Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA822B2CE5611EFAC5AC841762E951A.roa
File: FDA822B2CE5611EFAC5AC841762E951A.roa (raw, json)
Hash identifier: g/j6toG0V0S1pX3SvJCDewBcDldEYoBa8ep/o/zBouQ=
Subject key identifier: B6:86:EB:FA:7F:A9:9B:02:8F:83:08:60:62:A8:70:45:A1:12:50:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA822B2CE5611EFAC5AC841762E951A.roa
Signing time: Thu 09 Jan 2025 06:57:29 +0000
ROA not before: Thu 09 Jan 2025 06:57:25 +0000
ROA not after: Wed 22 Jan 2025 06:57:25 +0000
asID: 5065
IP address blocks: 156.246.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66277 (0x102e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 06:57:25 2025 GMT
Not After : Jan 22 06:57:25 2025 GMT
Subject: CN=677f7359-52cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:ba:f3:14:33:38:11:3a:b4:0f:78:d2:b6:
00:e3:fb:cf:65:2e:9a:2f:a3:1c:19:42:e5:3d:53:
c4:19:fa:15:19:7c:68:5e:a3:3f:8c:7d:9c:2c:ea:
77:49:45:0d:15:59:4e:06:81:aa:b4:7c:9e:b0:a9:
87:2e:cf:19:12:d3:27:fa:4a:9b:83:13:64:30:51:
38:be:2d:d4:8e:5b:6c:b7:3d:c0:8a:c3:a4:0a:9c:
92:f2:1a:84:c0:4c:3e:65:44:2e:af:df:8f:23:98:
ad:f2:96:1b:b3:ff:ac:90:5a:53:75:70:a8:86:3c:
e6:d6:05:50:8e:f7:74:78:39:50:0e:24:89:28:54:
0b:a9:63:b6:f3:ab:da:ed:18:f9:0d:57:5a:6b:17:
74:ec:d0:10:09:52:f2:e0:90:a3:d2:1e:36:ef:eb:
53:9d:cc:2a:e5:4c:3a:8e:df:b7:4e:fd:c2:20:cd:
75:09:09:df:ac:bd:db:f0:ce:34:5e:1a:3f:ce:d7:
18:82:52:64:8b:a0:1e:62:b6:91:4e:3d:f0:6d:5a:
fb:a6:dc:a1:5a:72:db:b5:38:ba:de:ba:db:56:40:
cb:40:ad:b4:a8:0d:10:89:6a:2c:5e:e7:51:13:7a:
e6:26:84:ce:4a:4e:a3:d6:f6:c4:42:6c:c5:a9:e8:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:EB:FA:7F:A9:9B:02:8F:83:08:60:62:A8:70:45:A1:12:50:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA822B2CE5611EFAC5AC841762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:79:7c:ef:31:76:f4:98:ed:10:85:0e:d4:a8:a5:4d:19:b5:
20:e5:d3:92:64:b5:f5:62:6f:38:9f:ea:72:e9:f0:ff:16:d4:
94:33:b7:19:4b:56:31:c8:34:0b:cc:85:ca:1c:89:93:bd:c5:
af:70:0e:89:f8:86:4f:30:46:31:72:a8:ec:12:65:3d:3c:de:
a1:df:2e:a1:50:04:3b:1d:89:c4:f1:3b:e9:45:20:3f:d9:a1:
7c:3e:78:fa:1c:30:0d:fe:45:7b:2b:82:f0:30:06:3e:e8:40:
7f:de:ec:78:06:49:d5:51:34:e0:22:ee:08:70:c4:68:fe:61:
b7:e6:75:85:2e:73:1c:56:a1:ef:4b:e5:fb:ab:92:8e:81:d3:
c4:ce:50:a3:b6:ab:fc:ad:c5:fd:c8:77:05:75:1d:2b:bf:a8:
15:c3:74:8d:ba:f8:b1:a4:d0:3f:be:a9:28:df:f2:84:19:90:
47:ab:d1:d8:47:7c:b4:89:5a:76:a0:39:51:53:1d:75:90:b1:
19:30:ea:5b:21:cc:69:56:e8:45:81:ad:ea:26:ea:3e:83:9a:
71:5b:1c:95:e9:78:db:39:dc:f1:69:47:1c:9b:d8:ca:3c:07:
fd:43:39:f0:f8:e3:4e:8f:3b:6a:bb:66:22:aa:a2:44:a8:7a:
95:72:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:51 2025 by rpki-client