Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CB9C22B49E11EFBE9E4C77762E951A.roa
File: 90CB9C22B49E11EFBE9E4C77762E951A.roa (raw, json)
Hash identifier: smhiXgINVNh2PZleS2NL53ulc7Qxqe4GbLRoggvHjC0=
Subject key identifier: 70:10:6B:09:6B:E8:49:15:2D:AF:34:02:F5:3C:98:E2:A1:4C:58:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E098
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CB9C22B49E11EFBE9E4C77762E951A.roa
Signing time: Sat 07 Dec 2024 13:24:20 +0000
ROA not before: Sat 07 Dec 2024 13:24:16 +0000
ROA not after: Wed 15 Jan 2025 13:24:16 +0000
asID: 138915
IP address blocks: 156.244.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57496 (0xe098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 7 13:24:16 2024 GMT
Not After : Jan 15 13:24:16 2025 GMT
Subject: CN=67544c84-cf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:f2:6f:21:20:1a:40:ae:d6:5d:50:5e:5b:
72:cd:aa:ff:89:c8:d1:36:f0:95:04:ce:67:03:31:
87:a7:92:49:fc:1e:17:e7:8e:2e:ea:f2:05:50:c0:
2e:7b:65:ae:3d:c4:a5:d5:cd:d8:b8:3b:b0:41:16:
d0:b3:93:f3:6c:46:ed:dc:18:9a:ca:c5:0b:d6:5e:
47:4c:75:8d:5f:df:a1:6d:69:a8:c0:ff:11:b5:dd:
db:c9:bb:59:ce:49:11:bc:cb:a0:f8:52:8d:5e:96:
70:40:7a:12:0f:15:06:26:b0:45:0a:9d:3d:a7:c3:
69:6c:56:d2:25:f8:6c:f1:73:eb:07:be:9d:bb:89:
0f:54:06:b5:14:63:52:a3:e2:37:55:f0:92:84:da:
c8:0a:8a:ce:0d:05:84:b1:d6:76:6e:55:ec:6f:5c:
ba:5d:78:f7:5f:13:05:15:06:ea:63:28:fc:b3:16:
5b:f8:ce:4c:b5:20:b7:1c:c6:ac:08:ba:98:8d:60:
c8:20:53:30:63:d6:48:65:94:9d:1f:a0:34:75:f9:
49:ac:43:89:55:25:09:ea:5b:33:07:24:84:11:7c:
19:e2:b4:1c:67:c1:c1:ba:3f:a0:ae:27:83:10:2e:
04:e7:f5:19:22:2c:2b:d8:55:4e:43:c7:b0:34:85:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:6B:09:6B:E8:49:15:2D:AF:34:02:F5:3C:98:E2:A1:4C:58:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CB9C22B49E11EFBE9E4C77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f5:16:92:cf:ab:f4:ef:25:3f:90:b3:74:dc:b8:51:ef:01:
91:8e:39:0c:15:eb:71:99:b2:0a:83:d4:e3:3d:21:dc:08:0a:
4b:f9:af:b8:3e:f0:73:26:48:f2:32:27:1e:b8:6c:9b:1b:b8:
da:8b:cb:c0:c7:04:47:cc:b2:7c:eb:a2:9a:87:52:93:35:aa:
fe:6c:fb:e1:05:6a:11:62:ce:59:25:55:27:54:4c:30:8f:0b:
79:d4:87:7c:2c:e4:e8:2a:75:99:0c:96:14:21:dc:01:f5:f9:
ab:e1:3e:46:ce:f6:b4:24:13:50:30:75:33:dd:48:bc:33:67:
4c:a9:b0:0d:5c:67:c5:ac:05:60:1b:51:d9:be:e2:3f:18:11:
41:c1:11:d3:51:8f:f4:f8:93:2d:74:4d:8a:3c:b1:65:3d:ea:
f0:ea:52:5a:18:fa:b5:77:7a:0c:32:b8:87:57:bf:cb:82:31:
e7:98:d9:ab:d2:6e:cd:9c:1e:4a:25:f1:ee:db:7c:eb:a5:2e:
6c:03:80:8f:bb:88:a4:34:2c:12:d3:e4:74:6d:06:52:85:80:
cb:4c:cf:a9:c2:39:78:5c:11:8a:f6:e4:70:a9:6c:3b:c7:69:
ec:6d:17:c6:ce:3d:fe:7a:12:e4:03:cb:8d:67:3d:43:b1:6c:
51:1f:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:13 2025 by rpki-client