Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1B13C6C9A911EFBE4B4280762E951A.roa
File: 7E1B13C6C9A911EFBE4B4280762E951A.roa (raw, json)
Hash identifier: I1Jv4zqMjNj0dyQyAlL62In04tR94bY2xYu29NjbgTM=
Subject key identifier: 00:94:6C:A3:9E:F2:1F:D0:A4:6C:4A:3D:F8:FC:42:85:C8:AD:D5:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F695
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1B13C6C9A911EFBE4B4280762E951A.roa
Signing time: Fri 03 Jan 2025 08:05:27 +0000
ROA not before: Fri 03 Jan 2025 08:05:24 +0000
ROA not after: Sat 18 Jan 2025 08:05:24 +0000
asID: 139646
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63125 (0xf695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 08:05:24 2025 GMT
Not After : Jan 18 08:05:24 2025 GMT
Subject: CN=67779a47-e755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:0e:1e:ef:99:ad:3c:b1:0c:2c:db:b2:57:
ea:e2:34:90:81:c2:40:c5:8d:20:1f:b4:e9:61:78:
44:31:e2:9e:0a:f5:cc:a1:61:51:34:6e:9b:a8:ab:
f9:08:a9:bd:76:74:b1:e0:b5:bf:96:80:4f:d6:cc:
a2:ea:f1:d3:9d:81:3c:2a:04:29:4f:eb:e2:a0:b6:
fa:0b:4e:c0:0d:9b:1e:04:5a:36:fd:a5:f1:e2:d6:
ea:69:10:83:60:34:9c:fc:09:3f:68:a1:0e:14:b0:
dc:88:4f:2a:f3:d7:19:86:4e:2c:8f:0d:8d:43:82:
91:ed:9e:c7:d9:db:7e:44:69:7e:de:f1:f7:42:61:
a4:14:6a:9e:d9:7d:c2:37:5f:41:b3:61:8d:ad:85:
df:8e:23:3b:04:b6:a9:64:bb:14:32:29:33:28:c3:
cd:7f:94:c3:a7:ed:5b:89:86:fc:b3:01:e1:77:3c:
67:64:c8:5e:d3:60:87:51:5f:13:fe:6f:89:dd:3b:
5c:20:ee:63:c9:d3:d2:2c:de:fb:65:12:1f:af:e8:
fb:2e:cc:9a:03:e2:7d:ea:14:fa:3c:30:41:c5:9c:
1d:88:3f:88:35:ce:7e:c6:a8:ff:f6:46:07:9a:58:
e9:d1:13:73:98:6a:52:55:0d:09:72:d8:6c:09:b0:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:94:6C:A3:9E:F2:1F:D0:A4:6C:4A:3D:F8:FC:42:85:C8:AD:D5:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1B13C6C9A911EFBE4B4280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
34:12:11:7f:b9:02:f3:13:bc:ef:eb:d2:f9:48:06:f9:11:24:
66:db:0d:60:5a:ee:32:14:1a:0d:75:cf:64:dd:4e:18:b3:1d:
c0:6e:f2:40:99:f9:cb:80:fa:25:9f:52:78:aa:7c:22:60:1a:
cd:a5:fa:24:b0:33:41:ed:1d:a7:f2:76:f8:99:2b:99:fb:4f:
ea:19:eb:37:27:bb:48:2a:47:e7:d2:b4:06:4c:78:24:f6:7e:
f7:3d:be:20:b3:e0:a6:27:cc:88:28:40:5c:0b:62:fe:14:2c:
6e:83:7b:99:90:7d:96:31:1b:46:a2:04:04:92:7c:56:11:a3:
c6:b8:b4:d3:f2:c7:b5:62:3e:7d:13:95:00:ed:24:46:17:8e:
fc:e3:88:3c:78:6e:6e:42:78:0f:cd:e3:67:0d:06:2c:f6:49:
41:42:63:c0:65:44:59:af:8f:31:bb:9c:56:66:82:43:a2:74:
6d:71:18:34:92:95:77:4c:38:23:e0:f6:aa:d1:a0:55:84:d4:
5b:30:66:dd:72:7c:ce:62:f0:df:fc:b9:b5:07:f6:db:14:d9:
91:7c:99:90:57:ca:f3:60:72:99:10:ba:42:40:0c:2e:3b:d9:
54:98:e9:17:2c:64:26:02:a7:31:5d:85:58:f3:59:69:6d:4b:
a3:66:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:58 2025 by rpki-client