Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/470936E6C29811EF94DD558B762E951A.roa
File: 470936E6C29811EF94DD558B762E951A.roa (raw, json)
Hash identifier: R/QV4dypefMM9LDEyr2iclniE1v1tIJwGa8B4J3361w=
Subject key identifier: 65:DF:FC:7A:3A:0A:D0:43:06:69:9C:88:9D:36:8E:67:28:18:F1:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/470936E6C29811EF94DD558B762E951A.roa
Signing time: Wed 25 Dec 2024 08:14:35 +0000
ROA not before: Wed 25 Dec 2024 08:14:32 +0000
ROA not after: Wed 29 Jan 2025 08:14:32 +0000
asID: 54600
IP address blocks: 156.229.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59855 (0xe9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 08:14:32 2024 GMT
Not After : Jan 29 08:14:32 2025 GMT
Subject: CN=676bbeeb-2be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:8e:1e:8b:f1:2e:37:4b:ab:3c:92:fe:7d:
9e:e9:5a:22:fc:01:ba:2e:58:78:69:93:b9:da:a5:
ba:d2:f3:d5:27:fe:1e:94:b4:d2:ff:28:71:a5:75:
92:c9:99:9e:fc:61:05:f3:3f:5d:71:3a:cd:1a:d8:
a6:7f:ad:cc:ba:5c:b6:df:e0:62:58:cf:e3:57:32:
f2:b4:e1:0c:b5:4d:e5:b1:dc:73:aa:f5:e2:df:23:
70:61:f2:2f:6b:b0:80:18:4d:6e:c2:f5:1b:9d:37:
01:58:fb:ec:8a:cb:f8:9d:cd:cc:37:6e:9d:fc:b9:
f2:1f:df:92:a3:22:04:08:b9:f3:17:10:a7:af:36:
f9:92:75:e3:1e:98:bb:b3:a3:ce:40:59:3b:b0:75:
85:cf:5d:ad:2d:b4:b2:c9:5b:de:57:b7:78:0d:f3:
26:f2:72:1e:3d:98:37:39:34:28:e1:92:04:05:47:
a8:2f:26:e1:f4:dd:9a:bf:22:27:a1:65:0c:4c:5e:
3e:e3:9c:da:70:00:9d:aa:4c:89:1d:9c:aa:95:75:
9c:2d:55:82:b8:25:f8:b1:6c:31:34:5d:30:a6:cd:
ea:c8:1d:91:e8:7d:3d:27:56:30:26:4e:09:b4:e5:
ac:94:81:b2:a2:9f:15:13:23:bc:e1:e5:51:12:6d:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:FC:7A:3A:0A:D0:43:06:69:9C:88:9D:36:8E:67:28:18:F1:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/470936E6C29811EF94DD558B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:e9:8c:11:0a:66:fb:0f:ff:49:a9:9b:ab:82:08:35:b7:6f:
5e:21:73:e6:a4:9d:9c:c0:bb:1e:a5:07:0d:54:3c:3c:c3:f8:
ce:f7:c0:5b:5a:24:34:2f:ef:5f:98:53:13:af:ad:8b:20:23:
87:2a:bd:dc:17:6a:b5:57:55:89:ab:88:10:5d:aa:e9:9c:64:
25:9b:a9:53:b2:25:f4:62:ca:e7:83:87:91:f4:3f:b1:6a:25:
ff:20:86:64:05:b7:f8:ac:82:2a:6e:89:a4:b7:e1:84:55:56:
bc:ad:ba:8c:f3:17:b3:70:d2:a0:96:12:df:eb:a0:22:2d:f9:
ca:52:48:18:7c:70:77:5a:fb:d1:74:c1:ff:11:f1:3b:dc:62:
ad:cd:29:8c:ce:04:ec:10:c9:65:bd:01:53:86:60:1b:80:e0:
0e:cf:57:df:f6:31:52:a7:d4:74:04:70:e7:37:2e:2d:81:e5:
5d:fa:3e:78:1f:15:3b:76:29:bd:e7:52:f8:b5:fb:46:7c:86:
b6:b3:b2:d8:b3:a6:05:fb:02:ca:15:5a:e1:00:57:fb:30:6a:
d1:5e:59:17:af:cf:f5:b4:1d:91:a1:49:68:07:85:c1:6e:d7:
2c:bd:ca:5e:a3:73:30:cb:f7:c0:8a:13:17:a6:bf:54:9e:51:
0a:4c:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:17 2025 by rpki-client