Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/768C26BABEAD11EFB1ACA342762E951A.roa
File: 768C26BABEAD11EFB1ACA342762E951A.roa (raw, json)
Hash identifier: 2sKeoboBHz9lCh3HGiCDBW/68SKXefwF618B/cbe2x0=
Subject key identifier: E8:10:98:B1:62:E1:C2:E9:5F:E5:9C:70:90:A0:55:46:DD:C6:99:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E72F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/768C26BABEAD11EFB1ACA342762E951A.roa
Signing time: Fri 20 Dec 2024 08:36:10 +0000
ROA not before: Fri 20 Dec 2024 08:36:06 +0000
ROA not after: Fri 24 Jan 2025 08:36:06 +0000
asID: 395793
IP address blocks: 156.228.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59183 (0xe72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:36:06 2024 GMT
Not After : Jan 24 08:36:06 2025 GMT
Subject: CN=67652c7a-07ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:7d:f2:ac:6e:6e:b4:2d:4f:14:b8:28:7d:
f6:54:62:ac:82:96:d7:18:4c:35:02:a9:76:93:0e:
dc:97:09:ff:11:18:c1:4d:28:e1:59:2b:81:82:ee:
df:69:39:7b:13:90:d4:4d:68:d6:85:ac:4e:48:bd:
96:e3:54:12:d9:e4:37:ec:5a:0a:e8:ea:38:fa:a7:
8a:d3:bf:27:49:bf:ec:6c:81:5d:b5:37:21:d3:29:
f5:a7:0d:5e:4e:87:6a:74:cd:16:c8:f2:0e:b6:a8:
0b:f0:3b:d1:fa:ec:76:4b:f0:28:c0:7b:ac:3d:7a:
cc:4e:71:04:a7:0d:5e:a5:61:fd:61:c1:88:88:42:
98:d3:f5:f1:e9:1a:19:13:46:77:d9:0a:c3:6e:4d:
05:c8:03:83:88:c3:fb:61:a5:1a:86:73:85:e3:cd:
79:ac:c0:0c:aa:0c:a0:18:21:6a:bc:87:e5:30:ee:
4a:d9:3c:f4:fe:a1:26:3d:65:1c:59:af:c9:42:cf:
d8:13:44:7d:5f:ed:31:b1:da:77:17:71:02:3a:aa:
41:61:48:40:bf:fb:b7:96:d0:27:12:c5:e2:d0:6a:
69:e2:04:bc:76:ce:b6:d7:09:92:66:98:34:28:cd:
1a:98:b6:8b:bc:d6:63:47:58:18:61:c2:20:e3:fb:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:98:B1:62:E1:C2:E9:5F:E5:9C:70:90:A0:55:46:DD:C6:99:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/768C26BABEAD11EFB1ACA342762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.210.0/23
Signature Algorithm: sha256WithRSAEncryption
47:49:3a:94:7d:e7:d7:0d:be:a8:87:26:8a:4e:e3:1b:c6:4d:
d0:03:62:08:1d:60:47:42:28:86:02:e0:f8:30:40:5a:98:8e:
78:14:2f:e1:c3:1c:60:ce:3c:32:e5:c9:29:8c:1f:3f:1e:30:
94:b8:1d:5f:5e:1e:28:5a:64:cf:7d:46:cb:52:1d:10:fc:20:
d8:b0:d3:79:17:45:f1:dc:1e:4d:93:58:2e:81:a4:69:1d:74:
f3:3c:b8:b5:ab:33:d6:38:1a:4c:90:b4:62:98:6e:58:78:e5:
c7:f0:1e:49:18:3f:02:09:a8:41:1d:59:67:4b:01:2f:6d:3a:
d2:d8:61:bb:95:33:fc:2b:9e:ce:c0:ea:dd:37:2b:4f:00:65:
af:fd:7f:fd:20:48:8c:20:52:cd:19:b2:fb:dd:9b:62:06:65:
0c:b4:ff:28:2b:08:ea:c8:b8:fc:cb:7c:43:56:9e:91:99:4a:
d1:ac:5b:77:8c:ec:1f:b8:34:a8:e2:d0:f6:cb:cd:d4:cd:52:
a3:3f:07:9e:d6:a7:53:94:d4:d8:ce:a5:c0:29:ef:57:f9:94:
3e:f2:77:18:2c:7d:4a:6d:46:47:f0:8a:1e:52:45:d1:50:43:
4e:65:4d:a8:3e:4d:e1:3e:57:2d:ed:a6:d7:fb:d8:49:87:d9:
bf:6b:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:41 2025 by rpki-client