Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CD76E50CACE11EFB16874B3762E951A.roa
File: 5CD76E50CACE11EFB16874B3762E951A.roa (raw, json)
Hash identifier: jSmQ6+URyL0mhWP/x6yRK2KWJnMTCoUA9soTBKO3DcA=
Subject key identifier: 80:72:BA:54:31:71:27:B8:29:A3:22:2A:5F:2E:E3:7B:4F:3D:F3:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F76A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CD76E50CACE11EFB16874B3762E951A.roa
Signing time: Sat 04 Jan 2025 19:01:54 +0000
ROA not before: Sun 05 Jan 2025 19:01:51 +0000
ROA not after: Sat 18 Jan 2025 19:01:51 +0000
asID: 142286
IP address blocks: 156.225.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63338 (0xf76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:01:51 2025 GMT
Not After : Jan 18 19:01:51 2025 GMT
Subject: CN=677985a2-7e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:6c:8e:bb:c4:1b:5a:46:fe:cd:24:d0:68:
aa:03:50:e0:05:b6:67:7a:92:4b:51:11:4d:de:27:
7d:a6:f8:22:87:da:34:10:f8:17:3c:87:48:7f:63:
f5:95:75:a4:6e:5c:77:e5:42:7f:8e:b2:96:e3:5f:
a6:10:24:1b:98:48:7b:8a:52:4f:99:cc:99:60:81:
7d:ad:60:b4:bc:40:d2:0f:6d:c2:f5:a7:01:47:95:
a9:8c:60:86:99:cd:4b:75:a6:9a:0a:41:72:8b:12:
13:4e:d5:45:93:7b:a6:b2:44:9d:fe:f3:15:f9:d4:
56:6e:26:9d:04:f4:09:8a:2d:9a:d1:e0:a2:ff:b2:
97:8c:cd:4f:18:05:c5:94:03:e2:42:7b:3d:b1:44:
ca:db:52:a7:dd:ea:32:08:7d:e5:72:9b:f8:fc:c6:
c1:32:f2:8a:18:9c:7b:5a:87:85:11:43:47:34:03:
78:48:2a:b3:97:c9:c1:8d:5d:aa:77:73:03:96:92:
a4:b7:ec:23:70:ae:f9:43:d4:32:c5:23:3f:0b:e6:
56:08:20:9e:7a:94:75:be:9f:31:08:dd:67:07:10:
a5:d8:22:24:71:8b:0b:af:52:64:5b:ae:c1:65:fe:
c6:ba:9a:8e:29:a8:96:2d:ce:d7:93:b4:aa:5b:31:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:72:BA:54:31:71:27:B8:29:A3:22:2A:5F:2E:E3:7B:4F:3D:F3:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CD76E50CACE11EFB16874B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.136.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:81:1b:c7:65:76:bb:7b:b1:c9:3a:b0:d0:c9:66:92:a5:ff:
b1:e6:a4:f7:dd:5f:52:a5:31:8e:89:55:95:26:c7:4f:4e:c7:
f1:db:64:ba:39:56:0b:3a:cf:60:bc:d8:e7:dc:c1:cb:39:6f:
87:9b:1e:79:6a:21:44:4c:0c:7a:e7:ff:f9:ce:cc:62:02:6f:
10:53:61:ae:e6:48:f1:3e:68:b5:b6:e4:23:e4:62:e0:e9:08:
d8:42:a3:8d:90:9f:64:a4:f5:02:8c:ae:94:c4:a9:96:d5:82:
d1:1c:27:af:aa:6c:9c:39:9b:56:02:34:b2:39:32:83:fd:91:
7b:16:2f:98:d4:36:65:4b:8c:48:7d:74:2e:95:2e:51:3c:b7:
42:ba:41:12:f5:a1:5b:f9:9d:86:74:c6:b9:ae:8b:db:41:f3:
aa:14:ca:2a:f1:46:6a:1f:fe:b9:5b:60:9f:df:cd:42:87:bd:
0f:27:05:35:ba:b0:50:ad:a4:a2:62:d7:45:f7:1d:2e:5e:03:
95:4d:fa:37:e5:43:5a:93:d3:6f:42:af:9f:4c:d4:05:97:db:
a8:be:18:1d:b5:a0:1d:3a:b0:62:fe:d2:c1:1f:bf:cd:e9:b6:
0c:aa:85:e3:0e:63:63:7e:94:5d:dd:a1:04:c4:c3:bd:f2:01:
b5:70:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:58 2025 by rpki-client