Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF79B8C4B21511EFB146E790762E951A.roa
File: FF79B8C4B21511EFB146E790762E951A.roa (raw, json)
Hash identifier: WlK1veQAcCG3ZU2vIANIcAsc4XLriEWYkbogn5jGuvo=
Subject key identifier: 10:FD:2F:E6:A7:F8:5F:9E:72:F5:AC:BB:BA:B5:9F:2B:6E:5A:EB:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF79B8C4B21511EFB146E790762E951A.roa
Signing time: Wed 04 Dec 2024 08:01:42 +0000
ROA not before: Wed 04 Dec 2024 08:01:39 +0000
ROA not after: Thu 23 Jan 2025 08:01:39 +0000
asID: 138915
IP address blocks: 156.229.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57160 (0xdf48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:01:39 2024 GMT
Not After : Jan 23 08:01:39 2025 GMT
Subject: CN=67500c66-5305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:2f:72:ef:50:3a:5a:ec:bf:6a:6a:16:47:
18:4d:3e:d0:5c:01:9f:12:9b:81:e9:11:8c:21:21:
f4:cf:01:33:af:65:42:4b:80:96:c5:7a:61:ed:7a:
e6:0c:af:4e:90:e0:22:fa:bc:2f:03:77:fa:43:9f:
5f:07:21:7b:1e:a8:d4:49:04:d9:bf:bd:76:e7:37:
8e:60:57:93:fb:5f:6d:23:65:24:89:2d:a1:c9:3c:
ee:24:e8:b7:62:de:d8:00:51:6b:f5:da:0b:ab:d3:
3e:89:12:56:28:5e:10:bb:23:e4:02:ca:b5:5f:50:
a1:26:d8:ca:2d:63:a3:56:e5:a0:f7:1b:d3:49:bb:
e7:9c:7a:4d:1f:1f:5d:ef:9a:68:0b:97:d8:b8:0a:
3c:9f:6e:69:a1:40:be:e2:b6:c1:61:fa:0a:dc:c4:
d0:5c:f1:60:9b:c2:20:92:b3:5d:c9:c2:43:d8:91:
71:7f:75:8c:f4:84:23:cf:b3:d4:29:a7:66:1c:bc:
dc:a5:9f:d4:0b:a5:57:2d:cb:00:2c:75:66:0c:63:
7e:fa:0a:10:c0:fa:3a:b4:3d:a8:5f:c5:3b:02:f0:
50:25:46:80:90:91:91:b4:ae:3f:50:3a:35:3f:83:
1d:cc:73:7b:35:bf:4a:3a:0b:c0:48:be:06:26:f3:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:2F:E6:A7:F8:5F:9E:72:F5:AC:BB:BA:B5:9F:2B:6E:5A:EB:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF79B8C4B21511EFB146E790762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.51.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f6:ce:d4:6d:4a:35:77:b7:4a:68:7f:02:f2:c7:a1:99:b4:
89:84:2f:65:ff:3d:23:78:6f:e6:73:16:45:ca:4b:83:89:d7:
84:64:fa:6f:e5:c1:c8:45:eb:ba:bd:71:c7:24:1a:5e:bb:b9:
23:6d:57:16:ae:99:81:7a:88:cc:4f:ff:e6:e8:0a:53:5f:90:
10:e0:8a:6a:eb:cf:9e:6b:01:93:14:a6:31:f0:c7:aa:a9:d9:
a6:92:09:f1:f3:a0:a8:b3:8f:1b:fd:17:31:c6:7a:ae:b8:c6:
74:80:ff:6b:e5:e6:1b:83:5e:bb:c4:63:a5:a6:a9:7c:34:28:
13:1d:48:3b:ac:f2:36:00:d7:b1:aa:7f:9e:26:a8:c4:24:40:
cf:e6:c0:91:75:9d:2e:ba:59:f1:5c:56:9b:2f:3d:6d:b9:88:
a8:72:4c:38:84:45:c4:7e:9d:7f:7a:2f:52:de:76:12:d7:04:
ea:71:9f:e8:02:a6:b0:5c:35:22:34:8a:41:17:09:9f:a4:1b:
30:32:d2:b3:87:6d:92:e9:84:a8:bd:f0:7b:e7:7d:65:21:bb:
45:f8:14:54:a8:a8:f0:68:4e:9d:f3:18:a6:b8:71:a6:54:e7:
d5:1c:c0:5c:63:56:01:37:0b:4e:7f:d2:ca:38:92:52:59:da:
a9:2a:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:33 2025 by rpki-client