Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9491383ECEFD11EFB7956466762E951A.roa
File: 9491383ECEFD11EFB7956466762E951A.roa (raw, json)
Hash identifier: WVjh1IIacNdVw6HLLRquUvtHObg2qMiD+IFR7oDXjE4=
Subject key identifier: F6:8B:A0:4E:CA:8E:64:5D:6A:46:54:B1:5C:C2:DB:44:FD:02:FF:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9491383ECEFD11EFB7956466762E951A.roa
Signing time: Fri 10 Jan 2025 02:49:59 +0000
ROA not before: Fri 10 Jan 2025 02:49:55 +0000
ROA not after: Mon 27 Jan 2025 02:49:55 +0000
asID: 137547
IP address blocks: 156.245.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66747 (0x104bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:49:55 2025 GMT
Not After : Jan 27 02:49:55 2025 GMT
Subject: CN=67808ad7-a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:2d:f3:ab:3c:78:04:5c:1c:6f:f9:0a:04:
b5:0a:f4:66:93:2c:22:07:e8:30:30:13:0d:d6:7d:
03:74:6d:0b:53:8c:3d:bb:d2:c9:5c:fd:62:8e:38:
12:ae:df:1c:e5:0f:85:b8:dd:ff:49:7a:a8:b1:83:
ea:91:a6:66:d8:79:2f:ac:1b:41:8f:48:c6:ad:ba:
73:95:62:83:6f:e2:c6:a0:84:84:5b:2c:f0:6b:98:
fc:18:bb:18:d4:58:d8:c5:1e:8c:e8:c8:14:fa:47:
73:65:20:69:d9:81:76:af:cb:e4:30:0a:58:e5:fd:
48:18:e4:04:aa:90:7c:1a:d1:3a:d7:d5:5b:3c:03:
c5:c3:69:cd:14:73:62:8d:af:e7:a0:9a:95:cc:da:
7c:1b:9b:2a:1d:e5:f4:02:af:c5:3b:d9:35:eb:0d:
51:4d:01:45:6d:05:ca:07:b7:01:f4:67:c8:a6:e6:
1b:82:32:64:e4:0a:2a:8b:4f:c9:f5:bd:9d:23:9f:
c1:a1:81:33:47:f0:f1:57:26:b1:7f:4a:c6:fc:a9:
a0:0d:fc:0d:a9:64:e3:92:1a:fb:f4:f2:88:0b:45:
96:87:9f:f5:14:41:22:87:7c:2e:d2:6e:2c:4c:c5:
d1:91:dd:d0:2e:0b:b6:91:a6:3c:77:c9:98:91:8f:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8B:A0:4E:CA:8E:64:5D:6A:46:54:B1:5C:C2:DB:44:FD:02:FF:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9491383ECEFD11EFB7956466762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
53:f7:a1:81:2f:bc:39:0c:4b:c2:a4:8f:cc:ce:d7:36:ea:10:
7c:c3:3c:ea:f8:b3:c9:20:6b:6b:d3:6a:fc:e1:66:d4:16:2f:
50:76:f4:5f:ee:1a:c4:e5:72:30:b9:bc:6a:d5:f3:c0:76:b9:
f1:9f:9f:a4:b2:94:b5:b1:38:2f:86:4a:70:1f:2f:d2:d8:46:
08:be:77:7c:dd:ca:40:8b:63:48:2a:32:46:36:d6:19:8a:eb:
68:e5:f7:b7:94:58:2e:f6:87:f8:35:b0:cc:12:82:48:40:41:
df:9f:12:e2:16:74:3f:2f:94:f2:88:6f:3d:72:c2:9a:9b:59:
78:b9:bc:ff:ba:d4:c4:e4:e3:03:93:74:ca:5f:bd:96:35:d3:
25:e4:65:c0:42:b4:8d:d2:f0:92:46:d2:b9:c9:75:ac:4f:7a:
58:26:a7:c5:c5:a3:27:bd:72:29:44:4c:b4:ee:61:a7:db:04:
3e:82:4d:85:91:63:d1:8d:36:5c:0e:30:1f:22:cf:85:02:b0:
1f:ac:6d:0b:99:fd:07:a4:ab:68:dd:5e:1f:45:22:8e:c4:b5:
16:c2:2f:09:e4:01:24:30:89:39:ab:50:59:b8:cc:d3:31:be:
ae:be:f1:15:2e:07:63:9a:0e:39:4e:3d:a8:fc:96:cf:17:0c:
9a:94:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:28 2025 by rpki-client