Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3C6DE7A02F311EF976AA9F6007001B1.roa
File: F3C6DE7A02F311EF976AA9F6007001B1.roa (raw, json)
Hash identifier: dJHweNz603Xl5OLxb0xpvRS6Ju4WVsKnM+uBCyCXmOc=
Subject key identifier: A2:A7:74:FD:C8:4F:92:14:91:E4:7F:E5:17:3B:3F:BD:57:95:B8:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3C6DE7A02F311EF976AA9F6007001B1.roa
Signing time: Thu 25 Apr 2024 11:07:06 +0000
ROA not before: Thu 25 Apr 2024 11:07:03 +0000
ROA not after: Sat 04 May 2024 11:07:03 +0000
asID: 63888
IP address blocks: 156.254.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34035 (0x84f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:07:03 2024 GMT
Not After : May 4 11:07:03 2024 GMT
Subject: CN=662a395a-440c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:d5:7e:45:75:65:75:3a:4a:9b:bd:69:35:
ad:60:a0:b7:ef:65:95:93:f6:61:07:76:16:2c:92:
d5:f2:8f:b4:b7:65:4c:fa:fe:22:6b:26:ff:0a:e2:
db:05:8f:66:dc:6e:ea:b4:40:58:c9:3b:a3:67:b4:
b1:a7:08:be:95:65:41:52:cf:7d:09:7e:66:de:cc:
da:ea:58:b9:ca:a4:bb:28:2d:08:63:59:47:16:f4:
8a:d7:05:dc:7b:47:1d:56:cd:b7:d1:89:4a:b5:3d:
be:0b:30:08:d8:8f:c1:ba:cd:6a:f3:58:47:60:7e:
ec:58:e3:7a:0e:75:36:9a:52:35:e6:62:53:86:bf:
8c:9d:69:66:aa:3a:b8:e7:ec:bb:58:02:64:9a:9a:
6e:71:3e:49:fd:05:fa:37:bd:ce:18:80:89:56:47:
46:65:48:16:8b:7b:18:d7:85:b4:7a:e2:87:29:31:
59:90:6d:b4:4c:99:f3:05:ab:99:99:ac:f3:8e:c6:
2e:fe:10:51:8f:97:ba:2c:d6:1a:a2:0f:12:e7:a1:
95:d3:b3:9d:c4:fd:64:e8:c2:0b:4c:dd:95:a1:f0:
2e:12:cb:df:ef:3b:5d:e7:f9:9c:2f:5d:4b:a8:a6:
2b:ca:46:13:49:fb:73:16:27:b9:9a:9b:fd:9e:7c:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:74:FD:C8:4F:92:14:91:E4:7F:E5:17:3B:3F:BD:57:95:B8:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3C6DE7A02F311EF976AA9F6007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:21:12:84:c7:04:dd:60:1f:b5:93:41:38:d0:bf:d1:90:92:
1f:91:e1:0c:c5:84:8c:64:a7:cc:60:94:c1:26:27:47:76:40:
97:76:7c:45:ca:3c:3a:b2:9b:fe:7f:c7:7f:56:b6:05:ba:9a:
71:e7:0a:fc:6f:05:23:c6:16:d5:bd:47:03:b2:2e:28:04:5f:
40:2c:59:33:f7:64:ad:80:52:39:63:f7:6d:de:f9:6a:8f:6f:
43:14:e4:0d:21:c6:48:dc:e0:bc:46:2f:e0:90:55:30:8e:08:
cd:c5:04:ff:96:5e:cd:e3:e8:71:0b:2f:57:c9:2a:b4:d2:21:
9f:38:20:92:37:7b:bd:aa:75:51:c3:5d:8f:16:a4:04:9a:92:
4a:91:29:f1:1f:53:9a:cc:6b:95:23:7f:6c:0a:f1:17:17:f7:
16:8c:64:b2:a7:79:25:5c:6b:00:3b:cc:c5:18:0a:c9:84:33:
0e:75:2f:14:21:bd:18:90:89:2a:73:96:1c:c7:e4:33:a9:95:
2f:c4:5d:41:65:4e:8b:44:8e:4b:5c:40:fc:6e:7d:32:01:3e:
ba:14:23:92:58:25:5f:3e:b1:3a:95:cb:3b:be:95:a8:22:07:
00:23:8a:08:cb:dd:04:3c:82:77:47:a7:0a:f7:45:ec:30:3d:
13:2b:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:07:07 2024 by rpki-client on console-fra.rpki-client.org