Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F369A04BEA211EF87727C7B762E951A.roa
File: 1F369A04BEA211EF87727C7B762E951A.roa (raw, json)
Hash identifier: lHUsWWzfbMLaF1aUty/aYGczHhs9CKQxMi8SuodmQF8=
Subject key identifier: E6:4C:CF:0F:47:BF:43:95:7C:20:2C:51:FF:73:89:A4:4B:16:BF:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E70C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F369A04BEA211EF87727C7B762E951A.roa
Signing time: Fri 20 Dec 2024 07:14:59 +0000
ROA not before: Fri 20 Dec 2024 07:14:55 +0000
ROA not after: Thu 23 Jan 2025 07:14:55 +0000
asID: 202656
IP address blocks: 156.236.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59148 (0xe70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 07:14:55 2024 GMT
Not After : Jan 23 07:14:55 2025 GMT
Subject: CN=67651973-4324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:76:6a:52:7b:a3:93:d7:a7:55:e0:60:56:
6d:1b:cd:1b:ed:3e:f7:d9:cb:8f:fa:ad:64:2b:f9:
3b:b0:f4:3d:f7:53:cd:5d:97:06:11:b8:95:63:55:
a1:f2:1c:3a:ab:97:7f:c3:87:8b:1c:2d:7e:c2:61:
7b:4c:66:20:24:79:cf:da:ba:94:80:2b:ed:04:6d:
1e:f5:1c:67:df:c8:0f:ae:48:df:62:a9:d1:24:24:
38:ef:ec:b4:a2:67:f1:29:63:84:d1:9e:d0:27:61:
86:98:3d:a9:46:02:b4:6e:c1:a7:8c:d6:f4:82:ce:
8d:fe:c3:83:a8:c6:48:64:da:2b:ba:31:62:11:6e:
bb:63:ed:f5:3c:4b:f8:3c:dd:83:cc:bb:b0:40:47:
5a:27:23:90:53:22:6c:1b:3a:eb:a4:2c:a3:0b:1b:
2e:68:b3:0b:0f:36:e8:b1:b1:0d:e6:3a:bd:e3:7d:
a7:40:7b:c8:34:f4:0c:31:50:86:cb:81:ef:f1:72:
9d:a6:0f:cf:75:29:85:c6:81:6c:b6:b2:34:9d:1d:
f8:47:08:2f:c3:2d:a6:33:dc:2d:87:d7:30:c1:0a:
09:f7:b5:3c:e3:db:59:70:5f:aa:ab:5b:f2:af:76:
d0:ed:06:60:28:46:98:df:d4:cb:43:b9:59:81:19:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4C:CF:0F:47:BF:43:95:7C:20:2C:51:FF:73:89:A4:4B:16:BF:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F369A04BEA211EF87727C7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.106.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:5a:3c:fe:d7:b0:b7:f2:9b:72:05:ff:8d:22:ca:72:f6:bc:
dd:05:75:7f:8d:c7:4f:ae:ff:2d:67:b7:7f:3a:18:af:16:f6:
2d:9e:d6:05:53:9e:39:a7:7f:4e:06:d8:68:af:c2:89:31:8d:
03:f7:73:32:f7:f0:99:78:fe:ff:cd:5f:cc:ed:bc:bb:93:c2:
a5:13:cc:ab:22:15:03:d2:3c:85:39:3d:99:81:d4:aa:b1:6d:
3e:d0:eb:eb:4e:16:cc:b6:01:3d:d3:c6:dc:27:a2:b8:e7:44:
9b:71:9f:a8:13:cd:5d:94:18:f1:98:86:13:0b:04:4e:45:7e:
a6:c2:09:3a:2e:f3:db:41:20:2a:99:6a:dc:8e:e5:68:fb:2e:
c1:cd:02:89:bb:50:2e:f3:66:d9:9a:72:a7:4d:bb:93:59:2a:
39:63:57:5c:ad:33:8d:07:12:3c:9e:63:89:9c:62:04:73:63:
6a:f6:fe:9b:85:14:46:d5:c4:c1:d1:fa:d1:fd:4a:65:80:d2:
dc:24:73:1b:f7:c5:b2:ec:43:12:d5:53:58:e3:f2:1e:7a:dc:
8a:0c:7a:4a:00:45:e1:2b:55:3f:cc:ed:19:61:8a:ce:6b:10:
67:07:eb:05:7c:30:1a:39:44:78:ca:b9:82:eb:a3:4c:f4:70:
33:bd:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:23 2025 by rpki-client