Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDC6CDECC0811EF91477786762E951A.roa
File: EEDC6CDECC0811EF91477786762E951A.roa (raw, json)
Hash identifier: YawVLdFrEpx1DJEHSAAfJwa2a198rmh1XhCmWIXPy5M=
Subject key identifier: 02:CE:B6:01:77:3F:FC:11:DE:75:05:F6:70:BA:85:44:86:53:DE:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F851
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDC6CDECC0811EF91477786762E951A.roa
Signing time: Mon 06 Jan 2025 08:33:41 +0000
ROA not before: Mon 06 Jan 2025 08:33:37 +0000
ROA not after: Tue 21 Jan 2025 08:33:37 +0000
asID: 39600
IP address blocks: 156.237.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63569 (0xf851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 08:33:37 2025 GMT
Not After : Jan 21 08:33:37 2025 GMT
Subject: CN=677b9565-ceb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:fe:97:e8:29:d1:84:36:4d:43:6b:38:78:
6c:45:fb:04:08:55:f8:37:84:b8:fa:b9:c1:80:9b:
d2:7d:1a:08:e6:f0:39:df:91:e1:ad:6d:cf:e4:24:
95:ee:aa:6b:56:41:bb:0e:38:58:6c:9f:0a:39:69:
3f:61:59:02:78:e8:15:85:a7:8f:20:6f:f7:a5:7a:
4c:93:77:f7:37:8b:90:47:d5:51:af:c0:7d:db:69:
1a:c4:d1:67:23:be:08:57:59:77:15:f4:a7:44:22:
51:d7:37:58:0c:4d:88:49:8e:0b:4e:3b:ca:1c:32:
07:ee:d2:65:2a:51:25:74:0b:ce:15:5c:a5:fc:56:
0a:b5:f4:a0:92:84:cb:bd:24:50:30:21:fc:ed:89:
6d:20:d6:bf:87:b1:e0:29:04:d4:2b:dd:f5:21:b0:
7e:66:88:d9:a8:c9:51:23:eb:46:ea:f0:2b:4c:07:
11:32:78:aa:fe:f3:8f:a7:2c:bb:87:55:6d:de:c1:
5e:4d:e7:ff:a1:fa:1a:1a:91:c3:df:be:e8:cb:db:
8e:e4:74:84:9b:d4:4e:72:ce:1f:4f:85:a2:4f:4d:
a0:b2:0b:2b:5a:e8:4e:79:d9:d3:4f:a5:b4:b0:00:
cd:53:be:4a:94:65:23:40:81:ff:b6:df:26:f6:be:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:B6:01:77:3F:FC:11:DE:75:05:F6:70:BA:85:44:86:53:DE:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDC6CDECC0811EF91477786762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.108.0/22
Signature Algorithm: sha256WithRSAEncryption
95:a0:95:28:93:03:c0:e8:84:79:4e:d0:7f:8d:e5:61:fe:7b:
42:e2:19:b9:f6:61:60:81:f6:8b:cc:00:0f:80:e7:72:d6:ef:
a6:a5:33:7f:69:b0:9c:c0:ac:c8:3f:d3:e6:85:c7:06:37:c0:
6a:b7:e9:8d:9c:77:3f:6a:e6:5b:1f:ab:a4:3c:61:a0:86:a9:
78:77:78:81:93:ac:cc:d8:d0:b7:56:ff:bf:e5:62:37:3d:3d:
d2:cd:cb:29:8a:aa:ba:e9:4e:39:d7:dc:60:71:25:db:3a:32:
d8:83:8f:55:3a:70:f2:f5:0e:b2:7b:3f:33:7d:2c:62:79:5f:
d6:5a:ee:a3:2c:b2:d6:84:cf:a0:49:77:9e:9d:0e:aa:c0:68:
e0:0a:1c:8c:7f:c0:e5:b5:0a:a5:30:3d:27:7f:36:af:1c:0f:
53:98:16:bf:db:0f:08:46:27:17:b5:f5:be:6e:f7:d5:a9:07:
4c:c6:5e:89:10:d5:e4:4a:bc:7c:d1:e0:b3:e2:65:5d:b4:81:
7c:28:b0:8a:96:b9:05:93:68:3b:61:8c:f2:9b:dd:8f:ba:04:
1a:84:e6:57:c2:ae:a3:e9:0c:f5:93:e7:ef:64:c6:fe:5d:cc:
72:35:06:1f:4f:08:1a:ab:4e:b8:0f:52:97:76:22:3f:34:1a:
75:df:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:06 2025 by rpki-client