Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1257E74E9F211EFBBA7ACBA762E951A.roa
File: F1257E74E9F211EFBBA7ACBA762E951A.roa (raw, json)
Hash identifier: wLGm1fv/qbAYw0vDF0NZ5B1QXpV0DL0wCE+whzRS25w=
Subject key identifier: C9:6D:D1:C6:37:20:30:AE:34:ED:2E:68:29:30:D7:E4:9F:67:31:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012238
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1257E74E9F211EFBBA7ACBA762E951A.roa
Signing time: Thu 13 Feb 2025 10:11:51 +0000
ROA not before: Thu 13 Feb 2025 10:11:47 +0000
ROA not after: Tue 18 Mar 2025 10:11:47 +0000
asID: 213828
IP address blocks: 156.253.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74296 (0x12238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 10:11:47 2025 GMT
Not After : Mar 18 10:11:47 2025 GMT
Subject: CN=67adc567-0212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:e3:0a:a6:9b:ca:39:3d:c9:c6:be:0b:de:
3e:ca:d9:46:0c:9d:fa:38:57:28:31:a4:67:a5:3f:
32:2d:2e:ee:85:9b:b3:97:79:42:04:95:49:75:5a:
8b:1a:03:33:cb:46:0c:6a:36:4e:e6:c5:c4:0f:84:
73:c8:7d:d3:88:e9:5d:2d:a7:55:2c:aa:4e:ca:a2:
0a:c4:68:a4:f5:cd:5e:16:a2:5d:a4:00:ce:98:52:
f1:39:69:c5:90:27:2b:72:f5:8d:70:0e:f9:98:ca:
c5:60:09:13:99:e7:37:2e:1a:c5:d4:81:0d:f3:7b:
63:74:93:be:1d:f4:55:06:a4:4d:2c:b5:e8:33:f2:
44:a2:32:c7:0c:9a:bf:3f:92:3f:f2:71:12:29:c3:
16:6b:ba:25:bd:20:ff:cb:9b:d8:e2:f8:52:9c:9f:
f4:fa:fc:01:64:ed:97:ec:22:7d:00:1f:24:9c:a6:
09:45:58:91:46:18:e8:e5:0a:24:92:20:b3:c4:d9:
e3:99:ba:56:05:47:8c:7d:cc:a4:2a:01:45:19:6e:
78:1b:20:16:8b:13:e1:a4:3d:c4:ce:66:13:3e:82:
c4:91:90:4c:47:21:cc:79:7e:60:b5:3f:63:13:23:
6b:82:6a:c0:97:bd:81:7c:ae:88:06:ce:97:e9:55:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6D:D1:C6:37:20:30:AE:34:ED:2E:68:29:30:D7:E4:9F:67:31:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1257E74E9F211EFBBA7ACBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f2:99:bc:cd:74:f8:2f:9a:5a:dc:cb:26:27:1f:5d:b4:aa:
99:4b:20:0d:8a:37:bb:39:d9:f4:25:af:99:a9:de:8a:17:a2:
34:77:52:2e:e1:79:4f:5e:c9:f7:f1:b3:b5:8f:c1:b2:66:18:
e0:ac:6f:57:0a:99:58:c8:ca:d0:b3:07:9e:a4:46:8c:4e:13:
f8:5a:1b:e5:16:cb:4c:ad:1c:d3:90:6b:83:1e:ab:b9:82:ca:
70:46:ff:af:7a:fd:cc:a6:49:66:75:e4:e5:55:b6:3d:29:66:
b9:2d:c3:c5:4b:5b:8e:c4:88:89:a6:59:a5:c1:4a:f9:42:d6:
5b:0f:39:c8:53:4c:3b:8e:e1:5b:47:2b:61:4b:ea:c5:14:ef:
de:ad:86:a8:70:f4:b7:5b:09:46:a3:a7:b6:3f:46:28:59:3e:
c1:70:52:6d:f4:e5:fc:81:e0:22:4c:d2:0c:60:c7:a5:b5:e2:
89:ed:9c:6b:7c:6d:b4:c2:64:91:8c:7d:ff:99:fc:95:4a:f0:
ad:1b:d7:76:9e:93:0c:9a:ff:b2:ce:42:bc:8a:bb:57:70:3b:
33:d3:3d:19:e9:cc:bc:60:89:e6:4f:b8:1b:e6:0f:b4:8e:cc:
34:76:0e:a7:dd:39:39:6f:43:b7:33:81:aa:33:dc:c3:94:5b:
f7:3f:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 13:36:42 2025 by rpki-client on console.sobornost.net