Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D14FC070CE5711EFAB3C4C48762E951A.roa
File: D14FC070CE5711EFAB3C4C48762E951A.roa (raw, json)
Hash identifier: qHxNgADwjNs+wcrbq/8DeQ4qOlFmA5pKyvm3d8ERlt4=
Subject key identifier: FE:5D:17:0E:69:87:7B:41:51:07:82:B0:C4:7E:5C:F5:18:8F:92:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D14FC070CE5711EFAB3C4C48762E951A.roa
Signing time: Thu 09 Jan 2025 07:03:24 +0000
ROA not before: Thu 09 Jan 2025 07:03:20 +0000
ROA not after: Wed 22 Jan 2025 07:03:20 +0000
asID: 5065
IP address blocks: 156.246.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66284 (0x102ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:03:20 2025 GMT
Not After : Jan 22 07:03:20 2025 GMT
Subject: CN=677f74bc-5547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:a7:5a:57:ff:7b:33:8f:97:8c:5c:dd:f8:
e5:70:35:6b:d4:73:c4:d5:a3:67:fb:eb:05:51:1d:
4a:5a:8b:ed:bd:57:28:f4:d9:ab:26:75:d8:37:7b:
d8:f0:55:f0:ad:a6:cb:ac:20:3a:12:d4:27:8e:66:
de:eb:11:6c:72:80:d1:4c:de:77:ae:47:c5:e5:d9:
f5:a2:4e:a1:70:3c:f4:49:1c:33:e4:ee:8a:df:c9:
ce:33:3f:a3:4e:ad:b3:9d:e8:ac:15:a3:06:40:2e:
a5:74:79:06:4b:d3:b9:2a:15:51:ad:ec:ae:c5:a6:
69:51:ab:cf:ec:85:47:e6:41:3c:fa:b0:ac:89:e5:
73:c6:2f:0c:bc:6b:ef:0e:6c:e2:c7:94:e2:1e:74:
7c:a9:59:60:7f:6c:6b:33:64:02:f3:08:bb:9c:e2:
ce:0b:80:39:d2:65:41:a5:87:16:c7:e9:19:28:d8:
c9:06:95:0f:0a:26:e9:40:87:ad:28:99:a4:7f:0d:
e7:6d:9d:de:64:c3:c5:bc:6a:97:b8:c8:38:bf:ae:
d2:fc:17:d9:53:62:ef:74:8b:7c:e1:aa:1c:28:cb:
35:b6:62:38:7d:9e:0d:16:aa:d3:ad:9a:45:2a:69:
c1:ac:6e:a5:51:5d:a7:82:f4:04:62:b0:05:b5:d7:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5D:17:0E:69:87:7B:41:51:07:82:B0:C4:7E:5C:F5:18:8F:92:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D14FC070CE5711EFAB3C4C48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.100.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ca:05:6a:fe:af:84:05:b9:70:92:db:20:81:ad:76:2a:20:
11:1d:80:2b:d3:63:24:9b:64:5e:51:46:a6:1a:e6:64:16:2f:
cc:83:01:3f:b4:65:97:43:dc:74:26:3a:4a:2b:0c:95:c1:b8:
0b:1c:e1:63:4c:c0:3c:3a:82:3d:11:ad:79:42:22:be:52:3a:
7c:ce:10:64:7e:31:4e:2d:3e:f7:68:bd:51:e0:90:53:39:76:
d5:cc:c7:db:bb:81:f5:c7:56:08:32:62:47:62:ea:52:1b:43:
91:66:70:57:53:2a:70:6f:cb:e3:7f:96:08:e3:61:a8:9d:b2:
0b:4e:f2:8c:f5:ce:0e:bf:74:62:d7:a5:87:33:de:6d:cf:2f:
ab:e7:a3:46:6c:59:8a:98:dd:93:79:22:89:da:b5:c8:2d:1a:
55:df:59:03:87:be:99:46:0a:49:01:34:e5:41:26:2a:f9:2b:
85:2a:35:66:2a:a6:7e:65:49:59:ed:65:4f:bd:44:f4:65:f7:
df:c0:9c:86:57:4a:ca:0e:d7:27:fd:b8:a8:e7:99:b0:8c:26:
c3:e6:a6:bd:7d:6d:c5:b6:5b:fe:55:a6:4e:39:ad:47:9e:22:
07:6b:da:55:0f:7a:11:2d:6f:21:8e:d0:9e:ff:b6:79:14:a5:
13:46:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:47 2025 by rpki-client