Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2F8324CCF5E11EF8CF57F4B762E951A.roa
File: D2F8324CCF5E11EF8CF57F4B762E951A.roa (raw, json)
Hash identifier: 7y/8wEZ/ahW2U2lXkf9rVJD9QJDeHQzlGQ5jdBK/j6s=
Subject key identifier: 89:9B:6D:46:ED:89:32:18:9C:C9:F3:14:3A:AA:29:9B:42:18:CA:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010557
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2F8324CCF5E11EF8CF57F4B762E951A.roa
Signing time: Fri 10 Jan 2025 14:26:05 +0000
ROA not before: Fri 10 Jan 2025 14:26:01 +0000
ROA not after: Wed 22 Jan 2025 14:26:01 +0000
asID: 141372
IP address blocks: 156.238.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66903 (0x10557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 14:26:01 2025 GMT
Not After : Jan 22 14:26:01 2025 GMT
Subject: CN=67812dfc-9dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:fa:28:f2:55:4e:0f:53:56:36:74:04:fa:
7c:78:df:72:ee:7d:2a:dd:ca:3f:ee:ea:07:7a:61:
37:d8:ae:64:37:a1:0f:93:c3:ee:c6:f5:27:55:56:
03:0d:8d:0e:5a:7d:00:49:6c:a9:86:ca:d0:89:15:
a4:3e:cc:81:a1:68:81:56:b2:db:f1:35:e7:f5:84:
b9:69:66:b5:3e:be:d3:52:22:d5:87:99:ae:03:a9:
de:72:13:1f:3f:42:1a:5d:4f:73:a8:b7:91:64:01:
03:a9:7d:a8:19:3a:75:63:ca:88:ec:cd:0a:f8:7d:
11:a5:f0:b9:81:36:b4:9b:4e:8b:d9:0e:92:28:e4:
39:d5:f3:e1:48:7d:1a:86:fa:2d:07:a0:05:db:f6:
e2:c1:34:d0:9f:7c:fa:7c:43:ea:5d:90:98:e7:41:
a1:36:1e:13:87:f0:87:03:22:0b:1d:f8:93:e3:7e:
55:4e:45:c6:fa:a4:cd:31:99:ac:27:c8:c5:63:53:
ea:8e:cc:97:7f:24:1d:50:05:0a:2d:7f:97:bd:d9:
40:af:85:6c:6a:ab:33:74:6e:10:e9:60:50:0d:3b:
10:88:6e:0d:6b:bf:d7:c6:e2:df:59:48:58:a9:c3:
1f:02:ae:28:e2:f0:bd:0c:d4:bc:99:6c:c7:f1:89:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9B:6D:46:ED:89:32:18:9C:C9:F3:14:3A:AA:29:9B:42:18:CA:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2F8324CCF5E11EF8CF57F4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:65:4e:5d:dc:6c:50:26:ca:6e:bf:41:94:b9:1f:64:63:33:
0a:8a:8f:7f:4b:a7:37:00:71:51:96:7c:9a:53:55:3a:59:ce:
27:9c:4b:19:c4:17:fe:62:f1:a4:a6:cf:56:0b:ef:65:ef:a5:
52:99:fa:e9:c2:7f:6a:2c:fb:ae:86:bb:a1:f0:5f:d0:67:d8:
c8:73:4f:d1:63:a3:14:b7:f1:bd:c8:1f:12:a4:71:88:53:30:
79:bd:42:e6:03:30:43:d0:e9:fe:dd:4d:30:a8:10:d3:06:28:
26:a1:6a:e9:0a:14:c5:e2:90:42:1d:0e:82:bf:87:fc:c2:29:
33:16:19:ed:42:75:2a:10:71:ca:be:58:09:94:fc:f0:ac:7c:
76:92:13:43:14:65:d5:50:4f:79:6d:6f:e8:23:08:d7:64:74:
3c:71:54:52:a3:0e:d3:e5:77:ce:d3:8a:2e:cb:a3:5a:05:fc:
eb:3d:70:f8:e5:f5:22:e2:a0:4b:92:a0:1e:26:ef:04:45:46:
b9:d0:73:83:17:75:ee:70:8e:4b:34:3d:d3:9c:2c:8b:ea:55:
da:17:80:fb:bb:fc:01:4c:84:53:b5:87:b5:f3:41:83:16:ec:
2d:01:a3:b6:29:5c:b8:e1:0d:ee:ca:ee:45:d0:d7:e9:62:22:
df:b2:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:41 2025 by rpki-client