Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822DA8B4C29911EF9F4FCC93762E951A.roa
File: 822DA8B4C29911EF9F4FCC93762E951A.roa (raw, json)
Hash identifier: 80h4QoBBi/lpQuOslPWpdunotA3dRLm4xP1506KYcvs=
Subject key identifier: 9C:40:94:86:A4:FA:32:B7:B1:82:C2:8F:98:CC:15:0D:D0:60:C4:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822DA8B4C29911EF9F4FCC93762E951A.roa
Signing time: Wed 25 Dec 2024 08:23:24 +0000
ROA not before: Wed 25 Dec 2024 08:23:21 +0000
ROA not after: Mon 03 Feb 2025 08:23:21 +0000
asID: 21859
IP address blocks: 156.225.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59871 (0xe9df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 08:23:21 2024 GMT
Not After : Feb 3 08:23:21 2025 GMT
Subject: CN=676bc0fc-9c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:86:32:d5:c0:39:41:a6:1e:7a:7a:d6:a1:
de:4d:0c:5e:2e:9d:d8:fc:11:cd:a4:60:40:17:6d:
42:54:3c:78:f1:7c:ab:7b:b1:40:94:2b:39:39:83:
3c:c6:25:e4:33:1e:e5:27:73:53:6f:5f:69:fb:b6:
bf:35:36:c3:41:c7:e5:1d:05:1e:9d:ef:95:05:23:
ab:c2:5b:9e:a2:9d:18:ef:e9:d9:91:ff:ef:e1:ac:
b4:c9:18:a5:c1:0b:8e:39:f2:d2:7d:5a:79:1f:c2:
11:43:eb:22:d3:57:7a:d1:f9:ec:df:06:47:57:0f:
6b:0c:5d:48:27:b1:76:cf:ef:b5:d3:5f:b5:1c:a0:
60:f0:19:79:56:8f:fc:30:b3:56:af:dd:5c:37:4c:
8f:f9:6b:1f:c8:bf:2f:5a:1b:c5:13:38:04:ce:9b:
44:8d:b7:cf:b1:e6:97:b2:32:5f:4e:7e:72:fe:3c:
2d:5f:9a:1b:15:75:e2:1e:1a:54:43:e6:cc:0a:cf:
34:81:5f:c0:ca:42:a8:ce:00:47:29:5b:a5:0a:cf:
31:b9:bc:6d:bb:b6:7c:e6:ab:72:c8:0a:f7:06:6a:
5b:8a:ff:57:eb:d0:d8:ba:c3:1f:2a:7a:cd:a4:c1:
d4:64:92:d1:c7:7d:3c:da:99:c6:79:60:cb:a0:67:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:94:86:A4:FA:32:B7:B1:82:C2:8F:98:CC:15:0D:D0:60:C4:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822DA8B4C29911EF9F4FCC93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:ca:e4:34:a2:ef:45:6a:2b:db:47:e5:07:a3:63:a3:d0:67:
8a:04:b9:29:9d:9f:80:c6:b7:ed:79:9d:ae:7c:d1:90:24:d2:
2d:fb:24:57:cf:de:52:d9:7a:e8:9f:15:db:c1:44:c2:3a:6a:
c5:df:56:b3:d0:49:e1:b4:61:a9:d1:80:37:ff:51:da:fb:f9:
41:2a:8d:a9:95:c6:1f:b8:ab:2d:d2:ba:f2:ac:8a:56:b4:eb:
ba:7a:c5:9c:e7:91:ac:00:86:23:62:cd:bb:d6:43:24:2a:ae:
53:2a:44:34:9e:78:05:59:31:8e:1c:1e:2c:b0:16:7d:78:1a:
23:bf:51:ca:71:9f:16:b7:4d:06:b1:1f:e5:dc:44:b3:08:0b:
fa:bd:30:e9:2b:84:91:60:d1:96:ea:0b:b9:38:78:93:14:1b:
69:ff:d6:16:34:93:d9:ab:04:94:48:a4:32:e1:22:76:b0:36:
fe:9d:34:cc:f6:26:58:c4:24:5a:9a:9f:f0:b4:1e:12:91:46:
d5:ae:33:96:f2:0a:fb:c5:6d:d1:d6:0f:78:fa:ea:fb:79:51:
d8:59:0e:37:44:99:66:bd:8c:1d:7e:8e:ba:e1:28:c1:66:7a:
c3:cb:6f:87:f4:5a:27:d0:1d:c8:fb:47:de:75:96:62:f9:72:
46:0f:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:59 2025 by rpki-client