Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC8C76CF91111ED8604E6834AD9E6FC.roa
File: 1DC8C76CF91111ED8604E6834AD9E6FC.roa (raw, json)
Hash identifier: MVRFNC1gyv2gOlriN9xv02NT5smVGV0tpzJzFoKERFw=
Subject key identifier: B6:5E:59:9A:17:52:0A:99:37:69:65:0A:75:58:17:84:7A:8B:56:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 268A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC8C76CF91111ED8604E6834AD9E6FC.roa
Signing time: Tue 23 May 2023 02:25:43 +0000
ROA not before: Tue 23 May 2023 02:25:39 +0000
ROA not after: Sat 13 Apr 2024 02:25:39 +0000
asID: 64267
IP address blocks: 156.248.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9866 (0x268a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:25:39 2023 GMT
Not After : Apr 13 02:25:39 2024 GMT
Subject: CN=646c2427-2f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:33:1a:95:1b:f7:24:f1:49:d1:15:5b:17:
cc:9b:58:6e:3a:92:b5:7e:93:3b:d1:d3:f0:e6:a0:
16:8c:70:30:8f:82:16:a8:e0:34:b1:51:97:35:cd:
94:21:8f:4b:63:12:f0:65:fb:df:98:40:52:ec:ad:
6a:1a:27:c8:52:db:a3:f1:b9:56:23:d1:26:46:04:
33:78:ee:41:24:4c:79:1f:06:db:5d:80:ce:9d:83:
6c:21:e1:29:5f:53:8b:8d:22:ba:4f:40:15:34:68:
80:d5:10:73:21:63:ae:0a:e4:81:b6:bd:26:6c:1e:
f2:66:f9:f5:84:6e:e3:94:89:87:e0:34:50:4b:ad:
13:ed:00:1d:2f:7d:d9:da:1c:43:4e:85:e9:fc:e1:
d7:d2:09:10:5f:da:2b:96:7d:f5:ff:72:c2:21:01:
15:d6:d5:90:e1:8f:80:c4:c3:dd:5b:60:90:e6:ba:
9b:71:83:e4:e6:68:fe:5c:7e:a3:02:15:e2:7d:f2:
f9:29:69:c6:e7:05:82:93:a2:60:e8:a4:5b:a8:45:
b5:b0:0c:1a:8f:7d:10:b5:a8:e1:0b:10:09:79:4c:
c7:12:2c:2b:2f:c9:78:2d:a1:f1:98:bf:3a:5e:4c:
74:00:0f:2c:7e:b6:f4:6b:41:f8:07:51:c0:81:c3:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:59:9A:17:52:0A:99:37:69:65:0A:75:58:17:84:7A:8B:56:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC8C76CF91111ED8604E6834AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ed:59:73:b6:f7:f5:5e:a6:0e:04:8d:f6:df:30:3a:c8:78:
79:a8:e7:28:72:6a:80:22:6d:a8:89:e3:9a:a8:e4:81:4c:fe:
4a:b8:e7:ef:c6:51:56:c2:a1:a7:fa:de:75:db:73:7b:b8:0f:
f0:35:34:46:79:36:fc:d5:a6:bd:08:09:9e:d9:13:01:05:22:
dc:e3:d7:2b:11:c5:e4:6f:37:f9:15:12:ce:a1:5f:18:7c:fd:
c5:85:db:1b:ee:d3:d0:cb:7c:e0:11:67:97:5f:30:8c:98:af:
01:8d:0f:e9:fa:1f:d0:25:b7:ae:a0:67:0d:2e:f0:32:34:6f:
24:a2:6c:9b:91:c3:5a:10:6e:33:82:0a:65:5c:ee:ce:ab:d5:
8e:81:ea:8a:c9:eb:07:d1:bf:e9:c1:7a:97:b8:8e:48:d0:ac:
60:08:24:3d:63:8d:9f:8b:d0:cc:7c:b2:77:d1:ae:51:20:b7:
7a:e4:b8:3f:8d:20:db:7c:a1:33:29:8e:d5:94:e1:14:31:79:
d5:e4:35:10:38:5a:2e:4b:66:d5:3c:f6:de:98:43:d3:d5:f6:
1e:be:c4:0e:8d:20:77:c3:a5:51:95:5d:af:28:9e:38:80:22:
24:7f:6a:2e:a8:e6:f8:8a:33:53:9b:4e:e9:57:a4:70:72:10:
ae:b3:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:30:00 2025 by rpki-client