Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7417DC10B21611EF8977E392762E951A.roa
File: 7417DC10B21611EF8977E392762E951A.roa (raw, json)
Hash identifier: EmAXqNzoSe9QLHl8JF88xCM+Je/jF3BkFvc4KsjF22o=
Subject key identifier: BA:59:B6:EB:60:04:7C:02:53:66:2A:8B:7C:1E:A6:A1:05:CF:A9:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7417DC10B21611EF8977E392762E951A.roa
Signing time: Wed 04 Dec 2024 08:04:58 +0000
ROA not before: Wed 04 Dec 2024 08:04:54 +0000
ROA not after: Thu 23 Jan 2025 08:04:54 +0000
asID: 63139
IP address blocks: 156.227.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57166 (0xdf4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:04:54 2024 GMT
Not After : Jan 23 08:04:54 2025 GMT
Subject: CN=67500d2a-f707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:ae:07:3b:5e:0e:a8:d4:cb:6f:7c:c0:d7:
8c:f4:bb:ef:68:d7:40:76:4d:ad:68:41:19:84:e1:
cf:a5:26:da:b7:95:93:67:ad:a6:ee:e1:ed:cc:5b:
ef:68:c7:db:c5:c4:44:7f:87:f2:12:56:4c:fb:16:
44:42:1e:3a:0c:b2:b9:e6:d1:33:fd:89:00:a4:3a:
40:e9:d4:95:56:9d:6a:57:ea:75:9e:60:a9:8a:65:
62:6f:5a:eb:72:05:83:8b:7a:fa:13:a1:17:65:93:
a1:dd:12:d2:9c:12:3c:4b:a2:39:4b:e1:5c:08:8e:
a8:59:d9:db:d3:8f:81:27:46:ea:26:32:93:0b:23:
8f:6f:8c:32:e4:83:69:61:51:2c:fa:fd:7b:d2:c4:
28:72:a0:9b:69:3f:93:fa:9a:8b:05:74:5a:e7:fe:
89:38:15:ee:4f:74:80:53:89:f1:a8:14:39:3e:8d:
b3:8d:4a:df:6e:a3:10:c9:83:c4:d1:1e:a6:7d:ec:
d7:0d:3a:c3:6a:75:f1:9d:71:a5:1e:8c:d6:77:85:
7e:a6:0b:fe:3c:c0:b5:a4:a0:b7:0a:f1:c6:09:32:
d6:68:fd:87:03:ae:d3:58:17:76:20:1d:b2:b9:04:
ed:4f:6b:b5:11:56:1b:a7:48:f4:c6:de:3a:62:71:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:B6:EB:60:04:7C:02:53:66:2A:8B:7C:1E:A6:A1:05:CF:A9:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7417DC10B21611EF8977E392762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.224.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:68:7a:bb:cd:21:fc:97:88:08:05:7f:5a:7b:9f:b0:60:6f:
20:a9:7a:07:87:d3:9c:c4:43:a5:7d:03:5f:82:b4:00:7a:41:
af:64:fd:3f:9b:f5:d2:09:42:7d:6a:cf:0d:a5:e5:ac:b5:dc:
e4:87:d4:53:bc:b2:a5:27:28:b5:2b:23:bf:98:c5:75:ca:57:
a6:28:15:60:89:c7:b6:cf:fd:61:6d:c8:af:0c:4a:21:b0:91:
86:17:99:69:b3:69:1e:74:58:fa:63:25:09:b1:b2:2a:b1:e9:
df:ae:2a:de:8b:af:1c:78:a0:0e:6d:46:55:01:6e:3a:7c:08:
54:32:2f:4f:19:8e:c2:0e:9c:3d:8a:d5:1f:d4:cf:25:12:68:
43:dd:1e:d5:14:f2:60:14:7d:c6:1a:4e:e2:d2:0c:23:c9:23:
0a:dd:d7:79:f4:9d:91:85:fe:78:db:02:9f:64:c5:49:45:9e:
55:c3:d2:bf:9d:92:be:85:d0:06:cf:64:ec:7d:e8:09:2a:69:
32:d7:ee:a5:dd:91:c9:97:54:7a:79:de:67:9b:3e:7f:fd:41:
13:3e:19:85:c7:8e:09:0c:5a:f2:af:06:4d:77:24:58:cc:4e:
ad:05:fc:90:43:76:35:4e:0d:95:06:ad:70:0b:a7:c7:cf:c3:
63:8d:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:07 2025 by rpki-client