Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65B05C44B49E11EFA6812D77762E951A.roa
File: 65B05C44B49E11EFA6812D77762E951A.roa (raw, json)
Hash identifier: FCLYRsIycgaxgAXXH9sqz6kSMmLFsxQm5s5S+9+pqRk=
Subject key identifier: 69:24:9C:2B:1C:00:CB:AE:AA:07:BC:BA:17:A3:19:57:EB:78:7E:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E096
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65B05C44B49E11EFA6812D77762E951A.roa
Signing time: Sat 07 Dec 2024 13:23:07 +0000
ROA not before: Sat 07 Dec 2024 13:23:04 +0000
ROA not after: Wed 15 Jan 2025 13:23:04 +0000
asID: 138915
IP address blocks: 156.244.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57494 (0xe096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 7 13:23:04 2024 GMT
Not After : Jan 15 13:23:04 2025 GMT
Subject: CN=67544c3b-c9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:6e:8a:41:ab:31:ee:99:10:ca:cf:e7:b1:
68:6c:44:fa:c9:04:28:38:06:ff:d2:c4:f7:7c:51:
0b:4a:66:84:b7:97:42:04:16:68:48:9c:59:d3:c2:
e6:c7:32:6f:ff:95:61:89:08:09:8b:9a:de:1e:8a:
b1:68:93:af:36:6b:47:91:4f:8e:21:34:0e:bb:3e:
ba:0b:f1:dd:27:9c:4f:e1:ca:da:b1:a2:e1:1c:f9:
9a:7b:71:be:71:f5:e1:08:4e:0b:42:dc:43:2f:d2:
58:49:11:b9:3b:57:95:b3:7c:98:97:62:5f:95:ce:
b8:a9:f4:76:a9:bf:c4:81:9f:7c:8b:72:27:bf:8b:
6d:41:44:21:c9:f8:02:5f:cc:c0:73:6b:6e:06:f8:
63:35:39:d2:b1:81:66:ea:ed:6d:bd:43:aa:ac:58:
4f:c6:2b:6b:cb:59:42:ac:a6:0e:c9:fc:ac:db:02:
8b:52:bd:be:b4:67:cc:34:d3:3c:5c:6a:1b:16:fb:
79:2a:7f:0c:1a:b7:6a:db:d1:9d:59:73:81:8f:3d:
69:ac:b9:3f:35:24:2f:93:9a:24:11:74:ce:64:dc:
5c:2d:5a:8d:00:ad:fe:88:32:45:4e:ab:cd:d4:cf:
f8:61:d8:f9:ce:56:f4:b7:d6:95:21:a5:9f:7e:2d:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:9C:2B:1C:00:CB:AE:AA:07:BC:BA:17:A3:19:57:EB:78:7E:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65B05C44B49E11EFA6812D77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:34:9d:a5:72:7f:c9:1c:03:c1:0d:43:f6:ad:33:25:b1:2f:
8c:73:68:3d:e8:40:dc:06:72:5b:bf:31:a8:f3:39:54:8f:b0:
78:3d:2a:2a:47:74:7a:17:9b:f7:63:32:25:f6:7f:e6:3f:8d:
ea:cb:96:d5:e3:8e:d7:85:43:4d:88:a9:0f:ce:e0:2f:e3:05:
95:6c:7c:09:6f:00:9a:2f:bc:ad:ba:62:df:b8:b7:e8:8f:6b:
c1:2b:dd:41:63:b0:1c:ba:20:a6:47:cf:18:e5:02:ec:97:ae:
1f:e8:97:c2:52:55:58:9a:a1:1b:b9:17:a0:54:ab:7f:36:1c:
a2:b6:d4:da:21:2d:ee:b5:ae:f7:ea:26:ff:cc:3b:0a:05:44:
3d:40:5d:68:75:86:52:e6:91:8b:a3:5d:63:03:37:d3:b8:00:
d6:8a:1e:33:35:92:66:e2:ce:a0:bc:ff:06:d5:90:22:4e:26:
6b:7f:06:a7:ee:7a:0a:4b:5c:87:18:0d:b4:c4:92:ef:e3:df:
55:a4:00:0e:9a:c2:c6:25:d3:11:4f:0f:22:bb:b4:de:5c:9a:
a3:46:89:b6:67:a2:82:25:e4:59:62:64:63:08:fa:50:07:43:
52:06:4a:02:94:ef:54:87:55:c7:fe:5c:b8:08:27:a3:4c:43:
6f:79:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:50 2025 by rpki-client