Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A2504D0B49E11EFABC25E75762E951A.roa
File: 3A2504D0B49E11EFABC25E75762E951A.roa (raw, json)
Hash identifier: Ygw+3kxyy6SXJQAZUlEq339PAtA4LrIaLNq9l83/K4A=
Subject key identifier: C3:EC:D2:9B:F3:C9:06:57:60:74:DE:B2:0A:E6:9D:F0:53:27:26:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E094
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A2504D0B49E11EFABC25E75762E951A.roa
Signing time: Sat 07 Dec 2024 13:21:55 +0000
ROA not before: Sat 07 Dec 2024 13:21:51 +0000
ROA not after: Wed 15 Jan 2025 13:21:51 +0000
asID: 138915
IP address blocks: 156.244.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57492 (0xe094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 7 13:21:51 2024 GMT
Not After : Jan 15 13:21:51 2025 GMT
Subject: CN=67544bf2-b98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:06:c6:93:c1:c2:8c:d4:30:d1:bb:c8:8c:
0e:16:d5:4d:39:7b:ed:36:c1:f0:17:b5:12:7c:46:
29:ef:37:ca:04:43:fa:06:76:c6:3f:f1:47:20:c5:
d8:42:78:27:a5:c2:05:cd:3e:fd:f7:c2:65:07:d5:
07:80:8e:5d:c7:c0:43:53:0e:4a:09:48:7b:20:eb:
aa:46:dc:15:ab:cf:bb:0c:48:11:41:f1:f5:9b:65:
a2:52:63:44:13:56:6e:ce:d1:1d:25:33:d5:34:14:
5c:57:4f:c8:1e:b8:cf:f3:75:c9:29:25:8f:ac:8d:
32:e9:c5:83:2d:b5:ba:33:11:fc:ab:17:1e:7d:b6:
23:1a:1f:6f:ed:a4:a8:4f:20:d3:9a:77:7e:d5:95:
fd:36:41:b6:91:ec:cf:b2:72:a6:27:82:f1:39:4e:
50:c5:38:40:8e:b8:75:26:83:fb:25:12:b3:c6:d6:
68:ed:fd:6b:1e:cd:e8:16:7d:7f:76:c9:bb:ae:86:
c0:a2:47:53:29:bc:59:1b:75:98:c4:91:97:9e:df:
a6:4d:d7:6b:8b:43:ea:b3:82:50:50:94:93:1e:60:
35:fe:ac:40:0e:e9:d4:94:00:3c:af:da:2d:c7:4a:
49:11:2d:d8:49:6d:c6:5c:ed:14:3d:ad:80:47:7d:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EC:D2:9B:F3:C9:06:57:60:74:DE:B2:0A:E6:9D:F0:53:27:26:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A2504D0B49E11EFABC25E75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7f:7d:cb:a3:95:70:fc:77:58:22:21:f4:03:cd:ab:36:5d:
d0:31:45:a1:7a:40:aa:64:f0:93:47:86:19:e3:dd:54:36:9d:
27:b6:f5:c3:2b:fc:3f:f0:ec:a9:1d:d2:44:59:43:e8:68:03:
c6:2f:1b:e5:29:ba:58:40:4b:73:10:38:f7:12:9c:89:c2:31:
1c:91:ae:15:56:56:1d:27:11:d6:01:27:1c:70:26:0c:0d:db:
f7:b9:c1:ca:aa:e6:34:63:0c:52:83:81:be:21:9f:d0:84:e7:
29:ef:e7:b8:f8:1a:1e:d4:a8:2a:8b:da:8c:b3:b6:83:4d:e3:
06:fb:af:7a:b5:3c:d8:84:2b:07:e0:4e:9d:37:0b:82:a1:c6:
84:60:e9:6f:ff:b1:4b:87:87:48:b8:21:e6:23:bc:77:df:12:
d8:7d:79:88:b3:27:d6:70:a1:b0:72:b3:94:6a:25:5a:90:28:
d3:c9:83:34:5e:c2:c5:d2:d8:7a:d9:df:de:95:60:59:b0:b9:
c2:c1:25:21:32:b1:6f:5a:43:2f:01:17:2b:61:16:5e:0c:45:
cb:52:bc:90:ed:bd:61:54:91:b9:eb:8a:97:ab:d3:c7:e1:00:
42:cd:cf:1f:e7:ab:b8:95:74:17:67:78:79:eb:df:61:0c:a2:
df:77:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:13 2025 by rpki-client