Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7527081ACCDD11EFA80C7951762E951A.roa
File: 7527081ACCDD11EFA80C7951762E951A.roa (raw, json)
Hash identifier: ha+OXVBPK1PFbm+G4Xb86eTVHF1PUsTjYp6Udx5ObuM=
Subject key identifier: 6A:28:19:5D:12:C3:2C:CA:D3:6E:D1:CE:5D:01:2D:C7:AC:51:6E:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7527081ACCDD11EFA80C7951762E951A.roa
Signing time: Tue 07 Jan 2025 09:55:00 +0000
ROA not before: Tue 07 Jan 2025 09:54:56 +0000
ROA not after: Sat 18 Jan 2025 09:54:56 +0000
asID: 62468
IP address blocks: 156.245.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64383 (0xfb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:54:56 2025 GMT
Not After : Jan 18 09:54:56 2025 GMT
Subject: CN=677cf9f4-3f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:05:eb:c7:2b:f3:93:05:a4:0c:42:a5:c3:e9:
5f:b5:57:ff:b5:d3:49:26:48:dc:b5:78:8d:89:52:
b9:1c:cc:c1:e4:a8:c6:bc:72:35:a5:1e:4d:8f:33:
c0:82:b5:e3:e7:44:e5:7e:02:22:09:9c:1c:9a:a7:
43:64:97:16:3f:32:e6:59:04:58:8c:42:85:cf:54:
3d:b4:09:79:83:09:ca:6f:7c:84:ce:cd:b5:04:32:
c6:85:f0:93:4e:0d:ef:f0:46:09:9e:78:31:85:b4:
75:05:90:ec:71:1e:2b:a3:db:8f:3b:34:67:15:0f:
b4:ec:45:8b:47:77:4e:dc:ea:7d:84:d9:40:b2:b3:
b8:34:e3:ca:a0:c0:22:d7:e6:b3:6c:49:ff:63:d7:
42:8d:37:f3:da:98:75:97:ea:a7:f0:91:e0:b6:58:
68:7d:53:26:08:30:b1:3a:55:17:ff:d2:2e:b8:de:
71:67:ca:ae:89:39:d7:13:2d:44:35:11:49:87:77:
1a:4e:0c:90:8f:21:7a:15:28:84:af:dd:60:b3:05:
5a:10:b1:f3:20:34:50:6c:7e:eb:31:21:d1:09:40:
29:dc:5e:f6:29:d7:35:45:dd:87:8a:f9:29:91:6a:
fd:1c:6b:b7:47:82:4f:55:12:b1:9c:e8:8f:8c:45:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:19:5D:12:C3:2C:CA:D3:6E:D1:CE:5D:01:2D:C7:AC:51:6E:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7527081ACCDD11EFA80C7951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:27:32:14:ff:d4:b8:30:98:c7:c5:87:f3:8d:73:4f:54:d8:
d5:0b:a6:a2:b5:67:24:0d:bc:ba:36:4c:27:3b:15:4d:15:f8:
f8:f6:53:dc:80:18:b0:2b:1d:0f:4f:15:ce:60:1d:23:bc:be:
06:e4:7d:a2:1a:92:49:db:d7:dd:29:77:77:e1:f6:d3:65:cc:
f4:58:31:2a:aa:54:c7:53:d5:77:89:00:a7:09:f2:68:dc:57:
fc:a2:d9:cb:e9:ee:ec:96:f8:20:0a:50:3c:de:eb:8f:e4:08:
fe:f2:75:5e:3d:c8:d4:e0:4b:22:e1:a8:d3:f2:ad:4a:12:07:
ca:1e:78:d3:44:f0:b7:c1:32:32:aa:3d:9f:b1:c7:40:db:4d:
bd:16:69:91:57:9c:0f:69:ec:af:6d:28:20:53:e8:9a:6d:c7:
b0:62:fa:c2:61:4f:bd:f1:19:92:a7:a2:63:d4:c3:7a:af:3e:
a8:b6:e5:24:d2:58:23:f9:14:a2:12:03:c2:d2:5f:70:87:4a:
9c:7a:d1:b6:f8:33:4e:83:a6:0c:3f:4e:6d:a4:94:03:c5:83:
d1:63:5e:0a:99:de:fd:50:3b:4c:a3:62:78:a9:4b:cf:86:0a:
7a:7a:87:38:2e:1c:ff:5e:dd:c0:1b:d4:4c:99:ad:6b:3f:ef:
25:a9:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:24 2025 by rpki-client