Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CB851DECF0111EF8D350280762E951A.roa
File: 3CB851DECF0111EF8D350280762E951A.roa (raw, json)
Hash identifier: b/vrNTdWI42dyEQPmCbqUQ0GW6puVUhUcSu38WlKwuk=
Subject key identifier: BC:DD:50:DC:C9:EC:0B:2B:73:0E:AA:B4:9F:C3:24:7E:A0:4D:8B:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CB851DECF0111EF8D350280762E951A.roa
Signing time: Fri 10 Jan 2025 03:16:09 +0000
ROA not before: Fri 10 Jan 2025 03:16:06 +0000
ROA not after: Mon 27 Jan 2025 03:16:06 +0000
asID: 62468
IP address blocks: 156.245.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66773 (0x104d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 03:16:06 2025 GMT
Not After : Jan 27 03:16:06 2025 GMT
Subject: CN=678090f9-7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:23:ae:ce:b8:c2:bc:fa:73:f5:06:25:4e:
95:d9:c1:9d:9d:3c:30:f9:8f:b4:72:38:b7:b0:00:
d3:f7:93:f4:de:5f:6f:3c:9e:e4:65:23:3d:f5:06:
9f:17:11:4d:25:0c:ac:a0:8c:4c:41:2e:56:00:a2:
4b:14:50:2f:2d:0d:72:fe:4a:c3:08:b2:07:63:68:
96:d3:27:86:eb:6c:ac:76:a6:59:8e:0f:35:41:61:
04:16:70:50:66:e3:95:c0:f9:16:0d:60:fc:a0:0f:
ae:66:cd:5b:10:0a:4f:15:ba:2c:c8:c8:d9:af:ec:
a9:4d:8f:f6:25:86:24:3e:45:f6:57:8c:14:c0:bf:
a8:94:4c:23:4d:31:7b:c4:bc:f8:55:c6:f0:cb:25:
d9:b6:fc:d4:a5:2e:a7:9a:99:92:e5:81:f5:6c:fb:
c3:15:83:98:ee:d0:f8:92:33:80:1b:09:73:3b:16:
aa:1c:9b:82:32:4d:0f:e5:bc:d7:0d:ab:8d:1d:91:
a4:4a:26:9e:48:9f:14:38:30:3f:41:4a:f1:63:29:
d6:20:e3:2f:75:81:2c:05:a0:99:59:ff:c4:0b:33:
2f:6e:81:c8:bc:af:1c:ca:fe:3c:0b:85:39:d1:d5:
d8:08:31:e5:2a:b2:e6:33:62:c2:29:d7:32:57:9c:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:50:DC:C9:EC:0B:2B:73:0E:AA:B4:9F:C3:24:7E:A0:4D:8B:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CB851DECF0111EF8D350280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.210.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bd:e4:16:91:10:a1:69:c7:79:61:4d:bd:3c:10:e8:cd:97:
4d:e8:42:e8:7c:41:52:31:94:fa:51:6f:a2:60:da:35:f7:3c:
03:1f:b2:19:fb:bb:19:27:ab:f7:03:76:35:bd:da:51:96:96:
b9:c7:fa:49:4e:23:18:75:90:d0:d5:df:56:bc:63:76:cf:70:
60:9f:ad:ae:81:8d:33:40:65:52:ef:67:3e:d8:31:4e:8f:02:
36:d9:39:26:92:2a:a9:a6:79:43:85:41:3d:63:1d:7b:37:d7:
d9:4f:df:24:21:81:e6:e5:84:a1:d1:c3:53:67:3e:4e:87:5e:
23:8a:65:af:72:8d:6c:5a:79:93:cc:27:fd:78:bb:5d:9f:d2:
36:60:94:62:51:79:db:a1:08:f8:33:6a:31:90:9b:a9:56:ff:
42:9a:33:1a:01:04:14:c7:88:32:db:25:3b:7d:ac:f7:72:3d:
8d:04:f8:f3:33:6c:05:a6:92:5b:f4:29:e9:bf:96:f7:42:58:
4d:cf:6a:99:84:06:73:7f:45:74:06:57:f1:ef:f0:e2:46:20:
c8:c8:f0:2c:d4:08:09:d1:a1:f5:6a:36:e9:5d:a0:76:8b:16:
e8:7d:0a:32:4b:96:30:ca:9d:ca:bc:06:14:fd:2f:9d:34:f5:
29:d6:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:20 2025 by rpki-client