Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE09C038B21911EFA0EB43A8762E951A.roa
File: BE09C038B21911EFA0EB43A8762E951A.roa (raw, json)
Hash identifier: J3nnuGNj9uWKZbcWaPAMFbSOph3Pi2wR+AZ+QaDp3hc=
Subject key identifier: B9:26:08:9E:33:A9:E7:ED:9D:15:4C:09:60:A2:AB:1E:C6:36:A4:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE09C038B21911EFA0EB43A8762E951A.roa
Signing time: Wed 04 Dec 2024 08:28:30 +0000
ROA not before: Wed 04 Dec 2024 08:28:26 +0000
ROA not after: Thu 23 Jan 2025 08:28:26 +0000
asID: 63139
IP address blocks: 156.229.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57206 (0xdf76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:28:26 2024 GMT
Not After : Jan 23 08:28:26 2025 GMT
Subject: CN=675012ae-9b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:76:35:81:bb:28:ba:33:06:56:b5:68:1b:
20:f2:90:bf:e8:79:2a:c6:13:43:d4:06:7e:d2:48:
40:f6:29:af:fc:0e:9b:9d:c3:21:29:34:bf:aa:60:
d2:45:2f:8e:27:3e:ee:b0:9b:47:75:d0:73:28:09:
99:54:f8:5f:ff:2e:c1:19:62:01:df:20:0a:fe:b4:
9c:5c:16:b9:db:d3:44:d1:2d:3a:f7:2d:d4:1e:cb:
3f:db:71:10:a3:b1:63:31:21:ff:29:01:da:ab:54:
b8:ea:ef:c8:f3:c0:bc:61:7a:ce:1a:fd:20:07:b4:
70:c3:91:98:15:0d:e1:45:f2:88:12:f0:70:19:3f:
38:a6:16:1b:6d:53:9b:78:96:98:b5:82:91:0a:fc:
21:6d:2d:ae:6f:79:3b:c7:54:ec:5f:40:fc:d9:fe:
c2:3e:f5:2b:67:83:98:b5:a1:50:f6:68:03:7f:d8:
3a:59:80:5e:a2:8f:78:58:10:7d:36:d0:d4:ce:ec:
d8:eb:1e:f1:f7:07:05:b9:92:9f:5a:6a:9e:0c:f1:
cd:b5:f0:b3:ed:e2:01:17:8c:52:0b:51:e0:dd:98:
50:bd:76:19:aa:5a:a7:37:01:a3:01:59:d3:5d:33:
af:71:4c:85:83:d0:fe:6f:5c:f0:2d:8a:fd:57:5f:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:08:9E:33:A9:E7:ED:9D:15:4C:09:60:A2:AB:1E:C6:36:A4:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE09C038B21911EFA0EB43A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.49.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cd:48:f3:33:9f:f9:4c:bc:67:22:cd:9a:38:d1:9a:6e:50:
43:f7:31:d3:69:28:94:29:6a:db:10:d6:ca:54:07:ba:c2:db:
7f:96:93:db:20:c5:30:6e:1d:84:39:76:ff:c4:79:49:a9:70:
a6:46:82:0b:5e:c1:d7:64:88:e6:49:c5:99:04:0a:c1:44:7f:
ac:99:4a:a3:1c:09:b2:d1:6f:6e:a1:44:41:cb:dc:26:13:07:
f9:38:72:2d:b9:3c:3e:38:9e:28:b7:b5:18:86:ea:31:b2:0f:
60:47:94:0e:02:ed:94:d7:8d:35:ca:b6:79:49:f3:bb:2f:07:
bb:04:bd:4e:8b:76:34:35:80:5f:02:6e:15:d7:2d:29:ba:d6:
3a:49:59:e4:12:47:4d:1f:98:50:35:e4:aa:50:66:57:9c:81:
87:b8:29:e2:f1:95:38:1f:ff:99:3a:21:30:7d:5e:ac:30:f0:
c4:4a:f1:21:91:fd:ec:2f:e4:8a:86:86:f1:2d:4f:9b:09:86:
ba:3c:52:13:78:18:5a:c3:0a:96:48:95:62:73:8b:a6:67:ba:
6b:42:ca:66:74:5b:2c:96:b9:48:90:53:f8:15:73:6a:78:08:
7d:81:12:10:98:fa:8c:be:6f:b4:5f:9e:21:f1:35:1b:8c:7b:
4f:80:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:04 2025 by rpki-client