Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6137AE78CCDC11EFB72E5E49762E951A.roa
File: 6137AE78CCDC11EFB72E5E49762E951A.roa (raw, json)
Hash identifier: jL1fWPbi4CudRLu1Y7LZvOyQCeMADz2V+zjyVDjYFwM=
Subject key identifier: 3A:CB:9F:A0:85:B5:B3:7D:A7:56:C5:56:93:BF:55:D4:38:59:2E:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6137AE78CCDC11EFB72E5E49762E951A.roa
Signing time: Tue 07 Jan 2025 09:47:17 +0000
ROA not before: Tue 07 Jan 2025 09:47:13 +0000
ROA not after: Sat 18 Jan 2025 09:47:13 +0000
asID: 62468
IP address blocks: 156.245.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64367 (0xfb6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:47:13 2025 GMT
Not After : Jan 18 09:47:13 2025 GMT
Subject: CN=677cf825-66aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:80:87:9d:dd:44:ff:af:07:ff:f6:4a:00:
74:f4:cb:32:a8:40:54:1e:12:95:48:2c:f9:e9:aa:
e5:f5:ed:d5:63:de:d4:cf:3c:26:fb:c4:a7:a3:75:
85:78:0d:a2:6a:73:c6:e6:3c:76:d5:9f:55:f0:38:
c9:66:cc:30:75:1d:a6:b2:32:4d:36:11:cb:cb:2c:
dd:f9:d9:54:27:de:c3:71:94:7e:fb:b0:06:4f:f1:
88:a2:bf:78:c9:83:36:9b:26:1e:e3:43:79:4a:5e:
99:9d:b8:ad:4b:48:12:f8:90:74:5e:5f:53:48:f4:
74:de:c7:57:7f:d8:2e:82:f7:f2:3f:e5:cb:6a:34:
d3:39:96:a3:8d:55:7f:36:da:5d:a9:87:98:72:e2:
51:2c:0b:94:56:7a:04:90:20:11:95:7e:04:f5:39:
9f:5b:8d:e3:e2:81:28:5d:33:04:c7:b2:02:0f:13:
6c:67:07:c8:67:f0:eb:cc:8f:2a:ff:99:04:8e:d3:
d1:32:a5:77:57:69:ad:f2:e8:86:e2:57:4e:13:ff:
97:21:27:ac:58:46:2a:ee:43:a7:f2:db:4d:2e:c7:
a8:eb:8d:8d:a0:2e:b8:b9:cd:75:98:5d:f3:23:2f:
24:6d:73:5d:70:de:6f:a0:c7:5d:ba:0e:7d:36:dd:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CB:9F:A0:85:B5:B3:7D:A7:56:C5:56:93:BF:55:D4:38:59:2E:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6137AE78CCDC11EFB72E5E49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:86:57:80:85:4d:e2:86:06:e7:63:08:3e:cd:72:ff:a2:d1:
36:ac:88:3b:37:3d:0f:11:73:15:d1:66:69:94:94:1f:95:a7:
7a:32:9e:ca:91:5a:84:07:7f:28:4e:a3:b7:05:05:0a:18:c4:
77:bf:83:84:e8:ec:8d:c1:4d:ad:f5:ac:b4:23:f8:e4:e3:f0:
a8:8b:56:78:a9:61:f6:83:38:ea:87:f5:f7:da:9a:3a:b0:b0:
65:c8:1b:bf:90:a7:f4:c4:ed:a5:5f:5a:30:58:26:17:b1:35:
37:15:db:4d:4f:fb:df:92:e5:e8:b2:e8:ba:f0:67:26:ce:c5:
88:2a:ec:0f:78:f3:40:f4:1d:3b:0f:6c:1c:0f:01:d6:a5:9f:
2e:bc:9d:1d:fd:4c:1e:1f:af:4d:f5:f1:69:1f:51:77:9f:0a:
b3:aa:7c:c1:e0:9b:d3:df:c0:f4:6c:a0:4d:a8:eb:1b:39:89:
c1:f6:c2:69:9a:ae:f6:71:30:bb:85:9a:21:ad:fb:35:a8:ec:
05:69:c5:ea:f1:0f:ec:c8:f8:0f:18:7f:55:92:bb:7a:c8:3b:
5d:11:94:03:14:fb:ec:41:67:4e:95:e0:df:cf:d8:f2:9c:05:
36:5a:e6:30:96:eb:f2:ff:f2:e6:16:62:59:cd:45:d0:47:5d:
52:4c:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:39 2025 by rpki-client