Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B7566E8CEFD11EF89932F64762E951A.roa
File: 4B7566E8CEFD11EF89932F64762E951A.roa (raw, json)
Hash identifier: 7PCsRxRIfb7Jiv9eD1zi0WfI2kD6TOunO3AbYXAzxVw=
Subject key identifier: 74:EA:FE:CA:DA:A9:D3:F2:0D:C5:5A:4A:41:85:46:E5:5B:11:13:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B7566E8CEFD11EF89932F64762E951A.roa
Signing time: Fri 10 Jan 2025 02:47:56 +0000
ROA not before: Fri 10 Jan 2025 02:47:52 +0000
ROA not after: Mon 27 Jan 2025 02:47:52 +0000
asID: 137547
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66745 (0x104b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:47:52 2025 GMT
Not After : Jan 27 02:47:52 2025 GMT
Subject: CN=67808a5c-7361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:88:fd:fa:99:df:66:18:6c:44:4e:a6:f8:
a3:9f:b4:6b:11:93:97:05:67:48:e2:6d:d3:f5:ed:
c3:73:a6:aa:71:9d:47:c7:07:d6:b9:75:74:af:4c:
eb:ea:81:c8:35:b0:13:4d:13:ae:8c:c1:0d:9a:1c:
33:ba:bc:12:9f:0e:89:65:8b:3e:8e:59:39:3e:78:
79:8d:79:91:e1:e0:d2:9b:04:77:54:6a:a3:32:60:
31:07:f7:2e:1a:62:17:7b:b7:7b:e6:27:4d:41:36:
2b:52:83:3a:98:d3:3c:4e:32:06:80:42:09:0a:10:
97:47:2e:c0:1b:31:1c:83:31:2c:34:72:07:53:bf:
3c:48:b7:5f:ce:a0:ea:9f:cf:62:6c:6f:96:1d:86:
9b:47:41:b4:08:9f:50:83:a0:ee:10:aa:e3:ff:69:
ad:8b:48:a2:81:93:25:7a:d1:c2:0e:15:fb:22:14:
15:af:e4:99:9c:bb:05:d3:a2:0a:e7:3d:f5:75:3a:
13:ee:ec:86:3e:ca:05:9c:9c:ca:c3:ca:8e:8a:bb:
26:10:18:81:81:ca:59:68:66:41:35:d1:b6:e4:86:
45:b6:97:50:e3:1f:54:c7:18:f0:f8:79:32:9a:33:
6b:9c:74:97:24:6a:e2:a3:f1:c3:ca:ad:23:d5:3c:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:FE:CA:DA:A9:D3:F2:0D:C5:5A:4A:41:85:46:E5:5B:11:13:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B7566E8CEFD11EF89932F64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:5f:c7:d0:af:ee:ed:cc:9b:bb:cc:5c:e0:3d:c5:4d:36:26:
d2:18:a1:13:d6:d2:d8:1b:89:58:31:88:0b:e3:5a:a5:af:60:
ce:76:73:b9:a7:51:b6:a2:96:af:cf:e9:0b:07:b8:dd:eb:19:
53:1b:a1:51:78:aa:a0:bb:b1:dc:87:91:0c:fe:aa:07:e7:aa:
73:8e:b0:35:2b:f7:7a:ee:60:e6:fc:6b:4b:9a:1b:ae:70:2b:
5a:b6:c6:11:3b:1c:8a:c8:e5:ae:d9:1a:c7:16:2e:17:43:5a:
09:c4:16:d5:13:22:f4:5b:0e:b1:21:6e:c0:d7:7a:fa:30:d2:
2c:07:4e:1d:f6:d9:9f:ee:a9:86:5a:2c:20:76:98:29:2c:dc:
d8:3e:37:69:85:77:c1:91:ce:c1:27:f2:dc:8d:03:b8:6c:07:
4e:a2:c6:c8:ee:28:1c:c4:03:0b:93:36:c5:39:bc:58:6f:03:
29:97:2d:b7:2e:8d:a7:b7:91:da:8c:95:f7:b3:2b:6b:a1:a8:
24:08:d5:91:90:2a:8d:6e:fa:93:b0:53:4a:b8:eb:5a:e8:ef:
46:53:a1:9a:0c:02:54:57:ba:ea:83:e8:29:fd:d0:41:7e:d7:
86:61:93:88:d0:f1:8b:7c:28:7e:f0:b0:3d:4f:17:74:98:c9:
7d:07:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:24 2025 by rpki-client