Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAE31616C99E11EFB9BA0ABE762E951A.roa
File: FAE31616C99E11EFB9BA0ABE762E951A.roa (raw, json)
Hash identifier: uSEtkAWXKLbyQqDibrelYNXt4asXJhEJ6hW7tehQ9HI=
Subject key identifier: CE:DE:4A:FD:E3:E6:57:EC:CC:34:56:86:D7:77:84:11:7D:34:89:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F65D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAE31616C99E11EFB9BA0ABE762E951A.roa
Signing time: Fri 03 Jan 2025 06:50:12 +0000
ROA not before: Fri 03 Jan 2025 06:50:09 +0000
ROA not after: Sat 18 Jan 2025 06:50:09 +0000
asID: 54801
IP address blocks: 156.255.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63069 (0xf65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 06:50:09 2025 GMT
Not After : Jan 18 06:50:09 2025 GMT
Subject: CN=677788a4-b787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:0d:8a:37:dd:d7:32:e5:e1:dd:2d:89:11:
8c:8c:2c:f5:81:b2:7d:f5:29:ed:0e:05:31:74:ce:
0d:39:dc:39:70:38:43:dc:20:74:81:ba:ec:97:3c:
2f:6b:0a:19:ef:34:58:c7:83:e9:dd:2f:6d:17:75:
a2:3d:d3:d0:33:55:b2:a7:f1:9f:f3:77:cf:0d:b3:
2a:11:ae:0e:57:10:94:eb:82:1f:e4:96:86:9f:74:
66:c1:c5:01:62:d4:2e:81:aa:b8:0f:19:38:4a:e7:
f4:36:18:1c:ad:3d:79:ed:26:af:93:97:9d:13:7f:
89:29:5b:3d:e9:b4:d7:d6:50:63:e4:7b:d4:f5:4c:
b4:7f:e1:ff:f1:9b:7c:ba:5d:6f:51:b2:87:95:96:
d5:62:f2:71:48:99:af:a0:98:97:f5:6f:c8:10:75:
12:6d:5c:a9:c8:cb:f5:8b:60:24:10:b9:df:5a:44:
cc:98:6b:a5:9b:6b:f4:d2:40:ee:9f:9e:7a:31:25:
17:46:3d:6a:29:bd:e8:07:d6:2c:ed:09:d0:99:42:
e7:ab:8c:21:98:c3:47:79:49:f1:92:c0:4a:a9:ad:
ad:b1:63:6a:75:7d:3f:67:57:5a:a1:6a:81:44:ea:
d0:20:b9:87:9f:bb:c5:64:dc:f9:29:1e:1f:cc:1a:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:4A:FD:E3:E6:57:EC:CC:34:56:86:D7:77:84:11:7D:34:89:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAE31616C99E11EFB9BA0ABE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:9c:77:8b:2f:67:54:22:99:0d:9c:92:ce:74:60:02:74:71:
66:22:43:43:64:95:41:57:d5:7c:17:89:3e:c4:64:f4:9e:e8:
c2:ba:41:51:36:cc:94:ac:fc:8a:b2:a5:8a:8c:79:2b:51:9b:
df:ed:87:38:be:0f:29:06:30:91:ac:11:06:8c:5b:ef:63:5e:
c8:27:92:ff:8a:03:67:74:a1:52:f7:b3:4a:e8:e2:52:a6:c7:
05:28:6d:65:a3:84:57:38:10:d4:7e:49:ad:c7:24:da:3a:e0:
7d:2d:93:ac:e8:6e:a3:7d:72:9b:c0:33:17:71:82:27:ca:ec:
61:ae:f3:0c:8a:3c:f8:e3:0c:47:29:b5:47:4e:69:7f:d4:91:
7b:2c:6f:29:eb:84:4a:34:11:81:ab:31:ac:f8:5d:e8:21:ab:
42:33:54:00:63:e4:fc:f6:8a:32:30:46:15:51:74:df:ad:28:
a6:2b:6b:7f:0f:48:fd:70:7e:f5:bc:92:64:64:ce:de:7d:31:
84:52:66:b7:e4:0e:08:3f:5f:9a:46:f5:43:1d:91:62:a5:f4:
d7:86:92:3e:06:22:d7:24:d7:d0:d6:a9:38:cf:b2:c5:06:c4:
49:51:3c:88:31:97:01:85:c6:15:33:06:f5:7f:6a:05:2c:b5:
44:cf:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:49 2025 by rpki-client