Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/986BE0EECCD211EF98CBB189762E951A.roa
File: 986BE0EECCD211EF98CBB189762E951A.roa (raw, json)
Hash identifier: qEgCpPiztVPKBloC8NFFUiVjPKe3Qpx7y0JT+JR8VGw=
Subject key identifier: AC:3C:7B:B4:88:54:9A:9D:89:74:84:26:A8:04:70:8C:6D:8F:5E:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FADF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/986BE0EECCD211EF98CBB189762E951A.roa
Signing time: Tue 07 Jan 2025 08:37:14 +0000
ROA not before: Tue 07 Jan 2025 08:37:11 +0000
ROA not after: Tue 04 Feb 2025 08:37:11 +0000
asID: 212238
IP address blocks: 156.226.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64223 (0xfadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:37:11 2025 GMT
Not After : Feb 4 08:37:11 2025 GMT
Subject: CN=677ce7ba-8de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:db:a6:9e:e5:ae:37:ad:ad:87:e2:32:28:
2c:f8:1e:6b:1a:6e:8f:64:2d:c5:7a:92:b3:b5:56:
58:5b:3c:8e:2f:cf:97:0b:5f:2e:b6:19:76:a4:e6:
b7:27:70:07:a6:93:66:b5:b8:0d:e8:eb:6c:9a:e1:
fa:8d:80:0a:a4:ca:97:53:b3:ff:83:96:af:35:e8:
c0:b6:86:9e:1a:8c:4f:1f:a1:9a:a9:46:db:e1:19:
9e:77:ca:ab:92:bc:3b:e9:8e:95:c0:ac:5d:f2:a8:
74:c8:50:72:9a:d3:b2:3a:64:cb:15:53:70:80:81:
6c:bc:d6:b5:20:f8:25:0d:2d:20:2e:b3:a1:85:05:
41:45:41:30:05:64:74:98:a0:c3:ef:6a:44:0f:01:
55:2c:b1:af:99:98:b3:e2:ce:58:8e:3d:2d:1a:cd:
51:f2:46:d2:b2:d0:3e:2c:98:c4:ee:cb:6b:90:85:
fd:69:d4:e1:64:c3:2d:21:76:1b:82:ce:9c:1c:50:
62:e5:fa:47:37:6e:53:e3:84:3c:77:0a:4e:5d:f9:
0a:4a:f2:70:e1:57:a0:75:61:20:32:01:5f:f7:0f:
f5:53:19:a8:64:45:c4:0b:08:0e:da:fa:b8:5d:2d:
75:b8:ce:d4:aa:f6:37:07:56:09:a3:d6:f9:ff:fd:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:7B:B4:88:54:9A:9D:89:74:84:26:A8:04:70:8C:6D:8F:5E:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/986BE0EECCD211EF98CBB189762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:12:89:55:2b:5d:3d:9d:3a:65:91:f8:cc:2c:51:d8:c2:cb:
db:15:c4:1a:6f:0a:2a:2e:63:ab:ab:73:08:ec:4a:2a:4b:a0:
f8:3c:10:1c:3c:41:cb:e9:58:c6:db:31:f4:f0:68:c9:7e:ea:
82:9d:f4:53:a9:09:e6:29:54:41:5c:b9:da:73:ca:98:f9:ec:
62:07:ee:d5:b2:3d:3d:c0:42:4d:9f:a7:80:5a:5a:f7:42:d4:
a8:e3:05:f5:61:d7:0c:43:c2:a9:46:56:95:54:f2:8a:9e:f1:
39:13:d8:a0:af:5c:f3:99:ac:3e:08:72:bd:69:94:45:85:82:
80:2b:6a:e2:90:47:cf:da:26:de:0f:f2:fc:ce:4e:87:f0:65:
0f:3e:5a:1f:cf:41:dd:82:02:4e:e2:46:73:99:ec:e0:4a:68:
a8:f1:ef:67:8d:97:b4:f7:87:a7:f6:9f:88:d1:19:da:3b:b7:
ac:40:b5:28:c6:d6:8e:bc:47:44:f5:fc:16:54:ec:06:3e:63:
bc:f5:d4:05:01:d1:c3:52:66:3a:5f:b9:c8:f1:d8:9e:77:0e:
29:12:6a:39:88:3a:f9:eb:e3:82:21:2b:12:27:5b:6c:06:5c:
57:e3:bf:23:c1:cc:09:0b:4e:c0:8e:e5:90:d3:83:e1:26:b3:
ce:cf:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:10 2025 by rpki-client