Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE63080E7F0D11EFBE21D94A762E951A.roa
File: FE63080E7F0D11EFBE21D94A762E951A.roa (raw, json)
Hash identifier: 3qFcbF/4L9dw9MAZ0G+C3BtuDV5pyK3Apn2ubvWEWb8=
Subject key identifier: 8B:CB:5F:7A:88:97:84:9F:CA:BA:A7:ED:2E:FE:5C:7D:F9:81:D0:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE63080E7F0D11EFBE21D94A762E951A.roa
Signing time: Mon 30 Sep 2024 09:25:55 +0000
ROA not before: Mon 30 Sep 2024 09:25:51 +0000
ROA not after: Thu 21 Nov 2024 09:25:51 +0000
asID: 63139
IP address blocks: 156.229.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48567 (0xbdb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:25:51 2024 GMT
Not After : Nov 21 09:25:51 2024 GMT
Subject: CN=66fa6ea3-17bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:d6:d9:74:2a:04:c6:c9:89:dd:c1:2f:1c:
49:a5:48:ce:04:ee:2a:78:4e:1a:cc:e6:9a:a6:a2:
a1:f6:ba:66:fb:10:44:dc:ef:72:72:f8:a3:f5:36:
46:75:ee:b7:ff:f0:d0:7d:e7:f6:bb:50:b4:a5:3c:
5c:6e:8f:3d:b4:f2:53:8b:67:c9:c1:f0:8e:f1:51:
96:a3:c2:9f:f0:f7:bd:0d:9a:b8:4b:3c:fd:3b:ca:
37:60:38:2f:2b:ab:f2:cf:fa:88:ec:eb:b7:67:c5:
b2:a3:b0:e9:d6:1e:12:f7:e5:34:d5:32:f6:c1:5c:
c3:9a:7e:0c:5c:ab:e4:92:84:24:2f:5e:5b:ee:52:
e9:28:5f:6c:fa:d9:c7:80:b4:87:59:7b:de:e2:7b:
35:2d:18:b0:5d:09:ec:06:31:d4:b7:fe:d0:c7:b7:
bf:ee:90:58:86:a8:2b:dc:10:2f:45:af:32:55:c6:
0d:8e:06:30:db:24:f4:3a:57:c2:75:1b:66:33:60:
e1:f7:0d:c2:64:99:5d:f8:ef:18:e2:49:dd:22:25:
9c:92:ac:9b:61:04:02:c5:27:bd:7b:55:e0:d6:0a:
69:3a:f2:38:1e:f7:e0:a0:f4:05:e5:56:8d:08:80:
1d:ac:d4:2e:65:b4:cd:2f:84:2b:44:8d:d9:3b:89:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:5F:7A:88:97:84:9F:CA:BA:A7:ED:2E:FE:5C:7D:F9:81:D0:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE63080E7F0D11EFBE21D94A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:45:9f:ba:cd:00:58:fe:17:68:27:f9:c4:cf:ff:0d:dc:44:
42:d6:9b:6d:4c:f9:3a:78:a3:83:bc:d6:88:c6:aa:71:00:30:
c3:6d:84:7b:b5:d8:ad:00:73:15:7b:a9:1c:f9:ea:20:ae:48:
bc:fc:c3:05:24:38:b7:37:52:25:75:97:43:56:dd:4f:8e:a7:
a1:38:17:3f:51:b6:1a:81:c2:d9:b7:fd:96:22:8e:69:ef:63:
7d:b9:be:6c:ea:c0:07:64:71:13:c4:26:dc:a1:3f:9e:e4:a8:
6b:a5:6b:a3:05:1a:79:11:85:c5:ee:ae:42:b9:65:92:6d:b3:
1e:75:be:87:f4:cc:47:f6:57:99:0f:ce:38:29:2d:c3:36:70:
67:09:86:12:b1:01:79:46:10:eb:3c:00:e7:bd:42:70:88:a0:
6a:43:19:de:0b:f8:27:15:72:2c:52:8c:98:5b:3b:a9:af:17:
23:27:2d:ab:99:6b:b7:c0:7b:f5:a6:5e:d4:c3:31:e1:6e:61:
79:57:65:6e:55:f4:4a:db:11:8c:39:cf:25:8d:fc:97:55:f8:
b4:d0:ba:8d:20:6e:2c:d2:11:9b:21:14:a2:54:dd:5d:d1:57:
56:02:5c:43:05:22:9b:da:ac:cb:d4:9a:d3:7f:fe:cc:05:24:
26:d1:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org