Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26608940C6CA11EF90E123A8762E951A.roa
File: 26608940C6CA11EF90E123A8762E951A.roa (raw, json)
Hash identifier: WvhuLYRlZ7Fhacdorx3ddbtoDLwqruftMRTV+SY87qE=
Subject key identifier: 88:85:9F:C8:A6:27:84:A4:2F:08:1F:EC:81:8B:B1:DC:C4:78:E6:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F26F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26608940C6CA11EF90E123A8762E951A.roa
Signing time: Mon 30 Dec 2024 16:21:40 +0000
ROA not before: Mon 30 Dec 2024 16:21:36 +0000
ROA not after: Fri 31 Jan 2025 16:21:36 +0000
asID: 205125
IP address blocks: 156.255.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62063 (0xf26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:21:36 2024 GMT
Not After : Jan 31 16:21:36 2025 GMT
Subject: CN=6772c894-a24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:b3:0c:95:00:02:d1:19:f5:b1:29:b8:0b:
f2:bc:ce:b2:3f:de:f9:1d:91:a0:2d:20:1f:48:f5:
2d:8c:6b:49:cd:61:da:13:9b:b7:fb:c7:b6:fa:63:
f9:51:f9:b7:10:c9:9d:10:d2:fe:fb:1e:f5:0e:7d:
29:f9:f6:9a:aa:bc:25:37:88:f9:ce:b2:99:18:df:
66:88:13:fb:64:c7:2a:e9:cd:4f:ed:d4:4a:90:e5:
b5:7f:97:78:44:20:72:c7:c7:00:ed:d3:2c:8b:5f:
08:fc:dc:0b:51:c4:ea:62:8e:3c:bc:36:22:54:ca:
af:ca:f8:99:02:1e:5e:ee:37:a1:34:17:2c:0f:23:
9e:ea:8f:b1:a9:ec:88:3d:e8:1e:77:89:93:8d:5f:
0f:39:16:9b:f4:c4:db:f3:92:c1:c6:7e:49:bb:9e:
61:f5:60:7e:4d:b2:81:8f:23:e8:fa:2a:6a:76:58:
1f:c0:3b:a0:d0:9c:9b:32:f7:a9:dd:6a:62:a9:48:
42:6f:58:cf:b4:5d:48:fc:d7:71:c3:50:15:45:4f:
b2:6f:57:46:7a:16:8e:7e:15:b4:85:c2:e7:f4:0b:
52:5c:4f:9e:8e:bc:b3:a1:d2:f5:0b:2d:ea:55:aa:
42:fc:08:6a:89:94:37:04:88:27:dc:d9:81:2f:9f:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:9F:C8:A6:27:84:A4:2F:08:1F:EC:81:8B:B1:DC:C4:78:E6:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26608940C6CA11EF90E123A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:39:bf:a6:ea:72:6c:7b:d8:48:23:1b:ad:5f:30:a8:a1:32:
cc:a0:e4:a9:1c:5d:ce:bc:5e:14:c8:81:5b:43:3d:7d:c4:65:
01:6a:c7:20:30:bc:45:77:30:b7:50:a7:2c:25:56:52:d0:65:
80:d5:38:88:e0:2b:04:e1:46:d5:a9:78:be:8b:83:cb:e2:81:
44:39:f4:5a:7c:61:c1:49:51:5f:47:6c:c5:4a:80:42:f9:48:
17:00:48:6b:b5:03:42:d6:80:7f:b6:ea:04:58:bd:d1:85:ef:
60:83:ca:24:98:d8:07:2c:50:f9:a8:94:f2:fd:b4:28:cd:9f:
4c:9f:42:d5:55:70:82:59:cb:2c:5c:df:88:e7:f7:7a:51:7e:
4d:18:ea:f1:00:94:b5:3e:df:1b:d3:f0:ca:f3:4b:4c:f6:27:
6c:d1:e1:2a:90:e9:8c:53:53:b0:20:ac:dc:eb:bd:4b:da:4f:
5e:b1:00:e6:34:1e:96:86:4b:c6:dd:09:eb:15:a3:6b:f5:e9:
e3:43:e3:8c:da:95:63:93:97:e6:67:b7:37:0c:6e:2f:74:15:
0e:d9:7d:e3:02:f1:35:aa:4b:f0:5d:3c:29:d2:e0:2c:8f:79:
42:c0:1e:48:ee:4f:85:f8:7a:5c:0b:f6:3b:c7:3a:ef:2c:78:
57:3c:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:41 2025 by rpki-client