Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/157CF614F2C511EF94287BA2762E951A.roa
File: 157CF614F2C511EF94287BA2762E951A.roa (raw, json)
Hash identifier: I+UT+pjPFmweddQ1X9IZMu3NX2nxH/KS/idUvGa0YJQ=
Subject key identifier: 25:F0:DE:C6:49:6F:5E:DB:0D:7B:80:A7:BB:68:09:DA:25:E1:5A:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/157CF614F2C511EF94287BA2762E951A.roa
Signing time: Mon 24 Feb 2025 15:36:15 +0000
ROA not before: Mon 24 Feb 2025 15:36:12 +0000
ROA not after: Sat 29 Mar 2025 15:36:12 +0000
asID: 203020
IP address blocks: 156.235.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76809 (0x12c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:36:12 2025 GMT
Not After : Mar 29 15:36:12 2025 GMT
Subject: CN=67bc91ef-ae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:8c:82:04:36:7c:5a:05:ed:75:52:ab:f9:
ae:37:f9:e8:86:0a:37:dd:1d:33:d2:af:52:b4:36:
6a:59:6a:a6:26:e5:cd:8b:30:13:9c:fb:88:c1:36:
68:c8:13:29:6e:cb:38:08:83:4b:21:d5:7a:df:0a:
36:e2:a9:87:40:24:cc:68:f9:a7:70:be:91:7d:b7:
63:57:02:bc:b5:f4:98:48:81:21:fc:2f:26:3a:32:
83:ae:65:48:b0:40:62:e4:57:68:67:30:9a:98:bd:
bf:e8:e4:a1:5c:5d:18:49:29:90:a2:2b:6f:e5:59:
72:06:6e:72:f0:85:00:98:76:26:52:3f:93:c1:c5:
e6:46:91:14:4d:d5:70:eb:49:53:89:ce:01:c5:90:
82:41:34:9d:ae:c9:fe:66:94:5d:cc:02:65:3c:53:
bf:d6:d1:04:47:d5:50:d0:0d:b0:08:7e:64:5c:5d:
7d:d3:dc:3d:37:84:29:19:09:d1:d2:15:0c:83:8b:
5a:ea:0b:4c:6c:2a:94:75:ad:3d:e4:f6:4d:cb:61:
67:ee:c2:b1:6d:81:06:12:de:bb:61:5c:eb:87:7a:
a5:5c:24:e0:15:93:84:20:b9:c9:c3:0a:af:e6:41:
eb:82:e0:e2:df:a9:58:b3:f5:48:db:9d:88:a6:50:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:DE:C6:49:6F:5E:DB:0D:7B:80:A7:BB:68:09:DA:25:E1:5A:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/157CF614F2C511EF94287BA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.30.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:4e:67:cc:25:2d:9c:83:22:05:a5:35:69:61:4b:a5:f0:b5:
ab:5a:8a:82:b8:96:6f:52:6e:2b:99:7e:a2:b4:22:ea:38:ea:
bf:88:85:d3:bd:b0:9f:a4:cd:2a:b1:1e:3e:f8:3e:12:08:28:
21:5d:76:3f:11:6a:a2:ab:70:06:8e:c8:2d:de:da:2a:7a:ad:
91:53:92:b5:b4:68:66:7d:91:a6:1a:99:b7:b6:ad:a1:67:d4:
0f:27:5a:35:e1:db:85:3d:8f:bc:58:06:fb:1b:51:1e:9d:cd:
36:df:86:99:8f:07:1f:b6:b8:03:73:27:f9:2b:32:96:14:bf:
75:84:be:f3:35:64:83:67:df:25:3b:9f:da:90:fa:c9:b1:b0:
e4:c3:b4:7c:2b:bd:97:bb:84:8a:ca:0a:76:17:cb:06:9d:0c:
e8:b1:de:6d:58:85:97:aa:33:f9:24:78:16:86:50:69:1f:a1:
10:21:a6:20:7e:bb:6d:81:dc:2d:51:37:51:3f:7c:28:09:79:
b8:7f:75:ea:4c:6e:e3:f1:81:bf:f4:ca:f4:a0:c6:c6:e4:09:
52:7a:9b:cf:2e:15:02:d3:17:66:16:18:9c:f3:6a:29:c2:68:
ee:85:d8:de:d0:ea:59:1d:e0:9d:81:e2:fc:2c:d9:35:94:a1:
e5:f9:cc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:15 2025 by rpki-client