Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A063B2E062A11F0A62DAB68762E951A.roa
File: 0A063B2E062A11F0A62DAB68762E951A.roa (raw, json)
Hash identifier: Jz2DFGOtBYb7cVqL8UyEnM8FrzSgu2TOBjYuurXNVZs=
Subject key identifier: 54:28:BF:8F:25:0F:FB:84:F6:28:23:4B:D5:0B:3F:B9:8D:4E:ED:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01476C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A063B2E062A11F0A62DAB68762E951A.roa
Signing time: Fri 21 Mar 2025 07:56:48 +0000
ROA not before: Fri 21 Mar 2025 07:56:44 +0000
ROA not after: Sun 30 Mar 2025 07:56:44 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
156.255.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83820 (0x1476c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 21 07:56:44 2025 GMT
Not After : Mar 30 07:56:44 2025 GMT
Subject: CN=67dd1bbf-d3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:f3:4b:af:06:f7:cf:b8:16:91:81:cc:e7:
d5:1e:60:2b:49:45:14:b0:8e:67:b2:b1:2a:c6:71:
7d:8b:71:ee:fc:d7:06:3b:0c:6c:e6:b8:8e:8c:35:
08:9a:7f:fa:e0:59:76:fb:2e:57:f2:f7:19:b8:53:
6f:35:aa:41:db:58:d0:c5:e4:08:39:51:09:d4:28:
4d:a6:f3:a3:23:7c:bb:54:a1:2c:0f:3f:3a:78:f8:
b2:05:29:69:39:38:fb:f4:41:e8:f3:84:38:5a:c7:
94:97:f8:c2:8c:fd:0a:72:a5:8c:2c:5a:3a:03:aa:
83:70:c5:ee:ae:55:91:db:a6:e2:e5:1d:03:f4:ec:
19:49:8d:84:94:84:99:d6:dc:0d:74:40:b7:73:f7:
04:26:3b:39:58:57:0e:56:75:13:4c:56:34:4b:35:
ee:b8:11:44:e9:f4:85:77:a2:68:35:a4:91:c1:3a:
88:d7:8d:fe:53:3c:c0:3e:a1:24:ad:45:a4:fe:cf:
ec:c5:3b:0b:8b:f1:01:31:cc:1b:0e:a2:7c:6e:f4:
4e:c5:0b:29:f5:46:a9:a3:7f:24:7b:ae:d8:d4:f9:
49:50:4e:3e:e8:7f:3d:89:e3:63:25:de:22:54:67:
ae:a2:91:28:22:ef:48:5c:c7:39:d5:87:e9:fd:3b:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:BF:8F:25:0F:FB:84:F6:28:23:4B:D5:0B:3F:B9:8D:4E:ED:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A063B2E062A11F0A62DAB68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4e:32:0c:d6:29:1c:31:ea:3c:98:25:d2:a2:3d:a6:69:27:d1:
d4:0c:24:e7:43:8e:9e:a5:39:67:18:b5:2a:4a:e9:80:a9:3b:
73:35:3a:fd:3f:91:a1:c7:9a:31:70:3e:d9:d4:3d:69:6d:a9:
b8:6a:0e:fa:59:be:24:a4:18:84:b9:21:3d:c9:3a:6d:cf:f4:
7b:02:ec:84:71:d7:6c:15:d6:c3:93:c1:56:d0:d7:19:e1:21:
f6:ca:04:2a:9f:19:4c:db:4d:84:ab:f5:ec:ed:cf:0d:81:18:
54:67:8b:06:65:2d:66:d6:58:0c:d7:3d:e2:d7:62:68:0a:25:
f4:78:9c:f3:b2:3d:7d:48:f2:86:a0:c5:e5:1b:1e:c8:43:2d:
6e:44:fe:dc:d2:1c:42:45:ff:48:46:09:f7:e8:ef:b8:9e:d9:
43:54:c4:12:78:f5:74:a2:99:7c:24:30:e1:43:e6:77:84:41:
9e:e7:f8:2b:3f:7b:db:27:1d:c9:9c:b7:23:15:4d:24:62:05:
08:7f:e9:6f:13:0e:9a:c4:17:9b:0a:c0:df:c7:10:2e:fa:31:
41:2b:3e:15:8e:87:33:ff:34:5d:4c:4a:06:0c:85:75:de:45:
b9:9a:ef:e2:39:48:c1:76:7c:f0:bb:ef:4d:8a:07:9f:d5:fd:
0b:4b:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:43:24 2025 by rpki-client