Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA3030ACB92511EF9525BB7D762E951A.roa
File: AA3030ACB92511EF9525BB7D762E951A.roa (raw, json)
Hash identifier: Hn+OVbTkyfPYxz9BK4KDgwJ+pBKBVWLob4k/O6tZnhQ=
Subject key identifier: EE:2D:4E:9E:8F:7A:DF:7D:77:7C:00:20:55:B3:9D:4A:4D:E0:BE:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E303
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA3030ACB92511EF9525BB7D762E951A.roa
Signing time: Fri 13 Dec 2024 07:41:29 +0000
ROA not before: Fri 13 Dec 2024 07:41:26 +0000
ROA not after: Sat 25 Jan 2025 07:41:26 +0000
asID: 44559
IP address blocks: 156.246.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58115 (0xe303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:41:26 2024 GMT
Not After : Jan 25 07:41:26 2025 GMT
Subject: CN=675be529-8b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:0a:e4:74:04:3f:72:f8:cf:ae:5c:33:ef:
18:f7:11:0f:be:dd:05:4c:dc:9c:8c:95:f5:37:6a:
4b:d8:1b:65:0c:71:8b:b4:23:fe:62:a9:b3:72:4d:
42:23:c0:9f:90:7c:7e:13:59:48:e7:80:c2:43:e0:
d2:5e:0a:ec:ce:8f:28:47:a0:41:3c:68:e1:3e:d5:
fd:6a:7e:bb:96:df:68:bc:01:05:52:d0:bd:ea:38:
44:d3:81:43:3e:ed:22:ca:9a:fe:b3:ff:53:f3:c4:
d2:35:d0:96:b7:94:8b:e1:55:17:36:59:38:97:aa:
fd:cd:03:a8:a1:42:9b:ef:5f:ff:04:1c:60:00:ed:
3f:57:83:3a:37:58:cd:15:5d:28:67:e4:36:dd:bb:
ef:76:46:79:c8:ac:99:cc:61:d9:c6:bf:59:d6:df:
2c:d6:a1:5d:5a:70:59:b8:10:8b:b3:ce:49:40:5c:
04:ad:99:1f:3a:66:bb:cd:5b:b1:c2:54:77:40:c3:
e0:07:0c:0d:6b:2c:84:e0:9b:25:ad:1a:97:78:17:
82:40:64:2f:a4:b6:c3:31:9b:03:df:75:7b:74:97:
5b:3c:b7:1a:31:12:e3:bc:23:15:91:36:98:2e:11:
c2:ed:c6:7c:42:91:96:cb:67:21:91:22:c6:c5:4c:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:4E:9E:8F:7A:DF:7D:77:7C:00:20:55:B3:9D:4A:4D:E0:BE:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA3030ACB92511EF9525BB7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.176.0/21
Signature Algorithm: sha256WithRSAEncryption
35:e5:7b:ff:9c:5a:22:18:16:c0:b8:bd:d5:a4:6e:1a:a6:d9:
71:01:40:90:9d:2d:57:7b:5b:08:f1:25:65:d6:e1:9f:aa:02:
c6:ad:15:a6:5d:1a:7e:54:60:b4:02:8d:1d:0b:36:78:28:f2:
31:ea:81:d6:59:30:64:e4:dc:71:45:e5:f8:ef:14:4b:68:81:
64:2d:cc:6b:d0:77:5d:0c:d5:5a:9a:38:82:4e:0d:5d:95:d8:
c5:75:1a:99:23:23:6b:02:36:b9:bc:3b:7b:c1:8e:ea:6d:73:
f7:e8:81:0b:ab:b3:ca:e0:e2:0e:58:5d:fd:e8:2f:e2:83:e7:
dc:e3:5b:a7:43:f4:23:d4:a2:f0:bf:64:14:e2:03:52:8e:59:
ae:e0:f3:d4:d7:58:9f:88:e9:53:e3:07:72:88:5d:ec:5f:d1:
1c:3a:4d:41:4b:9e:ec:e3:f6:2c:dc:a2:81:0a:3b:10:f8:87:
10:1e:5f:a9:2b:b2:d2:cc:a6:eb:60:22:18:21:0c:73:5b:a7:
7a:8c:6b:ae:f8:9c:0b:6d:ec:58:a8:13:0f:69:8c:dd:15:a2:
d8:90:ad:75:3d:38:21:0b:ee:24:48:c9:34:5f:dd:52:4f:ca:
38:aa:1b:5f:17:a4:30:7f:37:b5:22:ed:bf:ee:45:bb:45:e6:
45:cd:e0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:00 2025 by rpki-client