Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746EECE2CE7911EF8F553C9A762E951A.roa
File: 746EECE2CE7911EF8F553C9A762E951A.roa (raw, json)
Hash identifier: ZRD6JTA4mi8rpTvxfEK8UwwHZ7mFBAysAzw/sU87wiA=
Subject key identifier: 35:9E:D0:29:52:CE:28:13:0A:7D:37:73:05:B5:04:00:1D:D4:64:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010334
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746EECE2CE7911EF8F553C9A762E951A.roa
Signing time: Thu 09 Jan 2025 11:04:11 +0000
ROA not before: Thu 09 Jan 2025 11:04:07 +0000
ROA not after: Sat 01 Feb 2025 11:04:07 +0000
asID: 17561
IP address blocks: 156.236.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66356 (0x10334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:04:07 2025 GMT
Not After : Feb 1 11:04:07 2025 GMT
Subject: CN=677fad2b-4c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:09:b3:09:cd:f3:da:72:12:29:ab:ec:9d:38:
9f:14:50:8b:d1:68:00:c6:45:83:d7:61:0d:5e:46:
0e:90:b3:ef:c1:40:53:2d:e1:3b:4b:64:5c:f1:4b:
fb:ed:95:7f:07:dd:91:d1:01:6a:94:a1:d5:3f:60:
0b:a5:20:f7:3b:86:49:22:a5:82:33:0e:92:12:1e:
45:37:af:df:0e:24:d8:2f:95:d0:09:92:9d:da:9e:
af:b6:3e:4a:36:07:2d:3c:60:a7:69:62:db:3a:07:
78:53:54:c4:df:c1:80:0b:69:98:f3:71:55:bd:25:
2e:a2:60:66:f8:16:a2:0d:bd:8b:e3:9c:74:62:6e:
a9:dc:f8:76:2d:d7:44:ae:d3:4a:3f:43:fd:a8:8e:
68:72:2d:a4:81:75:75:b5:15:35:c1:bf:02:30:97:
52:49:dc:02:76:82:d2:9e:26:11:d4:d7:97:16:89:
0b:55:b4:af:a4:ff:76:b2:4c:4f:49:f7:3e:cd:c5:
51:98:39:98:51:ff:da:5a:62:70:d0:43:c3:2e:b0:
27:03:f8:f9:37:43:e9:43:65:ba:2c:ee:8d:90:7c:
9f:c1:b8:94:e8:78:d4:9d:e3:eb:1f:54:e9:81:32:
39:e1:bf:fd:6a:d3:7d:4c:c7:45:01:b2:b3:0c:10:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9E:D0:29:52:CE:28:13:0A:7D:37:73:05:B5:04:00:1D:D4:64:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746EECE2CE7911EF8F553C9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f8:a1:c4:92:18:e9:fc:76:53:85:6d:f5:17:a1:6b:e3:a8:
3e:8a:b5:83:52:e6:e7:62:1f:cf:b0:33:4f:75:ed:65:b9:46:
fc:7a:34:83:f6:c8:c8:cf:f3:a5:44:08:6b:e4:f7:9a:0a:3b:
74:21:72:16:b9:8d:63:28:30:1e:f1:95:42:03:34:15:f5:a2:
c8:20:f9:89:51:a6:47:ed:8b:de:ed:4b:e4:4f:b6:52:ce:99:
07:fd:a1:32:8d:ed:3c:40:dc:16:da:0e:7d:94:67:b2:32:97:
6f:dd:33:6b:1c:23:8a:a1:c2:a1:ea:15:65:89:81:5f:41:93:
9d:5b:f0:44:7f:ea:ac:01:8a:37:dc:01:c1:81:fb:45:9c:93:
11:dc:1e:d1:5f:98:be:75:d4:8d:fb:34:b7:db:9b:b0:69:d3:
09:6a:a2:55:9f:e3:23:b1:a1:e5:15:c0:eb:e2:65:da:05:59:
30:f6:06:03:d8:7f:e5:59:25:d6:bb:7b:a0:43:88:e1:46:a5:
e1:61:16:44:8d:97:60:f9:72:34:59:78:ac:ce:4a:07:da:94:
16:27:70:10:9d:a3:1d:c9:32:0a:41:be:f8:21:44:fd:16:f3:
c3:b6:0f:5c:42:cc:31:bc:c6:65:de:c8:ba:68:ed:05:cc:de:
55:b2:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:14 2025 by rpki-client