Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F54B619CB21811EF8DB3E0A2762E951A.roa
File: F54B619CB21811EF8DB3E0A2762E951A.roa (raw, json)
Hash identifier: v1s0W0hU08bG2Sngl4HKdoLZ+Zge8xMjWjU82yFyUJc=
Subject key identifier: CC:47:6E:E0:08:0A:45:05:AA:08:98:6B:5A:3B:D1:1A:6B:2B:3C:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F54B619CB21811EF8DB3E0A2762E951A.roa
Signing time: Wed 04 Dec 2024 08:22:54 +0000
ROA not before: Wed 04 Dec 2024 08:22:50 +0000
ROA not after: Thu 23 Jan 2025 08:22:50 +0000
asID: 63139
IP address blocks: 156.229.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57196 (0xdf6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:22:50 2024 GMT
Not After : Jan 23 08:22:50 2025 GMT
Subject: CN=6750115e-755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:32:53:53:6e:a3:4c:c6:f5:ab:17:d3:c1:
33:91:10:e7:4e:40:ce:cb:dc:27:45:89:02:a0:9a:
d5:d3:d4:be:a3:13:d9:96:96:a5:3c:a0:c6:c4:2f:
82:9c:9d:ba:6a:c1:a9:10:40:a5:38:42:6d:9b:c1:
dd:f0:2a:48:92:a1:89:54:f1:52:95:09:56:dc:e0:
e0:fa:f9:44:29:a8:93:60:05:42:80:b8:74:fe:f4:
5a:b5:86:18:b3:66:9f:50:71:c8:f6:31:68:ae:64:
c7:36:b7:41:4f:3a:de:c5:58:8b:71:07:c1:56:25:
7e:67:df:e8:34:f1:a0:dc:f2:78:fd:76:65:a5:11:
9f:0c:47:ec:a6:c6:9d:f5:ac:16:87:c6:7f:08:f5:
8d:71:9b:5d:c1:61:a0:e5:67:22:ad:46:a1:ab:0d:
3d:ee:ef:54:4d:87:00:5d:0f:80:b3:7e:3f:34:8f:
84:8f:4e:72:5d:c4:4a:7c:08:85:49:89:06:eb:7c:
9b:d9:5b:6d:26:4b:f1:1a:50:e7:61:54:35:d9:6e:
c8:4c:5f:0b:31:21:39:d4:8a:97:56:14:77:6c:88:
a3:cc:61:74:12:7d:d4:de:13:76:95:44:31:66:85:
a4:8d:0b:20:ea:b1:52:f0:d4:e3:7e:9e:80:5d:cd:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:6E:E0:08:0A:45:05:AA:08:98:6B:5A:3B:D1:1A:6B:2B:3C:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F54B619CB21811EF8DB3E0A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:ff:50:92:f3:1d:1b:be:9a:f8:62:1e:9f:02:0b:36:6a:f6:
9e:63:8e:a9:9a:6b:97:c1:a5:e1:d4:14:3f:6b:08:a2:c0:ff:
b9:22:d1:a8:d1:22:d4:e6:17:ba:31:1d:85:9e:54:0c:26:b3:
b8:8e:3f:36:32:03:8a:7a:63:f1:a8:ba:5f:a6:e2:a4:fb:60:
a5:5d:2e:34:af:0d:61:8c:77:91:05:f7:b2:aa:fc:b7:a3:84:
65:1a:10:83:bb:fc:59:e3:3d:da:d7:8c:3f:d0:3d:a7:60:7b:
2d:71:25:17:1b:98:92:c4:cc:91:a3:fd:9b:7e:38:e7:0d:0b:
8d:26:62:81:3e:73:8c:a4:62:cc:57:9f:3f:ec:68:c0:84:b6:
05:21:06:ce:c4:5d:60:6a:54:cb:5e:c1:86:e4:cf:29:63:34:
72:11:90:b6:f5:4f:09:77:ed:a2:19:2e:19:81:1a:43:53:a3:
82:c2:04:7a:56:3b:7c:bc:82:7b:0b:4f:f5:9d:60:f3:65:76:
1e:93:da:09:18:44:65:db:1b:10:e7:78:77:8f:80:3f:79:a3:
c8:4f:fa:1a:ee:35:fc:2e:bb:ff:eb:28:26:ba:cf:bb:55:db:
14:c0:49:32:67:9c:87:61:6f:a5:7d:99:65:2d:f1:b4:8f:14:
ec:22:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:33 2025 by rpki-client