Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C67D2EB92411EF9F441D77762E951A.roa
File: B9C67D2EB92411EF9F441D77762E951A.roa (raw, json)
Hash identifier: u+hoRcjiaO8iw6ZXWWHsPL3nEuKX4vMeWj80ez+dDhQ=
Subject key identifier: C0:FF:66:B9:6F:EE:55:6D:94:55:BF:F4:F0:F1:14:B1:C3:E8:EF:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C67D2EB92411EF9F441D77762E951A.roa
Signing time: Fri 13 Dec 2024 07:34:46 +0000
ROA not before: Fri 13 Dec 2024 07:34:42 +0000
ROA not after: Sat 25 Jan 2025 07:34:42 +0000
asID: 44559
IP address blocks: 156.246.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58103 (0xe2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:34:42 2024 GMT
Not After : Jan 25 07:34:42 2025 GMT
Subject: CN=675be396-b94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:04:77:e9:b1:34:13:a8:be:05:54:0a:fc:
c5:9b:9d:a9:f3:17:4b:1f:45:50:93:64:38:c2:cc:
26:3b:00:42:1f:76:48:9c:88:7d:6b:63:d5:9d:49:
9c:48:6b:58:03:1e:18:77:6c:f9:d9:35:84:48:e9:
b6:46:93:d7:5e:2f:b0:04:00:ce:4a:b3:a3:c7:25:
3e:e4:ab:81:48:0d:c4:a0:1f:f7:2f:c8:4d:66:d6:
75:47:04:20:7b:09:3d:ab:2b:8c:72:fc:d8:31:82:
7b:9c:23:99:26:2e:7f:20:bd:31:35:22:f7:65:31:
89:36:50:96:a0:de:bb:ad:0b:19:3f:dc:c8:22:be:
80:94:d0:a5:40:50:6b:1e:77:cc:95:47:05:91:14:
41:d7:0f:16:05:e0:53:57:00:ff:39:dd:db:d6:2c:
d5:b6:1d:07:0b:52:c2:5b:5f:da:aa:d6:a1:0e:77:
d1:16:fd:68:72:15:a5:ce:69:60:d3:7b:8f:33:50:
87:e3:af:95:e5:42:66:96:66:21:de:37:5d:c0:37:
a6:5e:55:7e:f8:52:3d:51:5d:53:d1:90:80:b7:08:
65:28:5c:f6:e1:ea:f8:82:8b:22:1e:3a:4a:6b:4f:
67:52:d8:cd:62:f6:68:35:78:dc:f5:1b:0d:58:c0:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:66:B9:6F:EE:55:6D:94:55:BF:F4:F0:F1:14:B1:C3:E8:EF:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C67D2EB92411EF9F441D77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:c6:17:b5:56:43:e1:12:3a:e8:ec:09:e6:30:8b:17:9d:3b:
2c:f1:75:6a:1c:f5:d9:5c:a6:88:03:94:2c:19:4b:d2:b8:ff:
f4:bf:90:94:3b:b8:a4:1c:bc:87:a6:7b:22:ed:3d:fc:05:6c:
8b:fc:e9:d1:9f:d1:7c:2f:2e:5a:14:5a:93:f3:9f:3e:78:a9:
a9:d2:1c:29:35:d9:e0:67:e4:28:7f:1e:35:d1:5d:d0:7b:ef:
2b:a6:bb:4c:69:2c:6e:92:ac:cd:22:28:6e:86:a2:32:23:29:
79:e1:f1:e0:58:bb:f9:85:c7:df:f2:09:5d:60:19:45:ad:50:
8d:19:24:1c:4f:4c:33:a4:0b:93:34:fe:39:0b:bf:0c:ff:08:
1a:59:8d:aa:78:c8:c5:4c:df:e0:13:2f:ec:4e:2d:b5:fd:dc:
e4:1f:e6:54:2d:1b:4b:b8:4c:e6:4b:92:95:40:93:3c:94:6d:
87:35:a4:01:e2:b7:42:d3:78:a8:a8:6d:23:0a:73:28:41:bd:
80:be:88:be:3b:73:23:67:ab:bb:7e:e0:3a:a8:dc:d5:51:8f:
9b:f5:cf:10:71:e3:82:8b:e7:f7:90:e9:27:3f:1c:6a:0f:99:
2a:06:29:47:91:e5:2a:49:f6:4a:b6:d5:0b:87:1d:f3:18:44:
05:1e:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:20 2025 by rpki-client