Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35F3674EC6C811EFA81E269C762E951A.roa
File: 35F3674EC6C811EFA81E269C762E951A.roa (raw, json)
Hash identifier: jpTv8V2u0zdpC96WKspY4pfFaTEfViSnttTw54VRzMA=
Subject key identifier: 31:49:53:BA:C5:D1:A1:1E:1B:DF:7F:44:43:52:8B:81:B4:77:0D:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F261
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35F3674EC6C811EFA81E269C762E951A.roa
Signing time: Mon 30 Dec 2024 16:07:47 +0000
ROA not before: Mon 30 Dec 2024 16:07:44 +0000
ROA not after: Mon 20 Jan 2025 16:07:44 +0000
asID: 60223
IP address blocks: 156.253.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62049 (0xf261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:07:44 2024 GMT
Not After : Jan 20 16:07:44 2025 GMT
Subject: CN=6772c553-c5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:ff:a5:da:c4:79:32:20:39:33:d0:5d:97:
5f:ff:d1:90:f5:bb:42:ad:87:ba:71:07:a6:02:de:
81:22:9d:c9:0b:2b:59:34:28:7e:b2:49:14:be:74:
c9:54:0e:65:56:e9:3d:54:8a:55:f9:88:1a:0e:1a:
cb:f9:99:a7:6e:6c:fd:66:61:7f:ac:e7:ae:b3:1f:
5d:2d:22:37:ef:ae:5c:5d:a4:46:26:b3:1a:77:51:
67:7b:88:4b:9a:30:df:53:41:aa:f8:97:d4:1d:53:
e6:8b:4d:12:62:68:88:d4:4d:f3:36:1f:36:4c:8d:
1d:15:7d:c1:f0:a6:8b:5d:f6:26:9a:78:43:fd:1f:
71:88:d3:f5:01:50:d5:b1:35:7e:4e:e6:60:d7:ea:
03:aa:e9:fe:1e:2a:c2:db:47:82:9a:74:47:53:90:
45:7e:f1:1b:ec:52:00:0f:20:8d:e2:96:d5:dd:1d:
38:9c:71:dc:2f:95:0d:2b:9d:36:f5:2c:42:41:cd:
1f:c0:1c:10:30:60:cc:e9:ec:17:7f:0c:f4:85:b0:
b9:8b:9b:0b:54:94:de:5b:d1:c9:ae:9f:e0:b2:82:
69:02:eb:87:71:44:df:f4:86:df:38:3d:b7:d4:c0:
07:1e:6b:71:ef:7a:2c:ad:34:92:f9:9a:a7:6c:82:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:53:BA:C5:D1:A1:1E:1B:DF:7F:44:43:52:8B:81:B4:77:0D:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35F3674EC6C811EFA81E269C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8b:9f:e2:c3:80:6b:b0:49:f1:61:ee:5a:fa:0d:90:0a:17:
05:1b:5b:f1:d7:b5:4e:9f:d6:5b:45:07:92:7f:ff:06:83:1f:
c3:02:d8:a7:b7:da:2b:48:37:98:9f:61:3c:f2:b6:9a:e9:2e:
63:f2:c0:0d:c0:83:cd:00:f9:08:da:51:30:cb:0b:ce:01:3c:
78:7b:76:17:f5:79:11:ba:ec:b5:f1:0f:29:14:13:e0:83:aa:
ab:be:05:b0:e4:50:14:3a:c0:e6:65:70:9a:0b:92:77:74:b8:
8b:6b:21:f6:55:a9:1f:94:50:1d:fe:9c:9d:1f:18:e3:3b:ac:
79:e7:38:d4:c7:28:af:d2:ea:03:0d:8c:f1:61:d2:06:82:41:
ad:fa:bb:c0:6a:19:df:18:ae:4e:96:fb:65:8a:0a:78:16:a3:
84:83:66:f7:c2:62:fe:58:52:52:af:93:ce:b7:34:58:7c:21:
a5:0c:58:8a:5d:b2:b7:27:4e:c0:5d:27:d9:d4:c9:84:25:50:
c6:a4:93:a6:f0:68:73:4f:ed:cd:c4:72:c3:28:48:ac:e3:12:
6f:7f:64:4c:20:19:47:22:14:0d:ab:4d:df:06:18:99:2c:fc:
86:19:29:e0:f2:e1:3d:69:48:60:81:fd:89:27:97:03:5e:b1:
03:6e:c4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:45 2025 by rpki-client