Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FC2509CCE7F11EFBF1B51BF762E951A.roa
File: 2FC2509CCE7F11EFBF1B51BF762E951A.roa (raw, json)
Hash identifier: ypA2QezCiv+TipRpRkqclvWGou0+ZTLD+ZDTH/JIgOs=
Subject key identifier: 58:8D:86:12:09:EF:CC:C2:B5:68:D7:99:F5:F5:D5:E8:A6:D1:63:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010386
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FC2509CCE7F11EFBF1B51BF762E951A.roa
Signing time: Thu 09 Jan 2025 11:45:13 +0000
ROA not before: Thu 09 Jan 2025 11:45:09 +0000
ROA not after: Wed 22 Jan 2025 11:45:09 +0000
asID: 7018
IP address blocks: 156.246.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66438 (0x10386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:45:09 2025 GMT
Not After : Jan 22 11:45:09 2025 GMT
Subject: CN=677fb6c9-148a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:0e:b1:c7:fb:e6:81:bf:85:ab:8c:a2:3d:
68:41:97:ba:a6:7d:dd:82:6d:ad:e2:09:b2:7e:d0:
b9:8a:80:62:55:26:ad:e8:4f:c4:f1:43:df:6e:65:
d0:e6:9b:23:67:2c:e7:5b:85:f3:db:81:b6:5e:d7:
5b:47:ad:89:c4:bf:70:51:35:b6:5a:d9:8a:37:c0:
1e:da:7b:d8:73:94:2b:ff:23:3a:5c:67:6e:4f:b0:
de:5f:f1:ec:28:d5:bc:f5:ce:38:e8:67:0a:80:32:
5e:bb:21:da:18:d9:05:59:0d:2b:9e:91:6f:1f:ed:
2a:dd:6a:f9:62:83:94:16:7e:c2:01:d3:32:ab:aa:
3a:39:a9:aa:d3:1a:42:6f:00:ba:17:7b:18:74:71:
75:ac:42:c3:88:dd:84:97:e4:6f:01:bb:08:5a:d3:
4f:d3:12:f1:11:bc:64:cc:ce:14:29:c0:4e:59:4e:
10:fc:c6:98:ab:28:88:2d:8c:33:f9:91:c3:86:61:
89:8e:e9:5c:51:f2:a3:0e:df:d4:8a:f4:be:bd:de:
50:c5:86:99:38:94:6d:6f:44:e1:de:bf:5f:ee:fd:
85:0f:54:ff:bf:4d:03:07:2e:13:90:d7:05:61:ef:
2e:1a:3a:ab:9a:dc:52:e7:4a:dd:92:29:21:f2:ef:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:86:12:09:EF:CC:C2:B5:68:D7:99:F5:F5:D5:E8:A6:D1:63:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FC2509CCE7F11EFBF1B51BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.26.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:a0:d7:63:2c:97:c9:e2:ca:96:d7:68:fd:9d:8e:f2:b7:8a:
b5:c6:30:a9:c3:b2:77:e7:a4:70:d6:a9:e6:4b:c6:f4:40:bc:
d3:b5:e0:fa:24:17:71:39:e7:b1:c7:13:91:52:d2:c0:0a:f3:
6a:22:1f:5b:33:4a:df:0a:ba:47:01:2d:1a:87:59:69:13:0e:
f9:dd:18:9f:7e:5d:21:4c:a4:90:44:c0:c0:61:16:10:53:6b:
28:70:31:ba:f8:46:95:9c:d1:fc:2a:7d:51:76:f3:16:f7:4e:
b1:5e:06:94:0c:f5:01:69:b3:8a:0b:78:2c:91:e1:22:84:57:
cf:ab:25:73:e1:7b:11:f2:cb:34:26:4c:91:97:bf:5d:1d:74:
12:30:29:4c:35:01:1b:04:8e:fc:8f:f1:c5:27:67:58:1e:dd:
9b:23:ad:e4:72:74:24:6c:b8:e9:99:97:4c:1d:f6:15:6b:38:
62:98:b7:92:ec:a4:1d:c1:b7:8c:e2:91:e5:e5:de:a9:52:cd:
49:42:89:10:2d:03:49:08:50:a6:60:8e:4e:ba:0c:b4:85:2d:
d6:b9:3b:7f:0d:f4:9c:9d:ed:a5:42:55:23:07:0a:6a:54:fd:
2f:89:cf:a1:64:b7:16:27:ba:55:f0:dc:33:bf:13:09:b2:07:
09:0f:e7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:08 2025 by rpki-client