Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFFD9FCBD0F11EFAC33449A762E951A.roa
File: FCFFD9FCBD0F11EFAC33449A762E951A.roa (raw, json)
Hash identifier: gNpGByOIQHcByZCOmUXXRE4lHUZUqcXc4A+fW+uMNzw=
Subject key identifier: F4:DD:1B:63:4C:20:5C:7D:8C:8B:CF:19:1D:FA:AF:48:20:5B:33:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E476
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFFD9FCBD0F11EFAC33449A762E951A.roa
Signing time: Wed 18 Dec 2024 07:16:24 +0000
ROA not before: Wed 18 Dec 2024 07:16:20 +0000
ROA not after: Thu 23 Jan 2025 07:16:20 +0000
asID: 203020
IP address blocks: 156.243.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58486 (0xe476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:16:20 2024 GMT
Not After : Jan 23 07:16:20 2025 GMT
Subject: CN=676276c8-2edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:ed:62:bb:cb:e7:e4:44:82:93:f9:f1:81:
c0:e2:6a:80:58:7b:00:b7:44:a1:4e:b5:5e:e3:fc:
d4:0f:77:e3:16:36:74:0b:bf:d1:6b:b6:1f:b8:41:
e8:d7:eb:fa:4a:08:8d:86:ee:d8:73:a9:49:5b:ba:
cf:91:1a:2a:56:21:e8:7f:57:d7:1f:89:e8:c3:00:
4f:74:66:0b:f8:7f:54:fa:73:5e:53:69:bf:2c:a5:
32:4c:a1:48:04:ec:24:e0:fe:63:5e:01:f8:09:1d:
e5:c1:a8:f2:8b:2c:e6:25:7f:9d:7a:2b:7c:dc:62:
20:44:ad:a1:15:c9:4e:86:a5:5d:96:64:d2:66:4b:
d1:7d:df:f8:28:92:a8:2d:c9:94:a1:db:cb:82:d6:
6f:86:f8:4c:5f:28:6f:65:e7:06:d4:37:7b:22:fe:
1f:85:a2:59:45:00:41:94:8f:12:53:66:3b:a6:66:
fd:2f:77:8e:20:80:4b:e7:30:68:db:2b:88:85:09:
eb:e3:06:f9:9d:4c:67:20:e6:57:b6:be:73:0f:31:
27:59:27:5a:03:88:93:3c:6b:4d:3b:65:09:c3:6a:
88:28:e7:ae:a9:d6:03:52:44:f7:45:e2:8d:7d:43:
dc:b2:05:61:9d:59:4b:05:13:c1:b7:1f:07:a3:8d:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DD:1B:63:4C:20:5C:7D:8C:8B:CF:19:1D:FA:AF:48:20:5B:33:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFFD9FCBD0F11EFAC33449A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:4d:10:2f:ae:8d:a6:cb:ad:68:7f:6a:81:9c:db:64:55:a4:
37:cb:3c:dd:a7:58:d1:d4:ac:a5:3a:e6:ab:23:1f:e2:25:85:
ab:76:53:64:fd:77:7e:e3:ac:38:20:69:a9:bb:0f:55:b2:16:
47:c6:6d:06:f1:5c:a7:75:c5:20:37:1b:00:ee:7c:f2:9c:0e:
af:d0:1f:17:73:f6:00:e5:7e:38:01:ee:67:f6:63:a0:2d:e5:
88:f1:14:d8:59:ce:c3:fc:55:f3:87:58:5b:ad:c6:66:8e:19:
43:e7:fd:70:47:5f:e8:cf:fe:a5:c8:f4:0e:7a:a7:40:3c:18:
d2:86:22:03:70:29:ad:16:99:8b:ab:f4:74:2c:73:55:68:21:
3b:3a:54:29:cd:d5:08:34:2d:cf:79:0c:8d:25:36:fa:c2:26:
75:df:4d:8f:6b:bf:22:85:1e:06:02:41:da:87:87:42:57:37:
d5:de:8e:b7:c5:53:ce:51:b9:7d:69:53:9b:c5:b2:cf:ef:a3:
db:47:c6:36:af:44:e8:d3:f8:66:ad:dd:c7:85:0b:dc:9a:05:
95:f1:6e:db:d8:93:57:60:b2:cf:6b:d7:0c:61:79:cb:fa:fc:
de:ab:e8:ba:90:5a:61:50:80:f9:f1:9c:d0:5e:af:9e:90:ba:
c9:2c:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:32 2025 by rpki-client