Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15700904CE7B11EF9BBC1FA5762E951A.roa
File: 15700904CE7B11EF9BBC1FA5762E951A.roa (raw, json)
Hash identifier: iVDb74fxa2SqHp+umvI9gaOPn/GUUaLE94DYd/Ojk7g=
Subject key identifier: 28:D3:0C:7C:DF:38:1D:D9:97:ED:FB:2B:6D:7D:EE:A5:CF:67:BC:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01034E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15700904CE7B11EF9BBC1FA5762E951A.roa
Signing time: Thu 09 Jan 2025 11:15:51 +0000
ROA not before: Thu 09 Jan 2025 11:15:47 +0000
ROA not after: Sat 01 Feb 2025 11:15:47 +0000
asID: 17561
IP address blocks: 156.236.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66382 (0x1034e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:15:47 2025 GMT
Not After : Feb 1 11:15:47 2025 GMT
Subject: CN=677fafe7-52cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ee:51:c3:aa:a2:2d:08:e5:a5:42:0a:ff:a6:
2d:0b:d3:de:38:14:82:73:b5:59:24:4c:21:35:ce:
4b:77:69:51:70:a0:53:75:7b:e2:3b:07:94:fa:cc:
11:30:8f:dd:e7:44:a0:1e:a2:80:21:54:b2:11:7e:
ef:28:f6:e9:34:c6:6d:8f:d9:75:e3:97:1c:05:11:
31:4d:da:e2:a8:97:6c:38:ac:6c:02:bf:62:f2:4f:
3c:24:2b:1b:62:c1:3f:69:ef:fe:fc:34:bf:21:cb:
c7:6f:c2:a4:14:ee:f0:70:49:1d:1e:42:92:d2:11:
fe:f5:d5:36:86:24:f6:c0:93:1a:2a:bd:eb:dc:54:
43:22:ea:94:3a:74:36:ea:33:00:36:19:6d:d1:3e:
d6:eb:77:e0:54:01:b6:da:f5:1b:0f:fc:93:b7:07:
61:1a:0e:3b:f4:21:05:9c:2b:9d:86:ac:16:40:d0:
33:45:4b:94:28:5a:f7:5f:09:8a:bb:b6:7a:cc:6a:
1b:7f:64:e4:13:c5:b8:63:70:91:18:30:2e:ec:8c:
b1:8c:dd:ae:b8:ef:21:31:eb:ca:ef:e3:de:57:3d:
a1:ba:e9:5b:b3:35:2b:04:a7:8a:e3:d2:ac:05:0a:
2d:67:83:e9:05:d5:55:d0:49:ea:e1:a6:20:93:10:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D3:0C:7C:DF:38:1D:D9:97:ED:FB:2B:6D:7D:EE:A5:CF:67:BC:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15700904CE7B11EF9BBC1FA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.46.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5e:8a:fa:9b:6c:b1:a2:7a:69:17:e6:83:5f:bc:2a:30:29:
7e:56:e7:49:27:8f:8a:af:9a:3c:fa:58:dd:55:9d:ba:98:54:
52:e5:18:04:90:33:ac:fe:da:70:63:42:24:eb:44:3b:60:8b:
76:80:ba:1a:67:f2:66:83:b3:f9:d5:f5:1e:47:31:f7:90:be:
f4:04:53:92:d2:7c:70:37:81:a0:b6:c4:cf:9b:2b:0e:ad:e8:
f6:99:90:80:a7:5f:ba:00:2c:8c:f9:f7:eb:3f:72:8a:1d:36:
cb:f6:57:e1:46:ff:f5:82:b2:d3:ff:e3:cf:4e:a7:03:a9:c0:
ef:e7:96:47:cc:9a:cf:24:64:36:9c:e9:fd:00:b3:64:c8:84:
21:d8:4a:fe:70:c9:76:9a:fe:17:3b:d1:cd:8e:d4:78:13:70:
2b:9b:0d:9f:55:3d:73:89:71:c2:67:93:58:ff:b3:d1:87:0b:
a6:81:18:ac:04:af:cb:88:cf:2e:b9:5f:d8:72:61:ed:02:6b:
00:38:75:37:0a:0d:ef:c9:a0:bc:df:fa:60:b1:cf:66:f2:63:
a6:ad:62:09:1e:19:21:1f:0a:6b:17:ee:b7:f1:b9:31:2c:06:
3d:0c:f8:bd:1d:54:6d:a1:51:60:51:0c:2e:53:cc:6d:5e:c0:
42:84:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:06 2025 by rpki-client