Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A717922CAC511EFB1F5A27A762E951A.roa
File: 3A717922CAC511EFB1F5A27A762E951A.roa (raw, json)
Hash identifier: S6sa7wmGTvY8Rri2iwNj+PO1jgX2E+Ctc69S53R2Qu8=
Subject key identifier: 36:3E:6C:47:63:09:80:36:95:47:74:86:67:12:41:42:C8:C4:FE:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F72E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A717922CAC511EFB1F5A27A762E951A.roa
Signing time: Sat 04 Jan 2025 17:56:31 +0000
ROA not before: Sun 05 Jan 2025 17:56:27 +0000
ROA not after: Fri 17 Jan 2025 17:56:27 +0000
asID: 7018
IP address blocks: 156.238.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63278 (0xf72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:56:27 2025 GMT
Not After : Jan 17 17:56:27 2025 GMT
Subject: CN=6779764f-884e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:8c:1f:97:84:05:6c:44:15:95:b1:1b:f6:
c8:b9:fe:73:6d:6a:aa:57:42:82:8c:50:d3:1b:ab:
23:cb:10:32:e4:f5:8e:76:ad:f1:87:aa:53:17:1d:
03:ae:86:2d:5e:e2:a9:29:05:7d:4d:d2:cb:87:c8:
ae:17:b7:41:12:cf:af:59:b9:ea:ab:02:60:71:76:
61:35:d3:06:86:b9:41:a6:7d:46:03:c1:9e:c2:eb:
c3:d6:76:19:83:e9:92:d9:a2:4d:2e:a1:c0:52:93:
b2:ad:96:40:56:b2:90:80:61:05:92:87:b1:ac:da:
2e:c5:16:91:bd:fd:5c:cb:59:31:b3:bc:82:71:94:
59:a9:97:ea:8f:35:a8:21:61:3e:6f:a0:b6:27:0a:
85:b8:d3:66:9d:7e:91:df:b1:aa:d8:21:e9:5b:87:
42:ed:d8:62:3b:57:12:9e:86:da:03:b7:b3:7d:49:
c1:0f:73:da:e2:ab:28:c0:3a:62:d5:58:2f:3e:23:
3a:c5:1d:f3:51:a9:98:d2:8b:37:1e:f5:4c:1b:78:
cd:7a:6c:92:31:32:b7:d1:53:84:60:f6:61:9a:4b:
a0:0c:6e:ad:29:4e:f5:13:b0:c9:04:16:64:57:35:
a5:4d:88:75:e8:56:06:27:94:e3:99:37:fa:e8:45:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3E:6C:47:63:09:80:36:95:47:74:86:67:12:41:42:C8:C4:FE:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A717922CAC511EFB1F5A27A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.120.0/21
Signature Algorithm: sha256WithRSAEncryption
50:f7:4b:3e:ea:f8:4f:37:3e:94:00:bd:89:51:51:bc:97:bf:
f1:f2:26:f6:40:85:fe:87:43:85:52:9c:45:48:b5:53:4a:33:
f8:bb:cb:cf:71:25:79:6e:31:fd:0e:7b:bc:1f:32:f3:54:a3:
8b:f8:46:68:27:77:70:d2:62:fb:79:96:19:fb:1b:7e:a5:25:
1e:7a:de:9c:34:01:fe:5d:15:e8:fc:b0:46:f1:e4:cc:8c:00:
25:43:f8:3a:0c:e7:fe:1c:8a:6a:cf:34:67:a8:e6:de:b6:24:
55:e8:cd:2d:42:c4:50:34:2a:2c:7d:9d:92:fd:ea:6c:03:54:
d5:9d:40:e2:5c:3e:a2:1a:b3:0b:f5:7c:cf:8d:6f:bb:66:f0:
c3:51:e3:08:e6:cc:1e:49:43:15:28:a1:dd:fa:c6:93:bf:c1:
89:0e:c8:4f:62:09:b6:ab:e4:50:b2:47:c3:42:29:0e:cb:c4:
46:a2:2c:85:f8:54:1c:39:21:7a:cf:b9:d1:5e:86:e8:c6:e6:
c1:e3:09:75:fd:fb:55:9a:15:d6:fa:58:27:c7:b3:88:08:c4:
48:24:b8:b5:07:ec:a7:4c:db:e7:a0:da:ce:fa:cf:25:38:54:
8f:d3:84:63:69:38:bf:f8:1d:94:36:39:5b:fa:16:de:ce:68:
da:2c:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:00 2025 by rpki-client