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F031375CBB7511EF85CD3C89762E951A.roa
Signing time: Mon 16 Dec 2024 06:21:09 +0000
ROA not before: Mon 16 Dec 2024 06:21:05 +0000
ROA not after: Mon 20 Jan 2025 06:21:05 +0000
asID: 50053
IP address blocks: 156.253.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58370 (0xe402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 16 06:21:05 2024 GMT
Not After : Jan 20 06:21:05 2025 GMT
Subject: CN=675fc6d5-b1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:2b:5d:b6:cb:b9:60:7c:ce:09:19:8f:e9:
b6:19:b2:e4:34:cc:99:71:9f:6f:38:cd:3d:be:87:
34:4c:b1:66:f6:5f:f1:34:3b:9a:11:29:af:b3:17:
f6:6a:e8:8e:85:5f:1f:42:02:a2:c2:21:bf:43:2e:
3b:06:11:16:37:a6:74:dd:01:69:e9:7d:24:75:0e:
2a:44:c7:1f:5b:28:3a:f6:48:c1:c7:9a:89:d1:00:
29:df:2f:2d:74:0b:b0:e7:c5:c7:79:e4:5e:37:ce:
bd:87:cd:14:39:52:e0:3a:f8:24:81:8e:f4:f9:d0:
76:6c:ed:8f:23:41:38:44:f1:de:de:56:9d:59:5d:
60:20:f2:7f:4d:3d:cd:7a:ec:f2:7b:7c:7f:31:17:
08:46:04:d5:dd:a0:87:50:4f:81:05:61:00:27:a4:
4c:6f:73:6e:3e:35:7d:72:03:ca:a4:c5:a4:72:ef:
8e:6d:b7:a8:b8:e0:fa:d4:9b:59:8c:89:dc:0a:cd:
c7:22:a7:e9:a1:54:91:a5:ac:3f:75:8b:bb:06:45:
8f:91:94:7e:30:5d:86:39:29:c3:98:31:10:09:18:
b8:84:42:88:73:67:df:bc:6f:bf:28:21:fc:84:10:
b6:99:5a:5b:f3:f2:1f:88:90:15:0b:a9:44:0d:4e:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:C4:C2:F1:4F:82:04:55:52:08:37:21:E2:E3:97:F8:48:A3:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F031375CBB7511EF85CD3C89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fa:ff:21:5f:22:f9:91:83:8c:a1:68:2d:19:65:44:43:3b:
43:37:f2:40:60:36:e5:de:e2:c0:ed:a8:90:73:f3:4c:66:1a:
2d:4b:d9:79:b4:c8:fd:04:dc:db:16:ce:1c:3e:18:f5:0d:8c:
91:a6:e0:49:a1:8f:6f:4d:11:34:21:67:6f:93:e6:01:e0:6c:
54:5c:3c:07:08:bb:77:8c:51:2d:86:77:f7:0f:03:1d:a0:42:
47:59:ee:17:3b:f4:89:5f:e8:94:10:81:4f:92:1f:03:aa:a5:
86:9b:51:f4:ad:d4:a6:ac:2e:e6:7e:8e:95:73:2c:9f:16:7a:
43:80:a0:fe:58:43:36:10:ef:5b:7b:31:ed:fa:8a:8f:6a:5d:
8b:66:58:80:53:a0:45:a6:f6:f7:63:dc:2d:5c:c1:dc:b2:6c:
68:08:2a:09:e5:a5:72:bc:f8:99:58:53:78:f0:f0:e8:2d:f0:
bb:85:91:2a:89:85:b1:fa:38:77:06:5e:5a:f9:ab:9e:8e:af:
f4:1b:17:b4:67:40:9b:62:b0:a5:51:32:f5:2e:94:8d:1e:d7:
1c:22:5c:0b:c6:c4:f0:22:04:c9:1c:80:e3:26:6b:61:7f:77:
58:eb:0f:40:41:46:8f:7e:1a:7e:9f:f5:f7:f7:93:e6:cb:3a:
f9:36:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:14 2025 by rpki-client