Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E806EE56C29A11EFADDD5A9C762E951A.roa
File: E806EE56C29A11EFADDD5A9C762E951A.roa (raw, json)
Hash identifier: 5DE8Enmay76632fnWTtrxSYPixkBjAw5RtFQpa6CTfU=
Subject key identifier: 55:36:C9:1F:79:EB:2B:D5:33:2F:54:47:45:E5:F6:05:17:84:CE:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E806EE56C29A11EFADDD5A9C762E951A.roa
Signing time: Wed 25 Dec 2024 08:33:24 +0000
ROA not before: Wed 25 Dec 2024 08:33:21 +0000
ROA not after: Mon 27 Jan 2025 08:33:21 +0000
asID: 5068
IP address blocks: 156.224.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59877 (0xe9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 08:33:21 2024 GMT
Not After : Jan 27 08:33:21 2025 GMT
Subject: CN=676bc354-2d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:0a:35:eb:bf:05:33:b9:27:40:34:4d:30:
6c:4f:ba:e9:e3:f3:e6:64:a0:8b:dc:3b:8b:25:a0:
64:f9:3c:3a:6c:58:20:97:64:72:f3:4f:da:8f:89:
7d:27:89:92:da:d0:2d:61:ea:22:1e:67:be:70:36:
d9:6b:22:e3:83:24:32:a2:e2:df:1d:3b:ea:6c:93:
9f:4f:8b:42:cb:d8:f3:35:a7:c4:78:db:14:b5:c9:
1f:c6:42:b2:70:1e:e8:95:94:51:a8:e4:09:33:f5:
6a:d4:d1:31:eb:e0:d2:e5:23:c2:b6:b8:4c:6f:6e:
cb:61:15:05:c3:3d:b5:9c:4d:d9:7f:f9:42:e9:e8:
8b:da:1c:be:29:54:3b:63:e0:05:bb:d9:9d:04:16:
bc:6c:35:73:fa:55:27:c8:e5:ab:7d:ca:6b:6c:3f:
8c:a0:3a:60:61:fb:be:ee:5e:12:5a:6a:d2:65:38:
ab:98:a2:7f:52:c5:fb:9d:53:dd:1c:c2:10:ec:c8:
c9:76:9f:ee:d9:49:ac:d1:6e:0e:c3:d0:9f:3c:9b:
6b:ca:3e:39:9d:9d:a6:8e:3f:9e:9f:1d:e5:9e:4c:
ac:c1:f0:bf:f6:e6:33:86:52:ab:74:f7:55:28:4e:
8f:92:a8:b4:90:ff:fe:46:c9:63:48:a0:54:1b:d3:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:C9:1F:79:EB:2B:D5:33:2F:54:47:45:E5:F6:05:17:84:CE:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E806EE56C29A11EFADDD5A9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:89:a2:7c:39:39:a0:d5:3c:a6:d1:43:c0:f0:24:0b:47:ef:
e4:f0:97:1f:04:3b:d6:c8:8d:a4:3e:f9:f1:5c:43:6a:67:49:
d2:20:3e:91:b1:11:39:92:fa:9c:4c:21:a8:81:6f:1a:10:c0:
80:b0:a3:2a:6e:8b:65:d5:db:ab:1a:72:81:60:8d:dc:ae:0f:
fc:8f:a7:df:91:96:3e:75:4a:ff:a1:15:26:b4:b0:99:85:ef:
08:12:68:da:65:96:91:36:e0:bd:eb:39:7c:1f:6f:78:71:08:
ec:bb:e3:9b:10:98:c5:66:53:6d:27:45:85:6a:bd:50:0d:83:
11:23:d4:90:c3:eb:9d:97:e1:a9:e4:ea:0f:5c:43:26:72:e8:
45:34:a3:ce:e6:d0:e7:fb:15:54:1c:ff:9c:fa:28:60:f2:63:
df:8d:ca:84:83:07:31:28:1c:c9:af:cf:4b:a3:af:f3:e8:f4:
68:b5:a1:6d:60:f6:f6:d9:1e:f6:47:00:6b:f9:8c:93:35:d9:
98:72:de:db:46:2b:ef:2c:1e:c0:27:86:50:8e:a3:52:62:43:
35:b3:c1:09:3d:ec:33:e5:c2:d9:50:25:96:13:ef:6c:4e:46:
90:83:8d:c2:f0:c3:a5:3a:35:77:55:c0:89:cf:9d:92:e4:f5:
79:47:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:31 2025 by rpki-client