Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/059FC5C6BFA011EFA21CACB0762E951A.roa
File: 059FC5C6BFA011EFA21CACB0762E951A.roa (raw, json)
Hash identifier: 4S9U3dQXNOCDxKXXrPuQ9CBQLU5Gu5jdoWEYnPXOFzA=
Subject key identifier: FC:05:99:CD:A5:34:A6:5B:FA:57:F6:3A:F9:D1:E6:36:49:85:D2:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/059FC5C6BFA011EFA21CACB0762E951A.roa
Signing time: Sat 21 Dec 2024 13:32:28 +0000
ROA not before: Sat 21 Dec 2024 13:32:24 +0000
ROA not after: Sun 26 Jan 2025 13:32:24 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59346 (0xe7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:32:24 2024 GMT
Not After : Jan 26 13:32:24 2025 GMT
Subject: CN=6766c36c-dcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:c5:be:7f:e2:e4:b9:ac:f7:48:40:8e:19:
25:55:85:50:e7:48:37:a0:d4:ee:04:9e:67:2e:60:
67:00:8c:eb:db:2a:a8:7f:97:df:a1:16:ef:9c:02:
86:62:04:44:29:6c:6a:5a:bc:89:1e:30:ae:0d:43:
48:a9:ac:93:6a:5b:d5:e9:0d:11:1b:ea:bc:dd:bd:
3c:b1:0d:0c:9e:a5:22:8f:70:b4:0d:36:4b:6b:ab:
83:3f:8b:69:5a:25:12:c9:ad:f0:35:ef:b7:34:ca:
3c:4c:83:ba:a0:7b:53:8a:2b:50:9e:bb:3d:21:3a:
ab:80:fc:ca:93:5d:86:a0:b8:03:0a:83:6a:5b:82:
6f:b8:c4:46:a1:ba:2c:c2:72:b3:84:6b:98:a7:22:
b9:51:26:9c:9a:40:b4:7b:69:16:bb:bd:bd:e9:e5:
93:33:0e:6f:0e:bb:c6:1c:9e:20:46:6e:45:f5:52:
47:ae:61:20:5f:91:7c:79:ab:6a:e5:9f:0d:c2:19:
96:7b:57:a7:32:66:4d:df:c1:e2:ef:ba:15:15:dd:
b0:12:10:5a:d7:92:0e:4e:c5:32:66:c0:e8:1b:7e:
f8:d6:21:30:c2:56:8d:51:91:44:42:74:78:ea:0d:
40:bf:91:33:77:15:74:c9:a5:63:48:21:d3:77:7a:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:99:CD:A5:34:A6:5B:FA:57:F6:3A:F9:D1:E6:36:49:85:D2:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/059FC5C6BFA011EFA21CACB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f3:88:3e:52:ad:65:44:08:0b:52:6d:36:d6:ef:85:86:94:
ae:b0:74:4c:59:90:06:f3:47:d1:38:76:25:14:b4:a6:e1:85:
d2:f6:fc:af:53:9d:12:5b:2f:63:05:ab:86:8a:9b:bc:40:d7:
b6:5e:59:e4:58:db:a0:5c:71:fa:41:46:80:be:82:3e:96:a6:
6f:32:04:ec:b8:f8:53:e0:2e:b5:9f:b2:b8:98:5f:7c:18:c6:
63:7d:c0:19:06:d7:16:2d:be:f1:1b:45:e4:ff:2e:5e:e8:02:
0a:3e:58:53:bb:b5:f4:52:4f:a2:b9:1a:52:e3:68:be:5e:d1:
6c:e1:74:b6:68:d6:a8:3f:88:1a:ff:1d:98:89:6a:06:37:d6:
85:1f:ae:3f:cb:fd:55:e1:d2:ed:ff:8e:fb:38:07:21:68:9c:
82:43:24:37:46:91:22:a3:03:a5:23:a1:33:3b:57:6e:47:06:
fa:a5:2f:73:d6:17:53:ce:e7:2d:26:a7:fc:6e:f0:29:b5:95:
54:a7:c3:c1:44:a6:e0:2d:81:34:72:80:f5:c2:4e:d3:c8:e9:
74:21:2e:8c:34:18:8e:70:61:bc:c0:4d:6e:8b:02:5f:52:d1:
78:39:1c:e1:39:6b:03:dc:98:e1:6d:98:d8:ab:55:7e:5f:7d:
76:df:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:33 2025 by rpki-client