Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/72540D9EC4B311EBB30CC580F8AEA228.roa
File: 72540D9EC4B311EBB30CC580F8AEA228.roa (raw, json)
Hash identifier: yu/UxYfOk+FMtYt+RxzcLkd+ORJqmOsrj885xpfpGME=
Subject key identifier: EF:B2:49:0D:5E:D7:F9:2C:2B:B8:97:38:94:48:02:0F:1B:24:B0:B6
Certificate issuer: /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial: 02F0
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Authority info access: rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/72540D9EC4B311EBB30CC580F8AEA228.roa
Signing time: Thu 03 Jun 2021 21:34:16 +0000
ROA not before: Thu 03 Jun 2021 21:34:05 +0000
ROA not after: Fri 03 Jun 2022 21:34:05 +0000
asID: 327822
IP address blocks: 169.255.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C81DAR, serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Validity
Not Before: Jun 3 21:34:05 2021 GMT
Not After : Jun 3 21:34:05 2022 GMT
Subject: CN=60b94ad8-1281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:36:ca:a8:9b:ac:ba:30:5b:5d:e7:be:21:
91:1d:ee:81:89:ac:79:6e:56:07:c3:aa:5d:9c:82:
c3:74:e7:68:12:ba:d6:46:5e:f3:d0:c7:82:f2:3d:
e2:04:66:89:7c:a8:e7:03:cf:8b:40:24:40:02:ab:
0c:dd:d2:97:e8:38:c6:f0:3d:c1:6e:be:51:ca:eb:
83:e3:8f:ff:96:68:2b:3b:b1:a0:3f:cb:95:bf:27:
da:8c:29:25:3c:ae:b4:2b:f8:85:c7:07:ca:95:3d:
aa:8c:51:ec:97:92:81:95:05:e1:f3:01:7b:8d:8f:
be:d7:6f:6b:17:7b:61:c5:97:d4:5b:16:d8:75:37:
16:e3:2d:a0:49:0b:d8:fc:db:9d:db:db:da:05:1e:
ac:c5:80:2e:9a:2e:b7:5c:71:3c:d1:64:9e:8f:7c:
a2:b6:25:5d:7b:33:0b:5f:1e:6f:89:a2:2b:d3:25:
48:fd:02:e8:25:8c:c5:a5:46:a1:65:24:7c:fa:27:
8e:6f:2c:ce:81:ea:1d:4d:9a:f5:b5:5a:8a:ec:2d:
56:b4:02:c8:74:dd:07:9c:25:d8:61:34:86:82:cc:
da:34:10:af:6e:74:49:4c:46:02:ba:7e:9d:66:8b:
b8:b4:be:ce:5a:7a:19:52:49:ec:20:db:b1:b2:08:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:49:0D:5E:D7:F9:2C:2B:B8:97:38:94:48:02:0F:1B:24:B0:B6
X509v3 Authority Key Identifier:
keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/72540D9EC4B311EBB30CC580F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.20.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:c1:fc:7a:99:dd:2c:56:e5:33:8e:de:bd:70:c4:19:c2:3c:
97:21:33:57:53:4b:45:93:e1:ae:55:69:69:ae:2e:f8:6c:7f:
18:25:57:dd:28:82:30:29:ec:8b:ce:cf:ea:4c:a8:ae:55:d0:
c5:82:46:78:ee:28:80:a2:f3:86:b0:a5:bb:1d:13:b6:28:15:
9a:42:7b:6c:09:92:6b:82:66:ac:21:d9:c3:5f:9f:c8:c6:4d:
91:d4:81:36:09:ad:01:bc:16:92:c0:37:d8:26:3b:ee:aa:d6:
8f:5b:87:e0:dc:46:e8:86:ee:94:3c:1a:12:8f:fd:a7:09:f3:
68:e4:51:15:bb:de:a4:ad:42:4a:1f:f9:7a:8c:e8:d9:26:f5:
4c:4a:de:f3:d1:ac:dd:3f:14:36:3d:8a:e9:f6:8b:4d:2c:45:
5d:15:68:87:98:b7:07:5c:c0:78:f0:db:4f:b7:09:c4:d8:49:
6b:ab:f7:bb:66:bf:d0:d5:d2:34:d7:35:58:0d:53:90:9b:0c:
8a:d6:34:ab:f5:98:8f:0b:2f:27:47:a2:b5:22:db:6a:b9:38:
94:a3:7b:d4:7b:d3:7a:56:a7:22:bc:1c:81:19:ef:88:ec:e7:
df:86:43:82:8f:26:8d:54:bf:af:cd:01:f3:c2:2b:73:8a:80:
6f:67:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:06:34 2025 by rpki-client