Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DF954BAD31011EF8807BAAF762E951A.roa
File: 1DF954BAD31011EF8807BAAF762E951A.roa (raw, json)
Hash identifier: eY0ggYigsRaC9wbN2KJh/ZgpHeG6gBIBumH+C4U8rOI=
Subject key identifier: DF:92:09:48:F8:CE:00:17:56:C4:BD:A2:9F:77:BB:15:28:54:8D:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010847
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DF954BAD31011EF8807BAAF762E951A.roa
Signing time: Wed 15 Jan 2025 07:12:45 +0000
ROA not before: Wed 15 Jan 2025 07:12:41 +0000
ROA not after: Mon 27 Jan 2025 07:12:41 +0000
asID: 395886
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67655 (0x10847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:12:41 2025 GMT
Not After : Jan 27 07:12:41 2025 GMT
Subject: CN=67875fed-7271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:2e:65:f7:12:fb:47:86:42:78:77:86:54:
2e:1d:32:d0:d6:6e:97:2b:c8:f4:fe:b7:44:7a:c0:
fe:0f:b7:4e:f7:f3:c1:dd:39:7e:eb:4b:81:f9:48:
1a:0d:7f:7f:0a:d8:a1:70:cb:75:45:9c:0e:81:10:
18:cc:0a:ab:f1:dc:d2:e5:1c:87:0a:65:e3:ee:69:
85:71:89:84:9d:1c:63:dd:23:18:d8:9d:5a:b6:06:
ed:bf:3c:da:fb:ab:87:59:3c:5e:22:7e:82:a7:77:
c7:01:69:8d:39:23:30:67:73:d5:4d:e7:80:3f:a8:
57:dc:7f:6c:29:f2:af:7f:fc:d1:1b:b1:10:02:48:
3b:d5:06:44:a8:b3:00:b5:de:df:3f:c5:fd:84:55:
56:77:9e:90:8d:37:73:fb:e9:67:ce:26:f0:59:47:
b4:d8:90:d8:5c:0b:dd:a3:bc:1f:9f:aa:63:86:28:
50:31:a2:d4:9a:36:5f:81:a2:5f:50:d6:13:1c:70:
44:49:04:88:dd:90:73:74:6c:ed:be:31:b6:23:e9:
2b:76:d3:e7:82:1e:40:16:a1:4e:02:2e:39:f9:7c:
c1:54:e8:f3:03:af:d5:5e:15:37:cb:8c:ee:45:da:
be:83:07:df:c7:06:35:33:69:70:6b:05:74:f8:e9:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:09:48:F8:CE:00:17:56:C4:BD:A2:9F:77:BB:15:28:54:8D:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DF954BAD31011EF8807BAAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:d5:75:2e:8e:ba:7f:44:1e:44:b2:3a:0a:db:87:54:c8:a7:
52:78:ae:b8:38:c5:de:fb:78:9e:96:1b:37:79:db:83:9a:58:
98:cc:4a:06:c2:1c:10:64:09:3a:4d:a5:08:01:4e:ac:56:53:
6e:b2:4d:22:69:9f:18:95:33:db:c1:eb:9d:02:95:8e:27:2e:
f2:5e:fa:4f:7c:ff:ea:fa:52:9c:e9:eb:1f:ac:ab:3f:08:39:
16:f9:ee:ba:c7:25:a6:ae:1f:32:e1:5b:a9:a2:a1:c8:42:ce:
08:55:36:5c:f4:a6:e6:03:38:90:76:de:1a:f2:f1:02:ba:c4:
3e:74:d4:80:f6:fb:a2:73:c9:90:65:96:a4:f4:20:e4:29:b2:
b6:5d:15:35:c8:ca:b4:22:61:6f:f5:13:8f:d4:d5:03:7b:ae:
6b:cb:b5:cc:ef:d7:34:c3:91:08:ed:3f:ee:1e:5a:19:c9:57:
28:2c:5d:7d:c3:81:1e:e8:0b:7e:63:a1:d0:9c:20:fc:8b:43:
0f:ad:86:eb:08:ff:30:c7:5c:52:e1:72:90:ce:fc:21:39:76:
9a:a3:e0:ab:66:8b:3a:d6:c5:02:84:b8:52:cc:00:c0:2c:af:
88:87:5e:a0:2f:78:0f:63:c9:24:67:e1:3a:52:04:b4:73:57:
5e:94:dc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:04 2025 by rpki-client