Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6131C42CEA311EFA76103A5762E951A.roa
File: C6131C42CEA311EFA76103A5762E951A.roa (raw, json)
Hash identifier: e3AH6zeqcnvPUHqW8YyGTWpu0TPkMiguq6fBEnIGmAI=
Subject key identifier: 19:6B:B2:2D:C7:D3:20:21:FB:AE:E3:95:10:01:E7:45:75:34:33:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010446
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6131C42CEA311EFA76103A5762E951A.roa
Signing time: Thu 09 Jan 2025 16:07:07 +0000
ROA not before: Thu 09 Jan 2025 16:07:03 +0000
ROA not after: Fri 24 Jan 2025 16:07:03 +0000
asID: 39600
IP address blocks: 156.252.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66630 (0x10446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 16:07:03 2025 GMT
Not After : Jan 24 16:07:03 2025 GMT
Subject: CN=677ff42b-e9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:d2:7e:a3:90:65:d9:00:29:df:fb:b6:6a:
db:d0:e6:6b:ee:f7:af:65:33:65:f2:4b:f5:6c:eb:
ff:3c:b2:32:8f:09:32:73:76:57:c2:2a:83:80:c2:
3f:85:04:58:13:f7:86:ca:88:36:c7:54:1a:ff:8b:
20:0f:62:04:63:7b:0f:7a:6d:58:ad:10:35:0c:be:
a4:da:13:21:c3:fb:d4:d0:d2:c2:ae:84:3a:fd:61:
eb:77:70:4c:a1:ba:7f:96:6f:7d:3a:bf:dd:6e:9b:
14:9b:e9:cd:13:84:a7:e7:69:f8:09:c0:9c:86:3b:
cc:c6:dd:17:98:ed:1b:68:dd:da:5d:f7:e8:f8:50:
26:f9:02:1c:56:62:14:b9:7e:06:07:40:68:79:4f:
d2:31:5d:11:44:c7:79:31:31:66:12:cb:21:f7:ae:
8c:5f:c4:9b:75:4c:9f:0f:6b:e8:0e:a8:f5:59:9b:
d7:9e:ea:c5:93:a6:d0:1c:18:56:5e:11:d6:49:06:
a4:83:32:5b:7c:a3:f7:07:78:c9:ec:64:70:06:97:
df:6d:be:a2:3b:9f:e5:f0:f5:01:8a:0f:a0:bf:29:
42:3b:8c:09:cc:e7:e8:72:f0:5b:ea:d9:ee:23:c2:
ff:8b:00:ea:3e:df:85:6f:00:3b:94:09:43:54:32:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:B2:2D:C7:D3:20:21:FB:AE:E3:95:10:01:E7:45:75:34:33:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6131C42CEA311EFA76103A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.10.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f0:7c:8e:63:88:43:71:41:e1:e8:99:f6:1a:3a:73:1e:db:
8b:67:fb:39:2c:89:84:e9:49:1b:cf:8d:db:53:25:1d:38:18:
a6:2a:44:23:e9:56:47:b5:75:91:9d:86:96:24:9e:63:c0:f0:
d8:4d:0d:7b:40:5b:68:6a:42:28:bf:c4:d3:d4:93:ad:46:ce:
1b:34:a6:a9:cc:fc:f3:18:13:9d:56:5f:43:49:6b:c1:01:ac:
b7:4c:19:28:06:82:f5:dc:5c:2d:ac:50:62:9e:57:da:cf:d9:
35:8e:dd:ec:75:a9:bc:f0:af:f8:ad:19:88:77:ec:17:0a:98:
2f:c8:8f:20:87:1f:de:78:cd:de:b9:76:ab:2f:33:bf:a4:ae:
10:14:e7:97:b1:46:ef:a8:87:f6:8b:95:f3:d3:d5:2f:39:c3:
14:d3:50:fb:f7:3b:0d:22:87:f1:b8:a1:ce:12:8c:76:7c:7f:
9b:2d:29:08:88:2b:b7:94:33:f7:ea:d9:01:92:62:96:62:e3:
0d:fb:c9:2a:00:86:bc:55:eb:9e:14:a9:07:01:16:9c:08:3d:
af:bb:61:e6:9c:63:ec:1b:ad:db:83:00:f1:1a:3e:d3:da:af:
f1:2a:a6:ed:ee:f1:66:9b:ad:d6:bb:a1:ab:91:2c:29:54:a4:
4c:00:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:53 2025 by rpki-client