Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C86DF4C05B11EF9E0F5A4E762E951A.roa
File: 54C86DF4C05B11EF9E0F5A4E762E951A.roa (raw, json)
Hash identifier: DQRHYO8NdnsvSaIOBVuY8bq+t7HBgKH9d+ujqym3C0w=
Subject key identifier: 4E:FF:13:0A:C0:D0:96:C4:F0:A0:6B:4C:F1:5A:CE:1D:17:6B:D4:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C86DF4C05B11EF9E0F5A4E762E951A.roa
Signing time: Sun 22 Dec 2024 11:53:17 +0000
ROA not before: Sun 22 Dec 2024 11:53:13 +0000
ROA not after: Wed 29 Jan 2025 11:53:13 +0000
asID: 61112
IP address blocks: 156.229.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59373 (0xe7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 22 11:53:13 2024 GMT
Not After : Jan 29 11:53:13 2025 GMT
Subject: CN=6767fdad-b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:23:ba:a8:5b:d6:f6:ea:b0:aa:70:5b:6f:
51:52:85:31:d9:3e:7f:4b:49:b7:ad:54:53:34:e4:
83:2a:1a:ed:7e:b6:b7:4b:29:86:cc:24:c2:07:a4:
77:02:42:7e:c5:a6:02:34:b7:20:51:f1:de:90:24:
1f:e7:85:fe:22:43:17:69:9b:91:78:75:d5:7f:bb:
4e:3b:56:90:3a:3f:b3:ec:32:f6:9f:06:ed:fa:02:
06:8d:44:d5:1e:0c:a8:b2:f3:d6:ee:0b:f1:42:43:
74:6d:94:3a:d0:16:4c:7f:fb:84:8e:c2:51:52:7e:
f6:ae:16:a6:0a:c7:52:29:8f:39:0b:d7:d4:ea:ee:
ee:1a:63:08:58:0c:42:ae:1f:a1:8a:ab:7b:1a:73:
d1:89:d1:46:92:e7:22:ba:f1:6a:74:fb:8e:9d:32:
6c:68:09:8d:31:02:60:26:d4:ed:de:05:ea:02:e9:
a1:8e:b0:d8:d0:55:52:60:5f:64:04:74:d0:42:0b:
2f:57:15:70:56:a5:f9:db:39:c0:48:b2:0f:ce:4b:
67:8f:e8:91:8f:0f:c9:85:03:d6:f5:2e:d1:57:ba:
b5:a4:bf:58:50:b0:ac:48:e9:bc:7d:1c:68:ea:66:
f6:d5:b1:31:dd:db:73:62:df:74:92:da:62:38:27:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:13:0A:C0:D0:96:C4:F0:A0:6B:4C:F1:5A:CE:1D:17:6B:D4:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C86DF4C05B11EF9E0F5A4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/21
Signature Algorithm: sha256WithRSAEncryption
40:cc:56:06:29:1f:e7:02:94:8a:80:08:f9:02:55:01:f7:57:
c1:63:a9:f0:ba:5a:53:33:20:2f:6f:71:eb:05:52:bf:3d:2c:
f4:0f:77:fb:27:1f:a6:9a:c2:36:f7:d3:29:9d:c6:8c:46:8e:
04:ff:f4:e0:47:55:24:34:af:a3:19:d1:85:04:42:d4:86:84:
0e:c5:8c:75:65:5b:27:fa:80:68:b7:9b:f4:47:89:c2:66:48:
2e:7c:47:e9:dc:fa:c4:c2:45:f8:b3:fa:b2:cd:0e:14:b5:94:
89:c6:79:da:cd:b7:32:37:87:07:f6:59:e7:c0:eb:af:90:40:
e1:15:a6:a8:49:6d:37:27:2f:ec:82:b3:4a:49:a1:e3:16:6d:
73:14:22:ad:ea:a8:9c:a4:11:2e:38:ac:dc:cc:56:5f:cf:e6:
51:82:53:da:7b:e0:f2:bc:55:2f:ae:45:85:c0:1c:13:88:d1:
f0:95:ab:f8:d3:94:66:70:a9:5d:d5:d8:66:66:79:33:41:41:
83:08:48:27:a7:3e:9c:80:00:0c:4f:48:8f:3a:5b:22:1a:ee:
79:a9:9d:df:40:fd:9e:d8:05:77:16:3a:7e:67:52:83:8f:a4:
d3:ae:58:e5:34:f5:83:11:23:02:61:c1:ee:71:c7:fa:0a:69:
9a:3e:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:54 2025 by rpki-client