Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5CA67BEB92811EFA9BD1291762E951A.roa
File: F5CA67BEB92811EFA9BD1291762E951A.roa (raw, json)
Hash identifier: BROM3ogmzSjuzKqJju0e4f/aa9GGxRfFEKCqIfO6RBg=
Subject key identifier: C7:60:B2:34:70:16:99:AA:77:A6:CF:56:C9:E1:D0:85:39:48:20:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E32B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5CA67BEB92811EFA9BD1291762E951A.roa
Signing time: Fri 13 Dec 2024 08:05:04 +0000
ROA not before: Fri 13 Dec 2024 08:05:01 +0000
ROA not after: Sat 25 Jan 2025 08:05:01 +0000
asID: 202656
IP address blocks: 156.246.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58155 (0xe32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:05:01 2024 GMT
Not After : Jan 25 08:05:01 2025 GMT
Subject: CN=675beab0-52e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:2f:fe:65:14:1b:fa:57:8e:7d:49:16:17:
81:ab:ad:55:ae:f0:51:71:10:a9:4c:cd:db:21:fa:
57:ad:c2:e8:ec:14:3a:85:89:8d:0e:3d:ae:a1:f9:
23:16:cc:3f:db:8d:61:49:c1:4c:b8:41:72:55:03:
d4:89:21:77:35:6f:92:04:1c:2e:48:dd:46:24:e6:
f4:c0:1c:ab:cb:c5:c4:36:83:87:23:09:df:bb:3c:
bd:24:38:28:81:d4:83:0d:ee:63:b4:ea:e8:44:b5:
18:a6:a2:66:15:ad:d2:73:11:0e:a0:47:dc:4e:cb:
f8:c4:05:c9:3f:89:81:10:4e:c3:4a:77:8f:1c:1a:
a3:ac:b6:a6:56:95:e4:a0:c8:24:b9:e6:c3:d2:14:
24:1a:f1:29:2f:04:cd:0b:e5:dd:f8:52:cc:61:b6:
d9:12:c8:39:18:6f:7d:b2:fe:a2:62:1a:2f:ac:7e:
2e:66:82:70:f0:e8:28:40:ff:1c:a1:56:8b:a4:7d:
86:3c:5d:b9:41:a8:ce:6a:70:bf:db:d4:b1:2c:f0:
4d:18:56:14:96:40:08:79:9c:80:c4:15:50:78:5e:
b9:2b:a0:9a:fb:ee:3f:fc:c3:56:70:80:8b:c1:75:
fa:7f:3c:67:cc:ee:51:61:69:f5:8f:b9:f5:9a:e0:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:60:B2:34:70:16:99:AA:77:A6:CF:56:C9:E1:D0:85:39:48:20:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5CA67BEB92811EFA9BD1291762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.164.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:cc:bb:b5:0e:39:d5:69:b2:41:0f:85:04:fa:e5:a7:e9:e5:
90:88:d4:de:9a:14:9a:50:03:1d:ef:40:2c:c4:62:ad:d1:ca:
bb:be:03:f1:8a:af:7b:0b:6e:4b:ca:fe:35:42:52:42:74:e6:
20:e4:9d:db:3f:38:f0:dc:ca:33:3d:07:13:5c:6b:64:89:62:
b4:33:4f:99:e7:d6:a5:65:8f:a4:bf:9d:56:91:f3:1c:32:55:
c3:3d:42:17:ae:62:bc:41:5a:cd:c1:68:bf:95:a0:5f:c1:e6:
f5:74:36:59:a4:2e:ec:d3:7f:d5:1a:b5:6f:2c:e6:19:40:d9:
3d:45:8c:84:3d:a4:cf:4d:b2:07:e1:30:56:28:6b:31:92:88:
b3:42:85:45:33:1f:4c:08:b5:ee:65:ca:3b:88:92:fd:05:db:
f7:86:49:08:c2:65:b1:dd:89:17:95:7c:32:26:ea:99:6c:01:
cc:42:b9:27:ad:79:18:81:f7:04:81:4a:70:21:b4:54:83:55:
84:f4:24:35:6d:55:8a:da:ed:8a:60:d1:8f:5a:b0:b0:3c:e3:
fa:44:d5:bb:19:da:33:81:8d:c3:b5:23:5f:29:12:b9:cb:20:
e8:35:4b:9c:c6:87:44:bd:e0:bb:a4:b8:99:54:78:c4:0a:24:
1c:7f:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:09 2025 by rpki-client