Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB156CAACCF111EF80E15D51762E951A.roa
File: FB156CAACCF111EF80E15D51762E951A.roa (raw, json)
Hash identifier: rWGX60YZeWxfV0vlTX7zezy2JpafbDSa5fQp9rc3OvM=
Subject key identifier: 74:1B:F8:14:E3:7C:DB:0D:14:9B:03:22:CA:B0:2E:1D:6D:68:D7:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB156CAACCF111EF80E15D51762E951A.roa
Signing time: Tue 07 Jan 2025 12:21:54 +0000
ROA not before: Tue 07 Jan 2025 12:21:51 +0000
ROA not after: Sat 18 Jan 2025 12:21:51 +0000
asID: 137547
IP address blocks: 156.245.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64535 (0xfc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 12:21:51 2025 GMT
Not After : Jan 18 12:21:51 2025 GMT
Subject: CN=677d1c62-9185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:65:ac:53:66:50:1e:93:8b:59:07:a8:16:
35:8c:8f:90:f5:6b:1e:30:9d:43:db:ca:73:38:a4:
d3:aa:3b:d9:62:d1:5c:94:d2:30:ca:34:da:1b:c7:
48:70:51:26:8f:d8:ac:15:db:75:06:df:64:69:8a:
cb:7c:cd:7c:07:c8:13:e3:42:c8:6c:87:fe:5c:38:
af:ff:69:93:fd:67:93:97:83:8a:d0:96:25:03:06:
ca:e9:4a:02:3a:58:36:0e:08:6b:7c:08:26:79:3a:
b7:04:68:eb:56:89:0b:84:8d:82:56:87:3f:ca:70:
f4:a2:c0:b0:47:e4:68:cd:c8:d4:86:d7:c5:00:55:
ae:c6:ef:fe:6f:4e:98:eb:43:76:84:01:78:b9:16:
39:20:e1:5a:5b:80:aa:31:92:76:df:c6:85:75:ad:
2a:79:ac:a0:6a:a0:d2:02:6d:05:78:76:73:fb:f4:
14:49:aa:98:94:b9:56:53:6d:00:64:27:02:35:bc:
c6:5f:73:dc:a1:b1:6c:fb:d0:75:f7:d8:f6:c0:2b:
74:20:96:e8:28:aa:f3:ca:57:14:9f:c8:fa:79:53:
0f:d7:3a:42:5b:bf:9e:3b:68:be:ba:15:b7:5c:51:
30:b4:da:5b:f1:bb:92:ca:76:36:07:b8:c8:d8:c1:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1B:F8:14:E3:7C:DB:0D:14:9B:03:22:CA:B0:2E:1D:6D:68:D7:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB156CAACCF111EF80E15D51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:be:87:c5:a2:b1:72:2f:b0:cc:33:8e:1c:b5:0a:5d:b1:ed:
54:02:7c:ef:dd:49:2f:88:e0:7b:d8:ed:52:2a:e2:70:db:64:
7c:26:67:9d:33:ef:5b:5b:5c:22:13:ba:2e:82:da:2f:d7:0f:
8d:a6:4e:be:b0:9a:c5:fd:d1:0f:4f:64:2e:c5:d0:69:f4:82:
c0:2e:a8:57:02:d6:85:33:19:90:c9:b1:2a:43:22:ce:9f:6a:
95:7e:ad:e8:18:ea:4f:2a:c0:64:92:36:fa:2a:16:36:66:cf:
f9:79:d3:2b:0d:19:b4:68:04:37:d0:63:0d:4b:b7:6c:cf:50:
ad:f3:4f:28:79:3a:db:c7:bd:60:64:04:da:83:31:e4:3e:d1:
7f:f6:00:b6:8e:4a:63:18:41:18:33:83:b3:de:90:18:2b:6e:
d3:57:eb:ab:90:68:bc:dd:2c:5a:4f:6e:f1:5b:76:a7:62:b9:
54:ef:01:bc:83:2c:83:dc:5c:7e:70:87:26:c4:a7:90:5f:93:
61:34:04:20:2d:af:14:c5:bf:11:77:ce:a0:27:09:94:dd:a7:
d3:d2:71:b9:f6:c8:4b:c7:53:fa:94:bc:a2:0d:c2:e1:23:dc:
83:6d:a3:fd:59:e1:ff:2f:e3:23:49:5b:a4:c4:75:72:df:cc:
d2:52:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:55 2025 by rpki-client