Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04994C3EC0FD11EFAEC47950762E951A.roa
File: 04994C3EC0FD11EFAEC47950762E951A.roa (raw, json)
Hash identifier: DxT7wTaDvOEltOeKxrLznTakwp7WpD89Xvo3CULUyCI=
Subject key identifier: 9F:DA:71:10:01:05:32:47:E9:F4:FF:3A:59:8B:BF:95:2F:3C:2B:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04994C3EC0FD11EFAEC47950762E951A.roa
Signing time: Mon 23 Dec 2024 07:10:41 +0000
ROA not before: Mon 23 Dec 2024 07:10:37 +0000
ROA not after: Fri 31 Jan 2025 07:10:37 +0000
asID: 203020
IP address blocks: 156.225.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59390 (0xe7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 07:10:37 2024 GMT
Not After : Jan 31 07:10:37 2025 GMT
Subject: CN=67690cf1-bcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:e8:38:51:c4:a5:80:d3:ac:7f:73:cb:54:
29:01:dc:db:c6:1e:c2:85:08:c3:ed:e8:6e:09:65:
95:c9:28:9c:a3:dd:ab:17:aa:d2:e3:ac:dd:e4:be:
45:eb:98:3c:ed:4d:47:8b:11:c8:d8:b4:a2:2f:2c:
9d:b5:94:bb:2b:35:39:eb:86:78:82:e9:39:a9:7a:
bd:d9:17:b0:e7:25:56:72:3e:f6:c4:8d:44:fc:ef:
de:d2:61:10:d4:e4:59:27:37:17:71:39:57:a7:f1:
58:2d:2b:b4:93:ed:ae:ee:1d:39:57:36:10:5f:6a:
7f:3c:c2:8c:5d:56:5d:67:63:49:a1:29:93:86:6c:
58:a8:d9:09:b0:aa:21:ae:21:43:30:80:cb:85:3c:
85:9a:07:bd:eb:5e:3d:7f:f0:f0:27:d5:2d:f4:31:
84:23:e7:6c:55:7a:03:29:f6:e5:05:10:ec:ee:7c:
82:3e:51:45:fa:d0:4b:11:b0:86:51:10:b0:a3:11:
75:c1:5a:d3:95:37:4c:98:69:19:60:b2:21:2b:ff:
82:fb:c9:df:93:c0:44:53:9a:2c:ab:94:82:95:7d:
ed:af:4e:54:55:c1:dd:51:b5:10:6b:9a:bf:16:1c:
f5:44:71:d8:b5:62:8d:dc:e3:79:45:a6:7b:2f:d4:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:71:10:01:05:32:47:E9:F4:FF:3A:59:8B:BF:95:2F:3C:2B:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04994C3EC0FD11EFAEC47950762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.6.0/24
Signature Algorithm: sha256WithRSAEncryption
48:06:59:e3:30:1a:cf:89:46:39:6a:af:3a:81:6d:56:c7:cb:
b9:50:5d:26:2a:fe:c6:2d:17:f1:62:80:8f:ac:4e:38:4e:15:
bf:96:b8:0a:de:47:d6:fa:35:bf:77:1b:79:38:c5:24:b5:df:
55:fc:9e:e0:f4:5a:3a:2a:87:bd:32:0a:e8:5f:c3:db:60:bb:
fa:34:6e:ed:5f:7c:b9:d6:b9:2b:08:72:ba:03:c4:ef:4e:58:
ac:11:a6:fb:92:32:c1:8d:d4:04:e5:2a:56:80:00:9c:56:92:
64:67:70:2b:61:ab:b5:89:59:e5:0d:62:bd:e0:f1:aa:1f:cc:
b0:53:e0:39:9d:43:c0:24:3b:8f:51:0a:6c:81:e1:ac:3d:30:
a5:20:45:f1:14:88:39:04:26:f4:5e:17:35:f9:64:e2:c3:48:
43:d7:c0:7b:44:65:45:61:12:c5:19:de:bb:76:10:b9:9c:a1:
0c:7d:92:d1:ac:96:f5:d1:56:80:80:29:e9:93:3a:d0:89:59:
77:4b:ea:03:0a:1b:9b:3a:6b:71:96:97:63:f1:70:44:d3:73:
a6:16:64:ed:43:c7:e6:b7:c1:24:9b:e2:8a:b3:3a:c1:c9:5d:
ab:bf:ce:4c:20:59:7d:a1:91:3c:d0:5a:d0:a8:4f:0e:e8:40:
a2:60:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:28 2025 by rpki-client