Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E852BF2FA6C11EFA611125F762E951A.roa
File: 0E852BF2FA6C11EFA611125F762E951A.roa (raw, json)
Hash identifier: 1ObXw2xq2X/RxSoYCYBPnZc00MSZcTC8TIrzxpjS4F4=
Subject key identifier: EC:0E:87:DA:80:1E:4F:C3:8C:81:99:A6:27:D4:1F:5C:87:DC:3E:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014379
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E852BF2FA6C11EFA611125F762E951A.roa
Signing time: Thu 06 Mar 2025 09:19:08 +0000
ROA not before: Thu 06 Mar 2025 09:19:04 +0000
ROA not after: Wed 26 Mar 2025 09:19:04 +0000
asID: 54600
IP address blocks: 156.227.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82809 (0x14379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 09:19:04 2025 GMT
Not After : Mar 26 09:19:04 2025 GMT
Subject: CN=67c9688c-ab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:42:d9:ea:57:ce:78:f1:51:94:0f:bf:8b:
a1:d5:a3:47:63:8b:74:88:b3:54:3e:d1:1b:31:eb:
97:fb:66:3c:be:94:67:8d:96:4c:e4:70:5f:54:3b:
e5:01:b8:99:7e:01:e0:d6:43:52:a1:3b:90:0b:57:
84:36:c1:81:f2:f1:d7:31:86:cd:b3:a1:be:23:1a:
37:16:60:9a:6f:c7:f4:57:2a:2f:cf:43:29:a7:cb:
3d:06:2b:db:c3:ed:dd:58:2e:ec:4c:33:2f:cb:73:
4e:11:47:a9:f0:01:6d:3e:a1:0e:03:a1:91:a0:72:
aa:23:28:b0:1e:2f:74:02:8e:d2:4a:59:5b:0e:f6:
38:b4:13:39:64:b8:70:2e:c6:7a:0d:c6:49:1d:39:
c7:a3:52:b5:05:de:55:c6:5c:6d:df:24:14:51:7c:
43:99:e7:1c:ca:b3:7c:9a:76:1a:6d:88:1d:c9:48:
c1:77:5c:e2:e8:0e:ef:df:0f:e3:7e:33:3e:c7:d8:
f5:0c:68:28:7c:14:94:eb:46:a8:ad:fa:20:0d:2f:
12:76:3a:28:3f:89:71:97:0f:d9:16:bc:50:40:ff:
97:7e:3a:e7:94:f6:c2:9a:fc:d2:3c:92:e5:65:18:
da:d3:fd:5a:5a:df:01:56:19:8a:52:2e:21:fd:ce:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:87:DA:80:1E:4F:C3:8C:81:99:A6:27:D4:1F:5C:87:DC:3E:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E852BF2FA6C11EFA611125F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:cc:d6:4b:f4:06:c9:f3:37:49:02:a8:d3:05:14:38:00:44:
56:5d:0f:88:f3:43:53:9d:13:36:22:35:3f:f3:7b:72:1c:fa:
67:9f:c3:dc:9a:bc:bc:6a:c1:d7:46:66:a3:65:71:d7:de:49:
68:26:00:4c:cf:dc:17:dc:ff:fc:d2:de:d5:45:1b:41:d0:5d:
11:4e:3d:55:f4:41:08:95:40:93:2c:6c:f9:a3:e8:30:cd:1a:
e4:b2:ad:af:56:75:29:15:5a:07:12:c4:85:9d:bd:58:67:3c:
18:ab:c0:45:82:fa:9b:88:ad:b4:33:d1:a4:c7:0c:a4:8f:0d:
f0:53:8f:56:86:4c:4a:9d:d8:2f:b4:5b:6c:62:e0:5b:49:17:
69:c0:a9:5f:55:24:86:ed:f8:07:19:3e:78:07:27:37:5d:03:
95:d4:06:b4:5c:60:54:08:8a:ea:20:47:7a:e0:ca:5d:b9:b8:
cf:86:86:47:e3:95:2d:9f:f7:6d:94:e8:70:41:ca:13:7c:3f:
f3:1c:21:c0:21:de:e7:93:be:f1:b2:b0:da:c1:1a:e1:a8:98:
fb:61:34:b2:75:a4:b1:6b:ee:b0:17:c4:67:f3:dd:89:40:a5:
20:2f:40:26:50:14:d1:2e:95:23:74:29:ef:a8:89:6d:a2:a3:
ff:1d:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:53:45 2025 by rpki-client