Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09977100C4F611EFA39E6995762E951A.roa
File: 09977100C4F611EFA39E6995762E951A.roa (raw, json)
Hash identifier: JHuxywLZWvnFrbGFS3w5vc9y8BEfYRfcSalVO5BTFSk=
Subject key identifier: E6:41:A2:C6:48:7F:F6:79:16:B8:E5:CF:5E:52:AF:49:55:3D:90:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F123
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09977100C4F611EFA39E6995762E951A.roa
Signing time: Sat 28 Dec 2024 08:30:47 +0000
ROA not before: Sat 28 Dec 2024 08:30:44 +0000
ROA not after: Wed 22 Jan 2025 08:30:44 +0000
asID: 141342
IP address blocks: 156.238.68.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61731 (0xf123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 28 08:30:44 2024 GMT
Not After : Jan 22 08:30:44 2025 GMT
Subject: CN=676fb737-c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:55:7c:54:ab:db:c5:94:b1:2c:9e:3c:4a:b0:
98:66:e5:6c:8d:b4:8e:cf:5d:ad:38:95:09:72:db:
6b:18:e1:d5:eb:b0:15:42:24:e4:57:81:99:30:dc:
aa:81:f9:4d:d9:a4:cb:0f:8f:1a:eb:42:86:f8:1c:
5c:31:89:ea:4f:44:36:9b:de:eb:d9:c8:5f:01:61:
e9:9d:3d:52:cb:85:8d:a0:38:64:6e:75:f6:57:c3:
d2:cd:29:18:3f:f3:ce:4d:18:67:83:b0:a5:af:e9:
bc:17:61:be:5c:4e:47:37:ee:9b:0e:29:ca:08:b6:
51:61:a2:b6:60:e1:9c:10:9c:77:c8:68:99:b9:aa:
e3:89:c4:f5:2d:ed:8d:be:d9:39:fd:ac:2a:e8:f7:
78:3e:8d:7d:2b:47:9b:af:f0:60:7b:f5:82:88:dc:
83:cb:bc:f4:37:c3:0c:22:81:e6:ee:ba:8b:9d:a6:
b8:10:68:15:17:52:64:17:b4:31:f6:d7:8b:85:d2:
32:3e:9e:30:3a:0d:68:de:4b:db:f0:85:dd:c3:c9:
d3:8d:01:3e:e5:45:34:99:39:93:9d:73:6b:bd:36:
64:af:b0:19:39:6b:33:34:7c:d4:bc:e7:dd:fc:ed:
6e:8d:8a:ad:5f:c6:8d:f6:2a:ae:99:e0:8b:a8:92:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:41:A2:C6:48:7F:F6:79:16:B8:E5:CF:5E:52:AF:49:55:3D:90:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09977100C4F611EFA39E6995762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.68.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:aa:fa:6a:2f:0e:e2:3b:d9:97:ea:58:3f:4d:3b:ed:28:a6:
67:ea:af:18:ed:94:e8:b9:b8:f9:e9:f6:67:5f:39:f5:04:a1:
13:aa:2e:ab:a7:81:ea:fe:91:3e:66:db:97:b1:45:2f:95:69:
b7:09:84:fc:ac:e4:9c:48:b5:04:84:46:78:23:b0:9d:78:a4:
72:03:31:fc:68:15:6f:60:3b:14:53:8a:94:b5:d9:5b:12:4c:
6f:85:ed:ae:64:f3:c9:6c:56:7a:14:da:bf:4a:58:13:75:a1:
cf:bc:18:76:16:d2:aa:9d:03:8c:77:b1:6f:fd:6a:99:fd:59:
99:96:7f:8c:23:ff:75:28:bf:01:0d:d5:a6:fc:f9:f2:6b:7d:
4d:20:e2:94:59:be:83:82:b7:f1:af:09:b8:ad:ba:1e:aa:07:
bb:a0:d5:a2:e5:bb:3b:0b:63:e0:d7:fd:32:af:06:19:a5:a2:
3d:32:f2:d9:c2:01:2f:0e:92:79:ba:a6:05:d5:85:5b:04:9c:
f9:de:20:fd:27:cd:91:a1:06:c1:4c:fc:aa:b1:f2:27:1b:2a:
7b:58:e6:2d:97:94:19:c3:af:57:ad:8a:7b:59:5d:d3:c2:d2:
46:33:f8:76:b0:93:02:f9:d8:06:06:cd:3e:8e:cd:9e:73:e8:
7a:c5:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:42 2025 by rpki-client