Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C4CB66BEAD11EF997ED242762E951A.roa
File: A1C4CB66BEAD11EF997ED242762E951A.roa (raw, json)
Hash identifier: 79IJgNJIkLs6mEYRKAMG9yq/8XKOgo/ZhE79pw8bU9I=
Subject key identifier: 50:53:BC:F3:7C:FC:36:44:42:89:D4:6E:0B:BE:34:46:51:0C:12:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E731
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C4CB66BEAD11EF997ED242762E951A.roa
Signing time: Fri 20 Dec 2024 08:37:22 +0000
ROA not before: Fri 20 Dec 2024 08:37:19 +0000
ROA not after: Fri 24 Jan 2025 08:37:19 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59185 (0xe731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:37:19 2024 GMT
Not After : Jan 24 08:37:19 2025 GMT
Subject: CN=67652cc2-a963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:38:f8:8c:c1:e6:f2:e8:e1:99:6a:c3:8e:
38:d5:c0:fe:43:7a:1f:06:96:2f:0f:f0:ea:58:3d:
88:46:6d:ab:3e:a3:fd:32:23:73:c4:f6:d5:72:79:
f1:09:e8:73:5a:88:da:a7:a6:5e:9b:c8:93:79:be:
3d:66:b8:f4:8d:f8:60:06:f5:fb:0b:f0:27:b5:ea:
9e:a2:9f:a2:71:81:b8:c9:23:ce:f8:8d:ce:f9:57:
44:db:ed:6f:2c:23:26:c0:6c:d8:e7:91:26:90:2e:
84:6e:2f:88:d3:06:88:e5:60:71:7f:69:be:ab:4d:
00:50:0a:fc:68:f3:80:e8:1d:d4:0c:04:04:88:d2:
9e:c6:0f:12:45:0e:0c:e9:0f:d6:32:e9:fe:5f:45:
89:d5:a8:e0:fc:65:ec:c1:ae:ea:96:a0:bc:9b:1d:
b7:6c:0d:a5:eb:fb:7b:32:ca:5a:3c:ba:76:94:12:
6d:d8:b7:f0:5d:31:e9:e3:3b:fb:d0:2c:95:b1:63:
9f:f2:21:b1:39:c6:27:20:81:06:78:8c:b1:1f:eb:
88:4e:49:32:9f:d3:68:f7:29:b3:40:42:87:5b:40:
eb:ba:f6:60:ec:c3:b3:96:40:5f:9c:27:38:30:03:
4c:5c:64:c5:40:c7:ac:19:94:fa:4a:b1:10:60:4a:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:BC:F3:7C:FC:36:44:42:89:D4:6E:0B:BE:34:46:51:0C:12:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C4CB66BEAD11EF997ED242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5f:24:8a:c0:40:6b:45:09:87:0a:08:c5:6f:d1:40:4c:b8:
a2:9d:7c:02:cf:c4:cf:b9:3d:ba:5c:a4:73:49:d6:21:ea:37:
52:19:0b:4b:b9:fd:e6:c5:a2:f6:87:83:2c:bc:d0:86:5c:86:
3d:82:ba:dd:3e:db:0b:5e:38:6b:02:8d:e3:5e:aa:1b:c3:8e:
78:c9:cb:46:04:ec:2b:b2:b7:51:5a:5c:b3:0b:5d:98:78:d9:
54:a7:ca:96:19:ae:8d:44:9d:f0:a7:c9:0d:80:a4:8d:a4:bc:
a6:76:0f:8e:0c:96:33:70:57:26:48:ef:80:fc:a3:29:fb:b6:
cb:38:4a:44:d3:7d:4d:69:b7:e6:8a:12:e0:24:b9:a7:30:65:
d3:32:ae:d6:89:15:7e:51:ed:e6:db:4c:eb:38:47:4e:c3:fe:
74:9f:bc:60:c2:7e:64:4e:ca:fa:f8:b5:bb:00:a1:c0:7a:af:
b7:76:9e:f8:dd:33:3d:f2:55:96:f2:24:07:f5:c3:15:c4:bb:
27:ae:b0:3e:ca:98:9a:fd:8b:0d:e8:f2:43:b2:d5:1c:24:09:
97:c5:fb:20:47:55:ff:15:34:49:22:c8:b2:3c:12:86:cc:72:
2c:66:ea:1d:84:6f:a2:3c:6f:0c:ce:93:67:0a:81:64:62:55:
98:b3:b1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:18 2025 by rpki-client