Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3F5F32D25911EFAF68E1A4762E951A.roa
File: DA3F5F32D25911EFAF68E1A4762E951A.roa (raw, json)
Hash identifier: dzyaf55e7YvF7QQr46i3pk2C+n/pDPS2e0/iLAlZ3iY=
Subject key identifier: D1:61:70:B2:6A:29:AB:19:C7:AD:CB:F3:D8:C6:97:11:2E:E3:66:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010722
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3F5F32D25911EFAF68E1A4762E951A.roa
Signing time: Tue 14 Jan 2025 09:28:03 +0000
ROA not before: Tue 14 Jan 2025 09:27:59 +0000
ROA not after: Sat 25 Jan 2025 09:27:59 +0000
asID: 149641
IP address blocks: 156.240.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67362 (0x10722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 09:27:59 2025 GMT
Not After : Jan 25 09:27:59 2025 GMT
Subject: CN=67862e23-3143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:86:36:73:be:f5:c9:02:78:89:a0:75:70:
0f:e1:13:db:88:49:a4:e6:7c:6b:e5:22:7d:24:f8:
8d:6a:6c:58:90:71:2b:1c:1b:b3:b2:04:39:cb:90:
15:3b:c9:d7:1d:df:1e:1d:31:7c:fb:e1:90:2a:82:
c1:ee:40:82:79:43:4a:7f:fd:2c:38:93:6c:07:95:
8e:be:df:95:fe:35:fc:58:d3:b0:6f:13:0b:e2:68:
38:a2:26:9d:b9:a3:d9:2e:f7:6c:a5:ca:b1:7a:1f:
ee:3e:d4:ba:49:5f:b7:8c:9c:21:e2:7c:66:10:4e:
5a:e4:f2:eb:5a:73:cc:33:a2:03:29:a6:e0:44:6f:
80:59:22:2d:d6:06:7e:60:17:98:24:40:22:36:45:
b7:4a:a5:92:28:8b:8d:a2:81:08:14:84:57:59:b0:
7a:88:1b:fc:19:ff:63:fd:4b:79:05:79:4b:67:34:
8a:6d:59:f6:68:fa:d2:03:07:19:a9:59:4b:2d:91:
a5:02:1f:d4:0d:34:ff:d1:bc:fb:67:49:90:99:74:
60:f5:9f:13:54:16:0e:19:2b:fa:2f:bf:a5:56:71:
cf:6c:1b:60:b7:85:49:7d:fe:ab:69:27:83:22:fd:
77:55:30:69:26:cd:69:c9:ff:ea:bb:6e:7a:37:54:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:61:70:B2:6A:29:AB:19:C7:AD:CB:F3:D8:C6:97:11:2E:E3:66:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3F5F32D25911EFAF68E1A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:56:02:50:ad:92:c2:3f:8d:3a:05:80:0c:9e:00:4d:66:73:
0d:81:1b:41:7c:a2:4d:10:47:02:28:d1:4c:39:fd:d5:23:78:
9e:c3:15:8d:22:8f:02:07:dd:75:71:5b:00:36:5c:a9:fa:b4:
3b:e3:9b:4f:9a:8b:41:4c:77:62:50:4f:ff:56:69:3c:03:90:
b6:a3:7a:30:d3:cc:d6:1e:e8:02:0e:92:83:89:63:6f:16:97:
65:eb:c0:88:9d:2e:59:a5:c3:e6:72:e4:d0:9e:5d:eb:ca:d6:
d3:f9:6b:c4:29:d0:ec:65:a0:20:67:c1:b6:63:bb:02:cc:a0:
27:f6:cc:24:07:fb:00:ba:83:8d:79:31:68:c4:d7:9a:f1:7f:
b6:4a:56:3b:a9:83:46:6d:a7:44:c7:b1:e6:31:ec:9d:9b:23:
1f:45:c0:e8:af:2f:af:6c:63:3f:e8:a7:bf:ac:12:82:20:08:
ce:d3:e4:4e:c4:34:5b:d7:0f:1d:d9:cb:a5:8b:15:0d:8e:d8:
ae:f2:ca:a8:89:92:84:2c:1a:5a:01:63:7f:60:70:3c:e0:f5:
77:df:b1:dd:94:e8:03:b2:15:52:77:1c:96:84:05:40:c1:14:
c5:8a:22:85:2d:5a:c2:cd:3f:c4:87:fd:cf:c1:e8:39:be:87:
c8:68:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:12 2025 by rpki-client