Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484AB53ACE8111EFB44D3D4E762E951A.roa
File: 484AB53ACE8111EFB44D3D4E762E951A.roa (raw, json)
Hash identifier: 2ftT2Li8VX/mEVtthXoEN/3QKWCPnRZU2bugUfnPMsg=
Subject key identifier: 08:65:8C:D0:1B:5B:AB:0F:1F:93:2B:B8:94:96:66:0E:5D:36:1F:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484AB53ACE8111EFB44D3D4E762E951A.roa
Signing time: Thu 09 Jan 2025 12:00:13 +0000
ROA not before: Thu 09 Jan 2025 12:00:09 +0000
ROA not after: Wed 22 Jan 2025 12:00:09 +0000
asID: 22773
IP address blocks: 156.249.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66469 (0x103a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:00:09 2025 GMT
Not After : Jan 22 12:00:09 2025 GMT
Subject: CN=677fba4d-ac04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:fb:6e:5f:7c:e7:06:fc:87:c5:8b:d0:ea:
08:97:f3:b0:19:ed:4c:ce:2f:8e:55:7c:8d:89:e2:
86:ac:c1:fc:93:d5:8a:48:3e:bc:5b:a5:2a:4a:a8:
25:6a:95:3c:7d:ae:cc:d9:52:ee:b1:fc:9d:5b:6a:
f0:71:83:7b:ec:7b:1b:40:93:51:31:74:b5:ad:32:
a0:e5:64:4e:75:78:35:9c:ab:36:6c:bb:66:7a:c3:
f0:58:80:13:6b:23:9e:af:58:ef:cc:02:6d:ef:d7:
84:5f:6c:c0:1d:e5:d7:64:40:e2:d4:34:30:e1:85:
ec:18:0f:02:b1:5a:c3:9a:73:ac:80:1e:0a:a1:20:
91:97:6e:ab:7d:50:06:57:b3:65:e4:f0:0c:29:87:
3d:90:43:1f:2a:15:42:ff:4c:96:41:f2:52:ca:93:
7c:c9:fa:a4:25:17:f8:e1:0e:da:78:05:dd:a5:6b:
e3:87:ab:cb:11:85:5a:3e:16:1b:b6:78:50:94:1b:
8c:f0:7e:bc:58:9f:fb:bf:f7:48:9e:8f:e8:93:39:
cd:88:a5:1a:f1:28:66:c9:35:e5:71:ef:77:08:5e:
f2:72:2b:66:37:8b:33:98:ba:c7:04:ae:8b:8b:c2:
f3:64:fa:01:f9:6d:38:a3:20:64:a8:e5:0d:a0:21:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:65:8C:D0:1B:5B:AB:0F:1F:93:2B:B8:94:96:66:0E:5D:36:1F:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484AB53ACE8111EFB44D3D4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:ca:1e:7d:66:31:75:5e:fe:8b:49:98:64:f7:25:f0:53:0d:
3a:d9:c6:71:53:af:e9:48:9b:9d:a6:d0:f8:fd:a6:c7:d5:82:
e5:cd:fd:f3:f4:62:ec:cc:78:a3:2a:e5:48:ac:81:f3:51:44:
15:95:9e:fb:ae:93:88:fe:72:d6:85:8a:cf:74:da:32:59:91:
f2:07:d2:e6:f7:a5:02:c9:ef:81:2c:b0:4e:dc:f6:0c:3d:12:
f9:78:6f:aa:c4:6b:21:e4:2b:29:70:e0:0d:07:a3:be:d8:76:
13:5a:57:0a:3b:25:c0:4c:e1:de:c8:ef:84:46:f8:23:e9:e7:
3e:fc:ee:96:a3:5e:47:3f:3c:7c:13:e1:c8:93:9a:c2:03:ee:
82:a6:88:f6:a3:af:09:c4:d3:7c:3a:3a:a8:ab:d3:75:9c:76:
1e:66:56:2a:c2:79:58:af:ce:97:08:de:8f:d2:d0:10:26:de:
87:75:e6:bb:ae:45:7a:db:dc:c6:e0:b4:af:3b:a2:4b:3d:b2:
94:1a:84:ae:64:85:a7:0b:1e:e1:8c:0b:6b:65:ec:83:8d:58:
04:66:3e:59:b6:18:d8:79:1b:82:e5:26:1f:ff:d5:12:68:dc:
6c:85:c4:7d:39:4d:a6:8a:d5:51:74:57:8c:00:5c:a9:47:57:
04:96:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:55 2025 by rpki-client