Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E86E6F2BA2611EF8BB6B744762E951A.roa
File: 6E86E6F2BA2611EF8BB6B744762E951A.roa (raw, json)
Hash identifier: 9Kr4xI5GiymyeaVxYg6hMLdXUGUo2+wa8cA8t7+1hi0=
Subject key identifier: 91:AF:46:04:F5:4F:6D:60:64:8C:98:84:9C:D0:89:D2:AA:E0:AD:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E39A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E86E6F2BA2611EF8BB6B744762E951A.roa
Signing time: Sat 14 Dec 2024 14:19:30 +0000
ROA not before: Sat 14 Dec 2024 14:19:26 +0000
ROA not after: Mon 20 Jan 2025 14:19:26 +0000
asID: 213828
IP address blocks: 156.253.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58266 (0xe39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 14 14:19:26 2024 GMT
Not After : Jan 20 14:19:26 2025 GMT
Subject: CN=675d93f2-6ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:e9:8d:b5:f3:d3:1d:54:1c:b6:1e:69:ad:
5b:dc:5e:5c:9c:bd:6f:20:01:ee:5e:f7:ea:d8:28:
ec:88:62:e1:68:20:2f:45:54:98:9c:60:69:37:5a:
8a:0d:3a:c5:87:97:68:f6:bd:b6:91:1d:ad:b2:8f:
26:a9:ec:be:ac:5f:7b:b7:e9:62:b3:08:f4:b3:dd:
74:9f:34:59:c6:7d:b0:fc:3d:2e:2b:10:14:77:5c:
36:d2:14:fd:34:c3:7d:91:5d:aa:f3:f1:51:22:35:
62:1e:4f:64:4e:c8:61:84:c5:ac:cd:29:fa:b6:6f:
b9:17:dd:08:08:b5:ff:4a:64:a2:e6:a8:44:17:96:
af:d9:4b:e6:46:18:38:bc:a4:27:c0:e1:13:a7:65:
97:80:45:00:59:c3:55:12:23:ad:fe:4b:af:00:84:
92:52:b4:9d:8e:a5:92:56:aa:f1:90:ca:bd:d2:b2:
f6:b6:27:7a:43:bf:bf:34:88:2d:cd:ca:09:10:1b:
67:e3:51:7a:24:31:46:f9:c5:57:b0:57:c7:a4:b7:
7a:c7:a0:af:fb:26:f7:6f:d7:d6:2f:ed:74:74:42:
19:29:8e:ed:e3:0c:56:80:c2:36:da:19:82:ae:5a:
47:89:4d:3f:d0:fe:b9:26:f6:9f:d3:56:24:51:bc:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AF:46:04:F5:4F:6D:60:64:8C:98:84:9C:D0:89:D2:AA:E0:AD:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E86E6F2BA2611EF8BB6B744762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:76:62:68:d5:2b:11:bf:fc:aa:2a:0a:2a:87:79:12:fb:a1:
cf:fa:4d:5a:2c:7e:ac:27:61:94:77:80:83:49:69:e0:0d:58:
9c:76:a2:a2:4b:2f:2b:02:04:5c:4f:4f:60:64:5a:9a:e8:70:
38:e1:a5:e3:c5:b5:8e:49:09:38:3e:5c:32:d4:95:b5:e7:62:
4d:f1:67:8c:2e:dd:a2:ce:52:14:2e:ac:3a:bb:a1:d7:c8:b9:
8a:ce:a3:49:8c:b1:64:2d:7a:e9:47:43:c5:2a:5a:78:49:ea:
da:0e:24:dc:43:c0:bf:d0:9f:07:68:13:9e:85:df:ea:98:e1:
c8:7a:86:9f:9f:44:bf:5d:7f:90:1e:a8:f6:28:a2:b1:0e:82:
40:99:99:c6:e9:da:0a:d2:30:86:28:c1:3e:b8:57:6c:75:3e:
08:0c:87:08:a3:09:fd:6d:6b:ce:6b:cd:78:9d:39:e1:21:b1:
b2:dd:b4:06:f9:5a:41:0e:fa:6c:46:4e:72:53:c3:fc:1a:2d:
ff:d3:4c:05:c9:eb:e0:2a:21:86:5f:70:01:bd:bd:6f:01:fd:
e0:7a:e0:c9:ed:af:22:0a:93:56:86:d9:4d:b1:9f:a3:b4:2b:
01:51:5e:8b:97:be:ac:fb:00:3d:9c:44:33:06:45:49:4b:39:
a9:1a:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:03 2025 by rpki-client