Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25B0EB2F16C11EFB8D6F25D762E951A.roa
File: B25B0EB2F16C11EFB8D6F25D762E951A.roa (raw, json)
Hash identifier: PVXW+jU1ybMBWz7N/bCtiM0LRyw0MQma6l3BC5Cwh+0=
Subject key identifier: A4:C0:34:B6:61:DF:E7:4C:B3:8A:05:5D:B4:EB:62:7D:77:A6:39:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0129AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25B0EB2F16C11EFB8D6F25D762E951A.roa
Signing time: Sat 22 Feb 2025 22:31:02 +0000
ROA not before: Sat 22 Feb 2025 22:30:59 +0000
ROA not after: Sun 30 Mar 2025 22:30:59 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76207 (0x129af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 22 22:30:59 2025 GMT
Not After : Mar 30 22:30:59 2025 GMT
Subject: CN=67ba5026-f89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:cc:78:be:11:a2:9d:eb:9b:03:7e:4b:80:
4b:8c:aa:f8:e1:fb:93:c9:3a:8d:ed:74:ec:ed:4c:
80:93:16:32:a1:c2:c3:48:44:f5:a9:e2:12:02:66:
e0:77:81:a1:28:bf:e1:5e:a4:b5:85:71:c2:86:20:
09:ed:ce:b1:0c:0d:52:45:48:df:a8:72:ba:94:91:
a5:6d:75:9f:36:d5:3a:15:53:fc:47:b4:be:fe:42:
de:b2:5e:3e:da:14:47:a5:d4:25:60:c1:31:99:b6:
99:9b:3f:af:f8:32:bb:4f:0f:f2:55:31:e6:93:bb:
b6:5e:ef:02:15:07:a5:20:26:14:73:14:6f:22:51:
1f:24:f5:44:14:72:21:4d:07:3a:d4:8e:7d:17:ce:
a0:5b:5b:23:19:d7:f0:65:a0:85:00:35:81:4d:8f:
78:47:51:ac:c8:b5:d8:32:77:f4:e5:80:df:de:87:
87:34:19:41:e6:7e:48:35:43:28:ce:2c:32:37:91:
b3:7c:f1:cf:33:84:88:2f:a6:66:3f:26:98:5d:97:
7f:a7:99:fd:59:90:8a:bc:05:d3:95:62:18:b1:1b:
00:01:80:90:c6:c0:85:cc:be:31:34:50:0d:da:bd:
f7:af:0d:e2:88:1c:bb:d7:dd:c9:b7:d0:68:7b:d0:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:34:B6:61:DF:E7:4C:B3:8A:05:5D:B4:EB:62:7D:77:A6:39:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25B0EB2F16C11EFB8D6F25D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:dd:a8:79:cb:f6:37:ec:15:a7:6d:54:f8:72:57:c6:a6:e6:
22:9a:13:d5:a1:f0:7f:26:37:5f:8b:1c:d6:d6:43:49:1f:fa:
68:a7:fe:18:ca:0e:16:29:89:ad:4c:02:ff:89:3d:a2:42:9f:
18:7a:02:0c:08:12:13:ee:a3:4e:44:3c:6b:7d:25:0e:dc:c0:
da:d7:79:f6:e1:80:8b:54:a7:d1:5b:1f:d8:1c:b4:42:96:59:
d4:a3:0f:4a:bc:29:e9:08:e8:6f:88:ed:99:ca:44:87:95:5a:
c0:99:ad:8c:cd:c3:b7:77:08:97:99:d1:89:76:a8:c4:b3:8c:
b7:a7:c3:83:0d:ba:ff:fd:bf:86:e7:1b:4d:63:11:86:48:f3:
c4:ab:a5:44:fc:08:4e:9e:5e:3f:94:1b:e2:f7:d9:a7:3f:5d:
05:4a:73:dd:25:54:9a:a2:f8:31:1e:7d:d6:44:4e:04:bc:23:
14:0c:1a:2c:a1:05:5f:1b:a9:00:bd:4e:c3:0b:94:58:a4:c0:
01:1b:c4:74:02:87:4f:fc:ae:a9:4e:f1:0f:a9:05:35:48:85:
58:a1:72:df:72:02:63:af:92:d5:ef:9a:6a:b3:1d:73:21:93:
cd:37:8e:20:7b:40:2e:4f:03:fe:7f:c6:5f:83:c6:38:de:37:
1e:fa:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:44:29 2025 by rpki-client