Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2F34816BA2611EFAAED2947762E951A.roa
File: C2F34816BA2611EFAAED2947762E951A.roa (raw, json)
Hash identifier: lAhT1Is3T2+xjgUyixA/MocmpSyaB5eJHKpUr37U8uo=
Subject key identifier: A0:CB:2F:D0:12:D4:C9:47:F3:06:72:D3:F8:78:81:68:1D:A2:DD:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E39E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2F34816BA2611EFAAED2947762E951A.roa
Signing time: Sat 14 Dec 2024 14:21:51 +0000
ROA not before: Sat 14 Dec 2024 14:21:48 +0000
ROA not after: Mon 20 Jan 2025 14:21:48 +0000
asID: 213828
IP address blocks: 156.253.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58270 (0xe39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 14 14:21:48 2024 GMT
Not After : Jan 20 14:21:48 2025 GMT
Subject: CN=675d947f-f63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:0e:b7:a3:8c:1f:74:d9:1f:85:2f:3e:c2:
38:8d:af:d9:a5:41:d0:e3:ef:db:56:90:b8:77:d7:
00:7c:26:58:3c:7f:da:5c:d6:b0:b0:1e:bf:43:4c:
be:2b:42:e5:7b:6e:e8:d4:1e:16:18:32:15:bd:38:
1c:5c:60:2d:df:cd:e0:39:bd:f6:ad:3e:cc:0b:72:
75:ea:ef:b6:40:6c:6e:da:10:5b:63:b1:1b:be:65:
1f:93:19:0a:5b:2e:bb:6f:ce:c8:92:66:62:5d:27:
a5:03:d0:fe:92:83:e9:0e:5e:05:d0:23:64:bd:91:
6c:95:03:80:dc:86:95:71:63:3c:66:3c:75:a2:84:
20:94:e9:bc:07:4a:76:a3:01:a2:0c:6b:76:d6:1b:
8c:0f:64:82:e9:61:74:ce:18:84:9c:de:82:97:8f:
7a:79:27:d1:6e:ee:7b:f5:40:63:35:44:be:33:fe:
b6:83:78:ee:59:10:94:83:05:76:ff:1f:68:6b:a1:
9c:54:9f:f4:89:e0:b5:c3:12:b6:f2:5f:dd:e8:da:
d4:58:f1:89:7f:1e:ab:bd:94:3d:7d:9e:7d:15:2a:
5a:a5:a5:4f:b8:9b:7a:47:0b:00:a0:96:e5:22:80:
e2:ff:83:23:99:ed:bf:b8:07:e2:87:ed:75:0a:37:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CB:2F:D0:12:D4:C9:47:F3:06:72:D3:F8:78:81:68:1D:A2:DD:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2F34816BA2611EFAAED2947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.230.0/24
Signature Algorithm: sha256WithRSAEncryption
13:18:f5:2a:f5:37:24:d2:0f:a5:06:00:e6:7f:b4:d4:11:87:
75:4b:ea:70:47:21:61:97:43:cd:5a:ba:44:9b:ad:f6:e2:35:
0a:8b:49:db:49:0e:36:99:24:21:4b:72:53:66:10:25:2f:3c:
5a:28:0c:af:a9:0d:b5:c8:46:6a:b6:74:40:d0:61:d0:0e:89:
c5:99:86:a0:2b:6c:14:0b:e6:36:6f:18:27:b5:07:9c:67:6e:
8c:18:1f:de:89:f5:89:6c:e6:16:ae:de:9e:ab:53:42:90:af:
7b:ca:d1:c4:92:e4:6f:37:13:0a:05:5a:27:39:a3:4e:e5:32:
3b:49:00:66:d2:b5:54:ff:b7:08:24:e6:d3:f7:58:13:b1:08:
24:e2:48:8c:c7:6f:75:04:22:52:9b:67:7f:73:8e:9f:13:72:
3c:1f:fb:a1:e8:e6:56:fa:ba:71:d5:29:db:70:f5:a0:a1:b2:
c2:88:12:61:87:88:81:98:76:37:77:12:60:bb:c5:ca:79:63:
ad:ac:ec:e5:08:dd:c2:22:3c:17:6a:83:eb:47:5f:97:4a:9c:
aa:39:98:93:d9:e8:b1:db:87:53:28:ad:71:b4:f0:8e:57:c5:
20:35:4e:05:de:75:f5:fd:00:b5:0b:1a:78:a5:3b:90:54:90:
db:fc:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:40 2025 by rpki-client