Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9299CA42CE7011EFB0B41F64762E951A.roa
File: 9299CA42CE7011EFB0B41F64762E951A.roa (raw, json)
Hash identifier: UEPqHVQOBaxrlLdtPFfw7tFF/+dEl4lxWYWD3b0mYsY=
Subject key identifier: 7E:A6:B9:87:5C:C0:6C:9E:BA:B6:58:AC:E3:A4:2B:58:47:A8:8F:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01032A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9299CA42CE7011EFB0B41F64762E951A.roa
Signing time: Thu 09 Jan 2025 10:00:36 +0000
ROA not before: Thu 09 Jan 2025 10:00:33 +0000
ROA not after: Wed 22 Jan 2025 10:00:33 +0000
asID: 5065
IP address blocks: 156.235.50.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66346 (0x1032a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 10:00:33 2025 GMT
Not After : Jan 22 10:00:33 2025 GMT
Subject: CN=677f9e44-824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:e8:9c:04:33:2f:f7:41:e1:9d:6c:19:9a:
dc:e4:e9:d5:f0:06:de:2c:95:da:60:ad:6a:2f:7b:
71:e1:d1:b3:a7:b1:f0:19:a8:22:6a:ae:fa:84:21:
e7:c5:a8:70:cd:7e:c8:fa:d4:57:eb:3b:b3:db:f3:
1e:ea:55:8b:07:e7:4f:ca:7a:8b:fc:4a:22:6d:e3:
82:9e:81:d7:91:fe:d6:89:48:17:08:27:93:d7:af:
1b:0a:a0:b4:fa:3a:2a:d2:63:bd:14:f2:47:15:a4:
90:08:52:a5:6c:af:97:44:3c:1d:1e:8f:2a:17:99:
56:a5:d9:c7:90:29:20:7e:5f:d0:ce:e1:43:ba:50:
d9:a9:18:b3:22:f5:3c:30:45:0f:f5:24:65:a7:3a:
45:08:30:a8:26:43:11:e5:ba:83:d4:8a:d3:c7:06:
47:91:87:52:1f:fd:38:73:da:39:42:88:e8:28:df:
e8:ec:c0:c4:96:28:6a:03:47:ad:b9:05:bc:da:6b:
79:03:49:60:24:36:66:70:55:9d:15:3a:04:82:3d:
95:6d:c8:d7:e9:bc:f7:10:0f:cd:c0:aa:83:21:b6:
5f:50:2c:f6:51:bb:71:ce:a4:ad:d3:31:5a:b9:8d:
8d:cd:1f:ab:dc:d8:0d:99:89:2e:da:80:55:65:60:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:B9:87:5C:C0:6C:9E:BA:B6:58:AC:E3:A4:2B:58:47:A8:8F:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9299CA42CE7011EFB0B41F64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.50.0/23
Signature Algorithm: sha256WithRSAEncryption
38:0e:ca:c7:1d:5d:5f:b4:7e:24:ea:0b:31:d3:e8:24:db:98:
36:82:c0:d9:b3:8f:c0:e5:38:af:26:82:d7:1a:9a:00:f3:c3:
a8:17:a8:db:56:62:60:4e:95:73:24:61:eb:2e:ee:8b:bc:ea:
7a:c9:ac:32:cf:5e:95:59:f5:c3:46:dc:c8:5c:c3:e3:ad:d8:
55:a2:1a:ff:46:1d:8d:fe:9f:b4:1f:fa:49:05:d2:ea:54:23:
88:d2:8b:85:ce:d6:bc:88:56:e5:3c:28:ad:ad:a2:52:4d:35:
13:ca:4f:98:d0:bc:f5:dc:24:5e:23:fe:c9:7d:f0:1f:bf:89:
a0:7b:0c:00:a1:1a:98:93:0b:e2:1f:93:24:e9:0e:c4:53:87:
6d:d3:16:84:bb:12:29:3e:c9:4c:33:65:47:8b:f5:1f:56:50:
ed:ad:05:5d:76:cc:1c:43:3e:9c:08:72:15:8f:2a:a0:73:86:
2f:75:b3:91:f7:80:c3:79:1a:51:74:6c:5e:e9:4b:bd:f0:7c:
f5:18:3c:b1:86:be:36:fa:66:68:29:53:39:64:7a:cb:66:bb:
ae:8c:7e:8a:10:64:a1:6e:0f:f3:df:7f:17:3a:3b:d1:90:5e:
87:47:d0:b0:ae:1f:9d:b8:97:fe:29:5c:13:d2:b8:de:2e:33:
87:ab:90:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:00 2025 by rpki-client