Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F868E138CE7911EF93BD8A9E762E951A.roa
File: F868E138CE7911EF93BD8A9E762E951A.roa (raw, json)
Hash identifier: HmFVFYJ+nfGPCCrvH7BJZtULqzp+cvtK4BSmSJ7a3Bg=
Subject key identifier: 6C:5E:E5:78:D2:EC:47:8B:FF:62:80:D2:43:15:25:61:A4:E9:0B:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01033C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F868E138CE7911EF93BD8A9E762E951A.roa
Signing time: Thu 09 Jan 2025 11:07:53 +0000
ROA not before: Thu 09 Jan 2025 11:07:49 +0000
ROA not after: Sat 01 Feb 2025 11:07:49 +0000
asID: 17561
IP address blocks: 156.236.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66364 (0x1033c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:07:49 2025 GMT
Not After : Feb 1 11:07:49 2025 GMT
Subject: CN=677fae08-ed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:a6:2e:09:cb:cc:82:13:42:f9:2b:ff:f9:
84:62:f8:e2:b8:f7:31:8f:dc:31:f4:4a:aa:34:98:
66:d6:5e:16:e4:38:34:5e:fb:11:96:40:c9:de:e4:
ac:e8:08:da:fa:2f:93:b7:79:fe:c0:d0:a4:22:7d:
64:da:11:e4:7e:26:a1:98:3c:2b:0b:c9:c6:9b:59:
37:d8:cc:42:87:d2:17:b1:59:3e:af:f4:0d:61:22:
28:20:c6:61:f5:ca:0b:3e:35:e2:27:8b:93:d6:b3:
7e:9f:74:cd:38:8b:aa:8c:a6:44:f7:3d:62:9d:cf:
0e:69:d9:f3:87:fe:46:c8:bb:1a:71:f6:c0:c5:8c:
61:a8:7c:4e:87:5d:08:a6:77:51:b8:de:47:81:37:
94:9b:3e:1e:e5:0e:e3:f9:4f:de:77:1e:92:ca:92:
03:bd:c8:22:d3:7a:30:b0:cc:d3:f8:25:de:02:3b:
8d:91:e6:6e:41:23:8b:35:24:10:3b:45:b8:e9:84:
c4:26:4d:f7:d9:76:49:bc:3f:e3:35:84:66:d6:b9:
33:f1:a5:aa:7a:83:53:51:e5:5b:37:74:90:3d:70:
64:0e:4b:c7:90:eb:34:dc:07:cb:9b:02:bf:74:a5:
99:dd:08:5b:68:aa:d3:98:a6:ec:20:93:e0:0a:7e:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:E5:78:D2:EC:47:8B:FF:62:80:D2:43:15:25:61:A4:E9:0B:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F868E138CE7911EF93BD8A9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.36.0/24
Signature Algorithm: sha256WithRSAEncryption
04:25:48:f3:93:6e:61:00:bf:71:33:b0:22:7c:f6:63:f6:14:
c5:29:b8:62:3b:62:bf:e6:a2:8f:24:5c:c5:70:33:d1:0b:42:
5a:ad:a7:5f:d9:4f:4a:64:d3:53:df:97:f9:80:69:39:12:68:
a1:8a:02:51:ae:8f:c0:a6:ea:8e:cf:90:0b:44:94:69:7e:36:
06:0f:70:21:df:2b:f8:b3:c1:17:0c:75:92:60:c0:c7:f7:86:
df:81:5a:e4:b8:fd:66:4a:da:36:20:06:06:b1:03:26:8e:7b:
2d:5f:ce:1c:bb:f0:59:29:c0:74:4a:e4:a7:38:4c:15:03:23:
11:5c:59:6b:b7:07:1f:0f:2f:b3:90:d8:43:a7:1f:d8:d6:53:
d0:63:ce:35:60:62:ce:87:63:b5:d6:1a:11:93:55:1b:64:a9:
9e:35:a8:c8:c6:b3:ff:81:85:7f:c2:9e:9e:18:81:25:15:18:
30:71:da:69:10:51:29:2c:c0:5a:c2:e5:8f:42:ee:12:37:4c:
bb:a3:48:1d:f8:d4:28:17:8d:2b:b7:67:ba:3b:38:40:b7:4a:
d6:d5:bb:f7:36:37:8e:a8:06:64:3d:01:b6:b5:07:27:14:4a:
09:be:a6:85:6b:6d:49:f6:3b:92:c6:8b:b4:32:08:82:68:78:
86:dc:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:23 2025 by rpki-client