Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F03EAA2CB92211EFADB5906B762E951A.roa
File: F03EAA2CB92211EFADB5906B762E951A.roa (raw, json)
Hash identifier: ya/ZAmjZXv0H/8baKQ412ThfWGFQK7+Co9ulSZh55ug=
Subject key identifier: 1A:E4:D9:DD:66:CA:77:DA:E3:6E:9C:FA:F1:3F:C4:45:BF:EE:19:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F03EAA2CB92211EFADB5906B762E951A.roa
Signing time: Fri 13 Dec 2024 07:21:58 +0000
ROA not before: Fri 13 Dec 2024 07:21:55 +0000
ROA not after: Sat 18 Jan 2025 07:21:55 +0000
asID: 203020
IP address blocks: 156.251.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58085 (0xe2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:21:55 2024 GMT
Not After : Jan 18 07:21:55 2025 GMT
Subject: CN=675be096-d875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:fb:28:5c:ff:8d:ea:8f:0b:a0:25:bf:31:
0f:8c:35:d7:20:f8:56:c1:79:80:cb:53:8e:88:d3:
68:26:e8:23:fb:39:75:63:6b:c0:a3:9f:1b:91:19:
23:23:a4:8a:71:a3:65:d4:6e:4e:51:47:ec:2e:b1:
62:df:0c:51:1f:37:04:ce:88:ca:41:58:10:2a:1e:
07:26:12:5d:f6:5f:d7:64:2c:e8:7c:a8:89:45:98:
85:28:fa:fc:b5:c7:89:00:b1:20:16:0e:c9:a3:2c:
76:a3:b2:61:9d:55:df:9a:70:3b:50:2a:39:53:f3:
a1:57:5d:89:bc:2d:97:36:bd:13:95:00:1f:29:15:
2b:eb:51:7b:af:ce:f7:ce:4b:04:3c:43:66:23:97:
13:27:df:5b:1e:f6:8b:25:16:73:3a:72:61:9f:36:
90:72:56:17:53:07:bd:bf:3b:89:bb:e6:ee:1f:72:
74:03:40:96:6c:2e:19:90:96:4f:e2:bb:e0:fb:03:
4e:2d:05:22:a9:b8:e5:04:a8:52:29:30:cd:c4:8e:
a0:3e:16:fe:f2:6d:f6:9b:c2:40:79:7c:9d:99:13:
a8:95:b3:bc:be:ad:22:3a:22:9e:42:70:01:02:66:
0b:66:44:ee:57:45:f1:b2:36:07:07:e6:74:18:f1:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E4:D9:DD:66:CA:77:DA:E3:6E:9C:FA:F1:3F:C4:45:BF:EE:19:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F03EAA2CB92211EFADB5906B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:4c:7e:e2:e1:cb:35:53:6f:ef:88:be:e3:77:11:fc:0f:20:
bd:d2:68:bb:d7:8e:3a:2b:5e:89:32:1c:eb:09:2f:b4:76:d8:
88:0b:a5:6c:02:41:c7:97:5f:1a:c9:b7:a1:84:74:24:46:9e:
13:d0:12:3f:0d:3e:ae:9c:33:0f:04:ae:e4:9e:29:ca:fd:80:
5c:42:e0:8c:27:1b:be:b4:c2:66:2d:1b:76:f6:da:4b:94:53:
81:5d:7f:e6:c7:f5:04:9f:9c:c7:a5:4b:91:f0:6a:dc:f1:77:
38:94:6b:5b:0f:c2:b3:ed:d2:88:83:6b:5d:ec:a6:6a:1e:32:
8b:8c:58:60:1c:75:a3:f6:4e:e6:f4:54:86:52:c8:56:69:3c:
e9:83:72:4b:d8:2e:8c:d5:76:fe:69:d2:a2:a6:6d:d7:6f:32:
5c:5a:6e:15:3a:30:a1:ce:ff:34:ad:88:6b:aa:b8:42:1d:82:
50:e0:ac:bd:3a:f0:be:75:33:92:58:d4:aa:d4:6a:73:e6:5a:
05:e1:83:39:2d:d8:b3:e2:43:96:c0:db:4a:c7:a1:92:c0:db:
b9:9b:24:81:8c:80:bf:c4:5e:1c:e2:71:76:34:33:ec:3f:4b:
52:06:a5:7a:be:86:17:71:3b:ce:04:cb:30:c3:4f:ae:71:56:
04:c6:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:51 2025 by rpki-client