Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1162DBDE7BA711EEAF43D0864AD9E6FC.roa
File: 1162DBDE7BA711EEAF43D0864AD9E6FC.roa (raw, json)
Hash identifier: DwafNUWD+c3yT46IZHYnVBMt9vvcntbcRW81N7uQ1YU=
Subject key identifier: 32:E1:31:1B:FE:A7:02:9B:95:D5:D7:7E:B0:FB:F0:53:3D:A5:A1:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 42F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1162DBDE7BA711EEAF43D0864AD9E6FC.roa
Signing time: Sun 05 Nov 2023 06:46:38 +0000
ROA not before: Sun 05 Nov 2023 06:46:34 +0000
ROA not after: Fri 08 Dec 2023 06:46:34 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17139 (0x42f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 06:46:34 2023 GMT
Not After : Dec 8 06:46:34 2023 GMT
Subject: CN=65473a4e-2269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:6c:fd:f4:0b:7a:ab:95:75:9d:34:3b:2c:
78:b7:4d:f8:bb:48:57:d3:72:68:7f:4a:e6:6d:85:
f6:74:4b:88:73:65:07:1d:12:dc:de:64:4a:a0:dc:
c8:7d:83:e6:78:ba:5f:b2:2f:a9:94:f6:75:be:38:
a9:e3:ba:35:c8:95:a4:d0:3f:d9:53:75:f5:63:0c:
70:b7:19:3c:2a:ae:37:14:c1:32:56:d1:27:7d:49:
6d:40:5d:d2:80:4a:11:94:0d:07:92:d0:af:1d:89:
cf:1e:94:78:ba:ee:43:a7:03:9b:32:ee:04:27:b9:
22:4a:37:02:b9:fe:6f:70:3e:cf:0a:f7:5b:78:70:
da:b5:89:29:b6:19:36:d3:35:7f:91:81:b4:9a:62:
e0:54:25:2c:21:80:17:98:91:ab:b3:66:ac:5c:24:
44:a9:c0:27:99:65:57:b9:95:72:ed:82:28:75:d1:
44:32:d1:47:55:7d:19:38:74:e9:51:8c:20:72:1a:
90:68:6b:aa:70:7d:15:a5:b7:a2:db:6f:0d:3e:72:
70:25:48:48:bf:d1:14:10:96:e2:5e:30:68:c4:ba:
26:f1:f9:cb:1c:82:7d:52:bc:30:05:bd:1f:88:17:
67:c0:d1:af:0e:83:ec:33:f9:0f:ec:da:19:59:45:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:31:1B:FE:A7:02:9B:95:D5:D7:7E:B0:FB:F0:53:3D:A5:A1:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1162DBDE7BA711EEAF43D0864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c9:14:3b:1b:94:a1:66:69:0c:ae:6b:a4:a2:f7:3e:35:51:
5a:8e:37:d5:6a:1f:5f:bf:59:75:cc:b6:e5:7a:43:71:42:9a:
15:29:67:95:6c:9d:1a:31:8a:4a:73:a9:15:0a:f1:5f:cb:64:
39:93:4c:ac:d9:aa:6f:54:58:96:bf:bc:6c:1f:e7:17:3b:05:
63:e5:e7:80:81:64:cf:1b:5c:f9:2a:bd:59:16:61:69:f0:b0:
0c:d2:fe:c5:06:f0:fa:40:c5:a8:a1:33:ed:b0:c2:2e:d8:83:
36:83:ef:3d:b0:d2:b4:5d:45:00:89:84:d2:53:72:a8:bd:87:
17:ef:23:17:86:60:68:06:ee:06:87:f0:d6:27:80:2c:ff:70:
56:4e:01:fb:2f:5b:01:cf:0d:d0:c2:eb:f3:e0:6e:10:34:93:
e5:ff:b8:ea:7c:d6:64:65:9e:cb:e2:58:ab:01:68:46:9f:b4:
23:2c:00:11:60:25:42:7e:32:3b:08:4f:31:7c:7e:b5:6e:52:
01:89:3b:52:9b:eb:71:93:8d:f4:89:10:da:e2:11:5e:8a:bc:
ae:07:5c:26:eb:21:23:1f:54:83:ff:f5:fe:d3:04:e2:a0:fc:
c0:1c:f3:5f:2e:ef:56:a9:a1:4f:39:f5:f0:da:d2:3e:ca:97:
1b:1c:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:16:28 2025 by rpki-client