Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F260A404C9B211EF83013ABB762E951A.roa
File: F260A404C9B211EF83013ABB762E951A.roa (raw, json)
Hash identifier: MjdBYlspxP9DvcpHwVJx7taPN0FGZ9NnTvWufaMwX9o=
Subject key identifier: 17:59:5F:E2:23:69:84:E4:A7:86:8E:31:6B:ED:FF:E2:DD:67:9D:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F260A404C9B211EF83013ABB762E951A.roa
Signing time: Fri 03 Jan 2025 09:13:08 +0000
ROA not before: Fri 03 Jan 2025 09:13:04 +0000
ROA not after: Sat 18 Jan 2025 09:13:04 +0000
asID: 141883
IP address blocks: 156.242.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63169 (0xf6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:13:04 2025 GMT
Not After : Jan 18 09:13:04 2025 GMT
Subject: CN=6777aa24-8a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:b5:8a:ba:78:d1:09:9e:cd:ef:4d:79:17:
1a:80:14:27:a0:6a:37:68:7b:0f:2e:f5:42:0f:d5:
a0:ba:bc:fa:c2:27:5b:f9:fb:70:0f:45:5a:21:4b:
34:5e:db:b5:5a:77:ee:26:0a:30:c7:ed:69:64:e8:
5a:7c:c1:08:b2:28:2a:c7:b4:d1:80:27:c6:c5:f3:
8c:81:d0:61:80:eb:9e:cd:6a:2b:af:b8:c8:96:ac:
65:b3:a5:77:12:90:b2:f5:03:ff:fd:12:44:96:ab:
ab:57:62:6b:7a:70:af:c7:85:04:ca:ac:8c:d6:7a:
ab:62:8b:79:71:67:af:e9:9e:d0:87:b6:1e:0c:f7:
5b:21:73:a6:36:79:9b:e7:4c:b3:ce:91:29:ce:a0:
36:4a:11:ba:77:53:62:04:3a:f6:0b:ba:61:21:ab:
e8:d5:07:30:45:4a:f9:1b:fe:a8:79:56:a5:7c:39:
8a:fb:3a:19:5b:04:00:6a:59:3b:e8:3d:e9:4a:78:
f6:4e:f4:f7:16:b9:ae:00:dc:dc:04:53:f0:65:66:
8c:41:fe:c0:20:bf:f6:a8:43:58:1e:2f:dc:4d:44:
8c:ad:5f:f7:c5:f1:e1:4f:e7:aa:e7:54:5a:cc:d6:
f1:c8:3b:d2:7d:ee:6b:43:93:ac:5b:5f:40:34:48:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:5F:E2:23:69:84:E4:A7:86:8E:31:6B:ED:FF:E2:DD:67:9D:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F260A404C9B211EF83013ABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.10.0/23
Signature Algorithm: sha256WithRSAEncryption
37:f3:c3:f7:77:91:90:a4:bd:c9:57:d0:b2:2b:9c:11:4f:dd:
c7:78:55:e2:39:4e:0f:0b:06:83:ce:03:0c:01:f1:25:91:0a:
55:d6:f8:02:e0:f7:a5:76:47:d1:84:04:36:04:d0:02:ae:3d:
2b:74:19:fe:55:ca:9c:f1:8c:b6:74:61:85:53:fa:ef:9e:a4:
17:84:7a:8f:b3:d5:1c:60:0c:f0:37:14:e4:f1:67:57:22:6a:
d8:65:f8:b9:46:f9:97:2f:07:48:97:09:a8:7a:34:32:63:16:
75:ca:72:36:b6:a0:8c:1d:7b:20:42:f5:03:e2:6d:67:be:af:
10:93:16:e1:2e:a9:15:39:fc:6f:b0:f3:97:4a:d0:be:19:be:
40:fc:d1:c4:70:b3:63:e2:5f:62:ca:4c:9b:f5:d8:8f:7a:48:
08:ea:8d:ce:6e:98:59:6d:1f:ad:fb:1a:cc:aa:a6:81:1f:f0:
4e:52:f0:54:5e:bd:76:4a:72:63:cc:a3:93:54:ef:d0:c4:4a:
e2:e7:05:d6:74:8b:9f:ab:95:d7:65:04:82:da:cd:80:58:da:
30:c0:ab:f7:28:7d:9c:fa:56:c1:47:d7:a2:99:e8:f1:17:0e:
b4:f7:fb:83:53:80:52:71:18:b7:12:c1:fd:ba:1a:3f:42:15:
5f:1d:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:10 2025 by rpki-client