Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/876FE7B4CF0111EFB09D1E82762E951A.roa
File: 876FE7B4CF0111EFB09D1E82762E951A.roa (raw, json)
Hash identifier: raRjvTPi1sG5qzZS/eKuVN63s4WMC86EIYG85I6G3FI=
Subject key identifier: 26:10:77:3A:EF:B9:51:F3:E2:A2:17:67:7E:6F:1C:BC:1B:7D:BB:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/876FE7B4CF0111EFB09D1E82762E951A.roa
Signing time: Fri 10 Jan 2025 03:18:15 +0000
ROA not before: Fri 10 Jan 2025 03:18:11 +0000
ROA not after: Mon 27 Jan 2025 03:18:11 +0000
asID: 62468
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66775 (0x104d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 03:18:11 2025 GMT
Not After : Jan 27 03:18:11 2025 GMT
Subject: CN=67809176-ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:f0:f8:9d:8e:0a:9a:b1:b5:c0:b8:76:87:
92:40:b8:26:0e:7e:2c:a8:b9:a7:63:bb:d2:b2:f8:
08:b0:8b:f4:fc:83:20:35:a4:78:47:f9:6c:f1:c3:
d5:94:b6:29:b7:f8:56:d4:88:3d:df:78:f2:7e:13:
af:70:e8:4b:8a:f8:b6:7d:e0:b8:99:e9:08:14:09:
2e:24:1e:92:78:c6:e7:1e:1e:87:08:63:71:45:ca:
7c:d6:17:88:2e:e8:4b:8a:a8:94:14:1e:5d:8d:14:
aa:04:a0:90:84:41:54:82:0d:04:4e:64:af:70:1e:
ba:8a:d0:95:7f:47:2b:9b:59:eb:79:59:4b:70:14:
9e:db:ec:c7:16:c7:04:f5:8e:de:37:f9:d9:6e:3d:
2f:f0:06:1e:4b:58:18:c6:b1:60:90:02:fa:b8:9f:
e5:f4:ce:33:a6:00:f8:af:7b:43:3a:a7:e6:1a:5f:
12:35:15:8f:51:4c:fa:d3:ce:99:09:18:5f:28:68:
a4:57:db:6a:9c:b1:1a:33:b8:8b:47:02:2b:48:60:
04:15:11:77:57:f6:e0:38:32:c0:cb:2e:ff:a1:96:
1d:fc:df:c9:df:2d:e5:53:e4:dd:d3:5c:cc:51:c9:
b5:d0:24:08:af:e2:6c:c6:01:69:65:52:07:e4:94:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:77:3A:EF:B9:51:F3:E2:A2:17:67:7E:6F:1C:BC:1B:7D:BB:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/876FE7B4CF0111EFB09D1E82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1d:11:4d:ce:9c:ff:a3:cd:35:03:fc:b2:d1:db:eb:60:0d:
11:83:1c:61:1d:8f:c8:91:fe:ea:ef:50:f7:e8:ac:6b:b2:8f:
e4:63:64:c1:ee:e4:fa:9a:01:47:d4:a3:c9:45:a7:76:0c:73:
ab:1d:d0:13:a7:08:ab:04:0a:dd:7c:35:93:4c:c3:a9:8a:be:
3c:38:3e:b8:57:b1:f8:70:f6:48:f7:8d:16:c0:02:d5:2a:d3:
ad:bf:87:0d:33:91:64:87:c3:1e:a7:83:67:eb:10:59:6a:37:
9b:12:43:73:dd:7f:94:96:8c:64:1b:9e:99:3d:b8:39:5b:3c:
eb:51:26:d3:10:ae:fc:da:53:0b:1d:7d:67:59:50:e5:9c:02:
f9:65:fa:f8:56:ae:5e:cd:6c:86:db:1f:c8:c4:90:a0:34:c8:
7d:89:24:e2:5e:b0:96:e2:b6:52:bc:9e:e2:e0:c3:ac:75:31:
ff:d2:f3:4c:ef:e1:ac:c8:74:fa:0c:e3:ff:e8:95:e0:6a:a5:
c2:ce:61:fe:27:a0:77:54:f3:ab:ed:d8:15:85:a9:fb:c6:48:
8e:6f:d0:0a:59:54:6c:fa:be:2a:15:e7:a5:2c:f8:78:25:2d:
6f:97:aa:05:aa:41:06:ff:5f:0a:d8:a4:37:1b:7b:b8:3e:c6:
e8:ec:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:32 2025 by rpki-client