Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0838593A017F11F0B4BD4492762E951A.roa
File: 0838593A017F11F0B4BD4492762E951A.roa (raw, json)
Hash identifier: xPSEgA51M1ei6spxoYQ8eCJUSLZVYrendBU5Km3hF3o=
Subject key identifier: 7D:B8:B5:E1:E2:24:F8:BC:84:07:A6:73:9A:88:21:16:03:0B:10:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014634
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0838593A017F11F0B4BD4492762E951A.roa
Signing time: Sat 15 Mar 2025 09:22:36 +0000
ROA not before: Sat 15 Mar 2025 09:22:32 +0000
ROA not after: Fri 04 Apr 2025 09:22:32 +0000
asID: 57043
IP address blocks: 156.253.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83508 (0x14634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 09:22:32 2025 GMT
Not After : Apr 4 09:22:32 2025 GMT
Subject: CN=67d546dc-5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:44:df:a5:d3:61:23:e5:22:71:22:6b:2e:
2e:0a:1d:46:34:18:0f:ea:4c:ae:3e:74:58:c8:63:
7e:01:d9:50:1d:12:8b:ef:29:bb:8f:ad:66:ab:3d:
fb:54:6c:c9:c1:9e:25:43:ef:26:1a:1d:d1:f5:3d:
25:0f:87:e2:f7:b3:01:e5:f3:e8:3f:c1:00:98:b5:
75:5d:ce:85:ca:9d:b8:2e:80:6e:c1:6f:03:84:94:
35:e3:5c:88:2e:46:38:02:b3:4e:78:5a:da:32:2a:
b6:cb:22:b8:20:d8:c4:3e:e0:c9:3c:95:0a:8d:93:
32:a5:c8:38:f0:29:47:57:f0:41:02:37:c1:cd:f3:
03:ff:99:ae:54:0b:80:18:a1:4b:f0:be:ee:f4:9d:
fa:08:05:34:69:48:e6:a4:75:01:5d:3b:9f:4e:ad:
69:ea:95:69:66:8f:2f:b7:97:3a:8f:e3:f1:e6:e5:
4d:7b:69:bc:96:ac:1c:1e:93:bf:c9:28:5e:83:8f:
d3:c9:f0:88:e7:a2:9d:78:11:c9:a7:26:f7:fb:b8:
31:b1:fd:73:2a:fd:5c:0f:2b:c3:51:18:c9:43:6a:
ca:8b:fe:d6:18:a6:43:13:04:09:ef:53:6a:12:e5:
64:26:9b:30:e5:3a:ac:05:76:cd:fe:a2:7c:57:0e:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B8:B5:E1:E2:24:F8:BC:84:07:A6:73:9A:88:21:16:03:0B:10:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0838593A017F11F0B4BD4492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.6.0/24
Signature Algorithm: sha256WithRSAEncryption
14:46:d1:aa:1c:99:1d:52:1e:d6:cf:f4:89:85:aa:19:3d:d9:
33:8f:3a:ec:d3:89:6c:5a:86:00:2e:f6:34:9d:88:6a:a3:cc:
55:ad:0d:46:13:f6:cd:ac:b8:78:7f:61:9a:c4:c5:fe:51:5e:
e2:12:4f:cc:90:40:56:8f:db:66:c0:61:81:3c:6f:1c:e7:36:
0c:10:1c:6f:54:e8:e1:25:15:dd:51:f9:20:7a:12:1b:52:09:
ac:0c:a3:0b:e8:51:73:d9:85:b4:e4:1c:fa:dc:73:29:3a:61:
76:0f:52:fe:a7:9a:46:aa:0b:c1:f9:56:0e:bb:67:2c:11:5a:
6a:da:26:6b:87:c9:0e:b6:f9:e6:56:b0:77:77:73:73:3a:a0:
a3:cf:c8:2b:28:22:71:aa:70:7d:eb:d4:29:c2:a4:ae:40:8b:
fc:06:07:22:99:68:0e:03:0b:bf:84:9d:d7:15:50:75:61:d1:
4d:28:6e:05:e4:47:25:cc:6a:20:07:82:86:0c:7e:46:aa:8d:
cf:de:70:70:e9:28:cf:cc:9a:6d:4f:78:7d:70:6f:e3:04:0d:
93:e2:e7:11:37:19:a4:13:0f:ae:a3:d8:f4:52:ce:0a:97:bb:
a3:7a:ec:ba:fb:f9:64:d7:e7:ab:3a:e2:2d:3d:c1:d5:36:b6:
67:39:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:14 2025 by rpki-client