Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337B21DACE5E11EF9C15176F762E951A.roa
File: 337B21DACE5E11EF9C15176F762E951A.roa (raw, json)
Hash identifier: HEckZCuBn7eDLuXm80Eh3dJebuJNay6UXFc438NrkI4=
Subject key identifier: A7:7F:5F:F6:04:55:D7:1C:1D:B2:CC:8F:71:7D:C7:11:3A:CE:14:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010304
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337B21DACE5E11EF9C15176F762E951A.roa
Signing time: Thu 09 Jan 2025 07:49:06 +0000
ROA not before: Thu 09 Jan 2025 07:49:02 +0000
ROA not after: Thu 16 Jan 2025 07:49:02 +0000
asID: 17561
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66308 (0x10304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:49:02 2025 GMT
Not After : Jan 16 07:49:02 2025 GMT
Subject: CN=677f7f72-6cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:23:e7:d5:5a:68:08:d4:96:a5:8d:1c:f0:
94:71:ad:fe:68:e2:c4:3f:31:2a:1c:c5:53:ff:ab:
67:2c:02:36:2a:9a:23:4e:40:33:09:fb:08:27:39:
ce:b3:37:b4:46:ac:29:6b:53:b1:25:38:1d:e5:a4:
56:31:ab:4c:39:77:3e:81:ad:70:da:e1:d0:b6:cc:
24:ed:7d:f6:75:17:b6:38:90:5c:23:e0:33:bd:18:
74:25:c9:93:16:48:f1:cb:5a:ea:63:14:3e:27:fa:
3c:5e:f4:8b:e5:37:c4:03:29:ee:95:e9:57:3b:f2:
b6:31:b8:10:b9:1b:2f:fa:d3:18:02:1e:2c:78:8f:
83:a4:10:41:3c:02:11:55:1e:96:c6:b6:8d:0c:07:
98:60:31:89:9e:5e:54:b7:0a:dd:08:2d:5a:5e:ab:
66:bd:24:9b:16:a6:52:37:60:c1:9c:23:6d:f2:4c:
f3:a0:36:5e:d4:d2:64:94:c6:a8:8d:d5:ab:47:a8:
04:6a:ad:e8:73:9c:8b:e0:05:15:19:d1:81:80:53:
56:ab:45:e5:be:d7:18:4f:43:c7:42:ab:31:f6:e7:
48:73:4a:60:dd:5d:17:86:bf:41:fa:44:c8:59:f2:
11:2f:28:0a:df:ff:c7:69:ca:c5:22:c7:a7:73:0c:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7F:5F:F6:04:55:D7:1C:1D:B2:CC:8F:71:7D:C7:11:3A:CE:14:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337B21DACE5E11EF9C15176F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:fd:11:27:90:b1:70:0b:f6:2b:dd:3e:50:6a:ab:68:bf:8d:
95:48:4d:6b:97:a8:88:93:65:75:e3:63:e9:7a:cd:2d:fa:cd:
10:ce:bc:43:0e:41:5e:a9:bf:ad:e4:e0:66:1d:00:45:65:8a:
bd:97:7c:6f:3f:0a:74:a3:d5:e1:d2:7c:11:d8:d4:41:bb:92:
7b:cd:4f:ca:1a:57:7a:83:0c:5c:51:d5:3b:7c:5b:41:94:ca:
31:d9:c9:0e:46:de:12:a4:5c:db:5a:07:fe:03:45:1d:e8:3f:
45:f0:80:36:78:fb:4f:a3:1b:f5:b7:fc:d6:7d:6d:44:74:21:
71:c6:ed:b0:0b:66:69:df:05:43:e1:4e:90:4b:6b:bd:61:e3:
28:91:9c:1e:93:95:b4:e6:e7:20:48:6e:d7:de:a0:a2:e0:49:
c8:54:86:cd:03:80:ff:5e:83:c8:ee:83:d6:35:fb:50:23:c0:
51:9b:66:d8:fb:6c:9c:d8:93:83:4c:93:43:19:7d:0e:90:af:
3a:8f:00:ff:8e:c8:67:b0:b6:73:8a:77:a7:d9:ee:b5:6f:cd:
5e:20:86:0b:78:b9:57:1e:21:b0:a4:ee:d1:b2:f2:c9:53:6a:
f0:41:07:85:33:32:03:29:77:ea:ea:43:98:30:1d:a0:a1:36:
4a:2d:12:05
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQMEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MDc0OTAyWhcNMjUwMTE2MDc0OTAyWjAYMRYw
FAYDVQQDEw02NzdmN2Y3Mi02Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxNkj59VaaAjUlqWNHPCUca3+aOLEPzEqHMVT/6tnLAI2KpojTkAzCfsI
JznOsze0Rqwpa1OxJTgd5aRWMatMOXc+ga1w2uHQtswk7X32dRe2OJBcI+AzvRh0
JcmTFkjxy1rqYxQ+J/o8XvSL5TfEAynulelXO/K2MbgQuRsv+tMYAh4seI+DpBBB
PAIRVR6WxraNDAeYYDGJnl5UtwrdCC1aXqtmvSSbFqZSN2DBnCNt8kzzoDZe1NJk
lMaojdWrR6gEaq3oc5yL4AUVGdGBgFNWq0XlvtcYT0PHQqsx9udIc0pg3V0Xhr9B
+kTIWfIRLygK3//HacrFIsencwxeowIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKd/
X/YEVdccHbLMj3F9xxE6zhTFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzdCMjFEQUNFNUUxMUVGOUMxNTE3NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQB//REnkLFwC/Yr3T5Qaqtov42VSE1rl6iIk2V142Ppes0t+s0QzrxDDkFe
qb+t5OBmHQBFZYq9l3xvPwp0o9Xh0nwR2NRBu5J7zU/KGld6gwxcUdU7fFtBlMox
2ckORt4SpFzbWgf+A0Ud6D9F8IA2ePtPoxv1t/zWfW1EdCFxxu2wC2Zp3wVD4U6Q
S2u9YeMokZwek5W05ucgSG7X3qCi4EnIVIbNA4D/XoPI7oPWNftQI8BRm2bY+2yc
2JODTJNDGX0OkK86jwD/jshnsLZzinen2e61b81eIIYLeLlXHiGwpO7RsvLJU2rw
QQeFMzIDKXfq6kOYMB2goTZKLRIF
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:33 2025 by rpki-client