Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BB003AB92611EF9A83F783762E951A.roa
File: C0BB003AB92611EF9A83F783762E951A.roa (raw, json)
Hash identifier: LTSJcGioeM1+8qqZuTaZaCyOKVIjXKk8eOlDryfbUbA=
Subject key identifier: 90:AE:95:9C:EA:21:9F:D1:5A:D4:60:10:93:C8:37:0D:AB:31:5B:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E311
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BB003AB92611EF9A83F783762E951A.roa
Signing time: Fri 13 Dec 2024 07:49:17 +0000
ROA not before: Fri 13 Dec 2024 07:49:13 +0000
ROA not after: Sat 25 Jan 2025 07:49:13 +0000
asID: 48031
IP address blocks: 156.246.146.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58129 (0xe311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:49:13 2024 GMT
Not After : Jan 25 07:49:13 2025 GMT
Subject: CN=675be6fc-190b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:2a:cb:3d:65:e9:bd:1f:c4:3f:c3:b6:3a:
0f:52:7d:59:d9:a1:fa:23:9f:7e:c6:4a:cb:ca:5c:
52:88:a8:9e:48:78:cd:82:0a:21:45:eb:c6:7d:e4:
ab:86:c9:1c:66:4d:ac:49:cc:dc:04:9b:5f:bf:76:
c8:d0:d9:43:b5:eb:b4:dc:97:8d:9f:5e:67:9a:2e:
dc:b6:fe:ab:ae:f7:68:be:24:24:88:69:10:c1:6b:
3b:cc:8b:b3:63:89:c9:7f:35:11:59:72:30:82:52:
9b:ec:f2:c9:d6:f7:82:40:29:33:0b:98:1d:7f:61:
6b:b8:4d:09:67:75:d4:58:a3:cf:de:af:5c:1e:3d:
fd:ba:18:05:82:91:c5:82:14:56:75:e8:d5:9f:d0:
bb:c9:e0:eb:ab:e9:25:c0:5d:4c:58:a4:9a:7d:45:
6b:b3:64:1f:8d:9b:8f:f2:9d:02:0a:aa:3e:45:d2:
f6:5c:65:f4:f5:66:05:87:d6:fa:bd:4e:e6:69:45:
d9:d1:ff:c7:b4:e6:74:7a:20:fc:a2:3a:63:b9:ad:
cb:43:98:b5:37:b8:bf:52:8d:30:6e:78:0e:04:83:
e5:8b:54:45:49:0c:a7:75:2a:1c:93:ae:6b:91:af:
02:d6:0d:0f:8c:a2:84:3b:22:e4:09:e1:c5:c9:0b:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:95:9C:EA:21:9F:D1:5A:D4:60:10:93:C8:37:0D:AB:31:5B:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BB003AB92611EF9A83F783762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.146.0/23
Signature Algorithm: sha256WithRSAEncryption
04:d2:92:bf:84:73:3d:7d:2e:c8:ec:fc:44:04:fb:51:91:e9:
53:c7:5c:97:09:99:87:91:13:b7:6a:d8:ff:cc:94:40:58:87:
1a:b7:bb:f0:64:f9:46:18:46:f0:de:b3:5a:28:48:5a:9b:96:
e6:27:21:14:ce:73:98:49:3c:b2:2f:0b:9b:30:b3:c6:32:bb:
68:28:3f:2c:6c:02:57:3d:51:f4:eb:0a:e5:1e:36:dc:e6:15:
e8:f1:29:af:c5:73:48:de:fc:21:34:88:80:e9:35:37:67:b8:
a9:27:ce:a0:ed:ba:e9:be:61:2c:b5:51:89:2d:6e:43:e3:5d:
41:69:29:99:8e:95:0c:98:ce:eb:eb:8b:fd:5f:a1:b6:a7:76:
7f:bf:48:28:4b:16:cc:41:09:12:dd:3f:b1:fe:ac:64:00:fe:
3b:da:a5:f0:8f:a9:9a:27:02:1b:2a:cc:d9:45:71:1b:3b:4d:
bc:e8:55:b4:3f:5f:a3:69:da:36:92:9e:6a:ea:77:df:22:e9:
79:bb:5a:c4:7b:d9:52:04:7b:dc:a1:67:f1:f8:ca:e0:26:0d:
29:a1:aa:b8:64:7f:06:fd:ba:22:5f:55:ad:34:8a:f1:ca:9f:
c1:ac:9b:ad:46:1c:20:68:2d:35:63:f4:9e:19:c7:9d:9d:06:
b0:bf:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:53 2025 by rpki-client