Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DADA090CC10011EF8411D367762E951A.roa
File: DADA090CC10011EF8411D367762E951A.roa (raw, json)
Hash identifier: eOEqhn66OiXq3F0726uUaOMlQQA0k8JVpRPyU+rrl4w=
Subject key identifier: 03:16:E6:B9:22:77:8A:84:55:9F:B9:E9:E5:AC:DD:C2:D5:43:CE:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E816
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DADA090CC10011EF8411D367762E951A.roa
Signing time: Mon 23 Dec 2024 07:38:09 +0000
ROA not before: Mon 23 Dec 2024 07:38:05 +0000
ROA not after: Sat 01 Feb 2025 07:38:05 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59414 (0xe816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 07:38:05 2024 GMT
Not After : Feb 1 07:38:05 2025 GMT
Subject: CN=67691361-f6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:8b:5c:0a:b6:01:2a:4e:72:da:8c:c4:db:
27:52:a0:3e:7c:00:27:75:ef:a8:91:35:c6:c3:f6:
d3:c9:a3:91:d3:c0:66:48:0a:e2:cc:49:10:e0:f9:
44:75:b2:1b:a0:5c:24:18:f2:cb:3a:90:61:12:b8:
05:d0:26:55:5e:b9:be:ac:dd:3d:ee:07:ec:d6:78:
59:68:93:9a:e3:97:83:32:03:ef:14:69:25:84:13:
98:67:9f:90:cd:7d:4a:40:8b:dc:5e:a3:1e:86:d5:
56:b2:b8:65:08:30:ef:06:7d:9f:ee:88:85:8f:d6:
79:a0:2e:a6:45:c6:90:04:aa:62:ff:ed:0a:11:b1:
eb:06:c7:60:df:43:d4:63:df:2d:61:b7:e6:73:c9:
48:d2:f5:11:10:14:80:4a:d4:bd:60:b2:70:f1:a1:
31:b1:3e:65:64:50:ae:a2:07:13:07:18:96:20:77:
7a:55:f2:91:7c:af:aa:24:88:ff:a9:8b:00:90:52:
b9:ad:82:34:3a:fa:16:31:50:04:d9:3f:ca:51:07:
21:9d:74:35:23:36:56:18:33:e5:14:63:41:f0:3a:
72:ee:c7:09:be:8b:ae:33:aa:d3:00:13:70:62:50:
ff:61:85:7d:05:e9:f3:15:b3:49:15:12:9a:1f:e5:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:E6:B9:22:77:8A:84:55:9F:B9:E9:E5:AC:DD:C2:D5:43:CE:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DADA090CC10011EF8411D367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
97:22:b5:21:40:49:53:42:6e:af:20:03:84:47:b5:0a:ff:d6:
d9:e9:25:49:f1:b1:f6:85:5b:36:0a:e3:1f:34:27:b4:a7:6f:
ea:f6:71:f1:c2:55:85:be:87:04:fa:cc:45:6b:05:d5:ec:fb:
9c:d6:07:1a:f3:cd:91:0c:d6:a3:34:eb:1b:47:64:26:40:f7:
db:30:47:46:e5:ed:02:e8:cb:b3:2e:21:48:ba:fa:f3:55:68:
c9:d0:da:a4:4d:9c:7d:63:54:0b:4c:b2:13:96:66:5e:59:fa:
80:e3:86:96:da:27:48:99:ea:a3:85:57:32:e7:8f:bf:d9:8f:
ed:55:4b:5c:fd:2b:d4:4f:44:d2:27:e8:db:3b:99:1c:74:b6:
7d:51:64:9f:ee:87:a6:d3:14:32:8c:14:0c:9c:5a:b4:6d:d4:
42:cb:a1:69:14:c4:21:9b:42:e2:c9:7e:1b:9f:0a:2f:6a:54:
e2:8f:60:99:db:4a:9d:0b:12:57:b8:44:97:16:f5:22:f3:d9:
0f:ed:98:0d:8d:13:1e:9d:4c:22:58:e3:9b:01:86:7d:48:82:
3b:20:d7:1d:61:02:29:fc:da:5f:4e:57:1d:dc:8e:fd:3b:cc:
06:e7:0c:86:55:df:02:7e:f6:71:92:b4:54:70:7f:ad:39:36:
37:c5:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:35 2025 by rpki-client