Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E8623AACC2411EFB3BBC2B3762E951A.roa
File: 7E8623AACC2411EFB3BBC2B3762E951A.roa (raw, json)
Hash identifier: n5WJ7BXEdLlqf8yeNWkldK52K7pjnPwIkGouIABY4Wk=
Subject key identifier: C7:07:56:6C:63:28:A3:CF:46:54:B6:18:88:6A:33:67:22:E0:AF:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E8623AACC2411EFB3BBC2B3762E951A.roa
Signing time: Mon 06 Jan 2025 11:50:59 +0000
ROA not before: Mon 06 Jan 2025 11:50:53 +0000
ROA not after: Sat 18 Jan 2025 11:50:53 +0000
asID: 151206
IP address blocks: 156.240.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63685 (0xf8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 11:50:53 2025 GMT
Not After : Jan 18 11:50:53 2025 GMT
Subject: CN=677bc3a3-d503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:53:d7:fd:64:e8:b2:0f:ac:3b:90:68:5b:
f4:45:30:72:71:94:03:ae:1c:3c:e3:a9:44:e6:f6:
83:50:51:a4:fc:86:f6:df:52:91:2e:55:48:fb:59:
4a:db:fb:4f:89:71:b3:9c:9b:8b:1d:01:d5:b3:c3:
71:ba:5d:0e:4b:70:74:1d:f2:5d:cc:f2:ad:d2:28:
e1:75:ca:ae:58:57:cc:df:3a:d7:b6:77:f1:ee:1e:
64:b3:76:ea:6c:b9:16:be:73:fd:04:ba:ee:41:54:
a6:b4:47:31:a3:79:3f:23:a5:59:4a:4c:df:af:cb:
32:c9:49:aa:72:f5:dd:3a:85:f3:80:42:ee:11:51:
10:70:d6:8b:de:4d:4a:0d:d2:9c:ec:fa:1a:ef:5c:
3b:3d:95:32:ff:b7:6a:c3:4b:30:2f:46:29:d5:21:
87:bd:a3:56:ab:f8:7a:85:0c:d1:65:c8:11:64:79:
90:a3:3f:33:ae:0e:99:6f:50:4a:4e:27:8f:76:c7:
c9:d1:2c:bb:fb:0d:e5:65:0d:a2:f4:42:f9:c8:52:
2b:97:d0:6e:f7:91:da:13:25:58:97:29:40:82:bd:
4d:03:ad:d3:9b:be:e5:53:c4:68:0c:e4:fd:7a:ef:
d6:1b:bd:b5:c0:00:7c:74:37:98:8f:0a:de:21:43:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:56:6C:63:28:A3:CF:46:54:B6:18:88:6A:33:67:22:E0:AF:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E8623AACC2411EFB3BBC2B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:55:d3:64:77:3a:8f:e5:10:7d:bb:8f:32:df:64:ec:a6:71:
6f:c3:69:06:8e:68:b8:3b:4e:79:e1:0b:37:a8:a7:a9:7a:e3:
d9:83:bc:6c:f8:f0:13:9b:d7:11:f6:c3:61:be:36:57:82:56:
68:f4:3f:f7:09:44:28:90:e7:31:91:8a:22:c3:30:56:f3:24:
cf:99:cf:49:48:55:3b:70:e0:7b:3a:31:99:e0:ef:fb:a8:d3:
7f:7a:17:8a:12:9b:49:25:cd:62:0e:b8:91:f8:a2:39:e9:e4:
10:7f:16:26:41:b5:b5:d5:7e:ce:b7:4d:e6:63:37:4c:5b:54:
e4:95:47:ab:44:39:81:96:03:04:ca:ae:2f:7e:8c:7a:fd:7e:
78:2c:52:0e:76:f4:6b:e0:f6:d6:c2:6d:b2:e7:8d:d2:34:a8:
e3:ba:7c:cf:e1:c0:ed:9f:16:77:7c:b4:41:64:c6:3c:6a:69:
1d:82:ff:ae:96:d6:74:60:2b:5e:55:6f:84:7c:9b:40:f0:b7:
38:80:a9:b0:38:3c:1f:36:ce:93:ae:a2:22:aa:b4:c6:dc:84:
88:cb:d6:0b:9f:c2:ec:cc:7b:8a:24:48:86:13:5a:26:cf:fe:
1d:36:a4:d5:c9:96:5e:73:0b:62:46:2d:bb:79:9a:b5:24:10:
4e:d7:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:26 2025 by rpki-client