Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A89160CBEB11EFA01FEB4E762E951A.roa
File: 17A89160CBEB11EFA01FEB4E762E951A.roa (raw, json)
Hash identifier: KlqnkoSTNRWvDbUCQ8K5MVTnD+21VJ+HTgJzOjgEgCY=
Subject key identifier: 33:D0:30:69:23:01:14:B7:8B:7C:E6:55:86:47:58:3E:DC:24:78:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F824
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A89160CBEB11EFA01FEB4E762E951A.roa
Signing time: Mon 06 Jan 2025 05:00:05 +0000
ROA not before: Mon 06 Jan 2025 05:00:01 +0000
ROA not after: Thu 16 Jan 2025 05:00:01 +0000
asID: 135377
IP address blocks: 156.232.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63524 (0xf824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 05:00:01 2025 GMT
Not After : Jan 16 05:00:01 2025 GMT
Subject: CN=677b6355-dc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:01:93:60:c9:ae:2e:44:55:08:c5:a1:24:
17:fb:ee:e1:ad:40:2d:8f:56:5c:ca:c9:fe:92:ff:
cb:54:65:c1:ea:f7:c6:86:95:01:a8:f3:9c:64:17:
b9:77:1f:ab:a5:12:f3:0c:80:3a:da:bb:70:0d:f4:
ac:20:7b:10:5d:88:94:f3:4c:4b:e1:9d:32:96:82:
1c:95:57:b0:d9:8e:e0:b7:8d:ce:8b:70:1e:31:58:
38:7d:ba:c3:65:e0:93:f5:3f:e0:11:56:b6:d7:45:
5e:11:50:14:0e:76:35:d5:8c:ea:24:d2:cb:2c:45:
98:67:40:3f:c3:9b:93:8b:34:3a:16:6f:5c:87:64:
5f:c4:34:33:4c:af:33:09:a4:b7:14:09:eb:6f:0e:
e5:01:63:56:0b:ad:20:d0:0c:69:86:fe:bd:6f:9e:
79:ec:8b:33:a9:c8:1f:a4:94:06:75:c7:e1:b9:5c:
9d:99:fb:cf:d6:6d:eb:ec:d4:4f:01:34:11:ca:d0:
7e:a8:37:b2:cf:1b:31:dc:0e:f6:a3:ce:a7:4c:af:
93:ed:90:b0:ed:b4:a1:b6:b1:4d:ed:9a:98:26:d1:
88:57:65:15:53:99:0d:1e:3e:ae:05:da:52:67:48:
33:4d:03:12:47:bf:b2:e7:5d:0b:f9:c8:a4:f3:f2:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:30:69:23:01:14:B7:8B:7C:E6:55:86:47:58:3E:DC:24:78:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A89160CBEB11EFA01FEB4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:c7:4f:c1:6c:57:8a:9b:16:4f:33:75:c8:e5:40:fd:86:7a:
74:21:b3:10:00:48:5e:f6:3a:87:af:27:d4:30:ec:a2:dd:13:
5b:98:b9:5b:b1:e1:c6:dc:f2:61:27:59:5d:63:ad:fd:7d:9e:
97:ef:71:40:20:20:29:14:18:91:b7:ba:18:b1:7c:a3:2f:77:
dc:08:e7:e8:23:33:f7:5d:07:05:ba:34:5f:20:4b:e3:29:08:
89:72:69:fd:3a:06:29:9c:68:63:72:b7:a3:7b:06:4f:70:ae:
6c:c8:e6:f0:9f:3d:1f:d8:2a:a1:5c:d5:de:a9:01:c9:45:fd:
d4:65:a4:f7:c7:50:c6:c4:5b:42:3a:63:c6:9a:93:82:c8:8f:
05:8d:b2:75:07:94:c7:44:72:cd:ef:4f:67:3e:1a:a0:9d:60:
97:a1:2c:f6:e3:38:e3:b4:27:9c:9d:a8:93:9e:34:51:5b:93:
10:3b:d4:eb:2c:31:58:f7:44:fc:72:d4:5d:b8:1e:69:b4:f3:
0e:f6:28:bf:3f:dd:53:92:b5:d9:ca:6c:dc:c9:68:99:87:fb:
25:ad:66:33:16:57:75:9d:77:50:be:06:5d:e1:d9:80:ed:33:
72:fd:96:65:89:13:fa:b4:8b:72:4e:d0:22:66:89:62:7e:b5:
98:cd:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:29 2025 by rpki-client