Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3291984ACBCE11EF95987485762E951A.roa
File: 3291984ACBCE11EF95987485762E951A.roa (raw, json)
Hash identifier: /4qgsHej6HYdDbyN5lMQ4int5eaQ1e3wx9/sNGak/lw=
Subject key identifier: FE:98:97:36:AB:CC:02:8A:3C:64:2E:5A:C7:E5:F5:59:78:AE:0D:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3291984ACBCE11EF95987485762E951A.roa
Signing time: Mon 06 Jan 2025 01:33:14 +0000
ROA not before: Mon 06 Jan 2025 01:33:10 +0000
ROA not after: Mon 20 Jan 2025 01:33:10 +0000
asID: 50053
IP address blocks: 156.253.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63418 (0xf7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 01:33:10 2025 GMT
Not After : Jan 20 01:33:10 2025 GMT
Subject: CN=677b32da-c4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:a9:dd:a9:74:46:a8:56:66:99:9b:a2:72:77:
cb:d8:df:e1:4f:66:5a:b5:7b:dc:10:aa:9b:bd:3a:
ab:de:1b:30:3b:ed:e9:c7:b1:ac:45:6c:ca:51:55:
81:64:0c:ca:b7:3e:2f:c3:c7:7c:b9:22:64:6d:c9:
35:2d:76:e2:b1:82:64:a7:f5:77:e2:3e:9f:25:47:
75:fa:b9:39:de:45:1d:93:68:9d:dc:9c:34:6e:43:
3a:20:8b:37:b5:4d:a9:b6:8d:14:f9:14:0b:3f:b9:
b2:e6:c9:b6:79:64:80:0b:90:c4:36:e3:b5:92:7d:
85:20:80:5d:e7:0c:dc:fc:21:b6:2d:33:50:df:a3:
0d:50:a9:ab:b8:4f:0b:12:d1:bf:14:93:53:ed:af:
f6:58:56:d7:20:27:77:56:fe:38:b1:8a:d3:79:99:
de:75:b2:1d:d7:4d:c8:bd:90:ca:62:35:a9:ff:e6:
50:7e:4b:14:78:5c:4e:77:6b:7f:f3:27:5b:9e:a1:
77:1e:f5:8b:14:88:b9:ed:01:42:4c:90:a1:e0:3e:
f1:c8:ca:43:bc:bc:8d:18:b4:34:0f:77:4b:67:59:
9e:c0:89:3f:b9:56:b3:ac:e9:50:09:08:c4:89:33:
9e:4c:23:89:fa:81:3e:41:88:bb:44:11:91:8d:18:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:97:36:AB:CC:02:8A:3C:64:2E:5A:C7:E5:F5:59:78:AE:0D:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3291984ACBCE11EF95987485762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.223.0/24
Signature Algorithm: sha256WithRSAEncryption
24:82:3a:0d:76:54:da:3d:81:cc:ca:22:da:61:78:41:56:d4:
ae:18:66:b6:97:43:0f:1a:07:5d:f0:97:1e:09:77:d4:82:db:
0f:68:a0:4c:26:64:03:5b:40:98:5f:a5:13:2f:38:21:1a:cd:
37:08:60:67:c7:b4:7d:c5:df:2f:31:65:94:a3:e4:f5:94:84:
7c:a9:af:a4:db:28:94:ad:62:c2:0a:86:09:5d:b1:78:7f:9e:
3b:8d:31:52:9e:4a:99:ad:38:b1:2b:3f:c7:b3:6b:76:17:04:
e9:c6:9e:30:7c:f7:69:28:73:ea:6d:23:8f:7c:4e:7e:8a:c5:
02:82:9a:82:1a:af:ca:09:20:e7:e0:08:58:ed:29:8b:d8:98:
03:fa:b3:1e:81:13:fb:f4:ae:0b:85:76:c3:84:e2:06:f5:0f:
69:66:88:81:73:8d:75:a8:9b:52:7f:34:13:8b:21:22:01:d7:
4d:8c:6f:d1:40:22:c4:81:7b:0a:79:b1:05:6f:25:49:9b:a1:
7c:d3:b9:03:9b:e5:ca:35:ff:f6:fe:ac:ba:8e:6c:83:0d:3c:
98:8f:55:6c:5b:ee:3c:ce:14:8a:a1:81:0e:66:d5:44:b3:97:
46:1e:4b:fa:66:9c:42:fa:55:9e:8d:3a:9a:46:84:c0:f9:18:
1f:9b:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:15 2025 by rpki-client