Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20334434544A11EE8A77BC854AD9E6FC.roa
File: 20334434544A11EE8A77BC854AD9E6FC.roa (raw, json)
Hash identifier: Z9sIhG0z65t8zgzEvVrXdgDNB81EHF0uWOyMraqrnjk=
Subject key identifier: A3:EA:70:17:1F:87:21:24:3B:DE:A9:06:DB:0C:5E:F4:31:D9:BA:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20334434544A11EE8A77BC854AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:33:04 +0000
ROA not before: Sun 01 Oct 2023 04:33:01 +0000
ROA not after: Thu 08 Aug 2024 04:33:01 +0000
asID: 133199
IP address blocks: 156.245.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14931 (0x3a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:33:01 2023 GMT
Not After : Aug 8 04:33:01 2024 GMT
Subject: CN=65053000-7c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:f4:f1:a7:5f:10:14:91:b6:18:a1:32:1e:
b8:73:a2:a0:81:90:1b:2f:4a:7a:50:28:dc:95:7f:
48:09:39:08:08:09:2a:c2:a4:4c:6a:f3:a4:11:69:
16:e0:09:da:99:74:ce:b8:6e:e0:fc:47:b6:cd:b3:
9f:0f:65:29:9d:3c:73:e9:e0:34:31:92:b0:71:d0:
44:a4:8b:d5:dc:5a:32:7e:75:df:fe:1c:a0:c3:e2:
a5:81:76:18:4e:14:fc:89:16:58:d0:94:ac:af:57:
bb:2b:8d:a9:da:7e:a7:cb:eb:f8:3a:39:a0:6f:4e:
72:0e:03:7a:5a:fd:b4:29:7a:a3:c2:14:b7:e3:de:
a1:38:75:d2:09:22:98:a2:9c:bb:26:95:7c:90:65:
79:c6:b7:8b:63:8f:04:9b:ef:77:b4:c2:96:a6:22:
ce:8e:a5:56:21:06:00:24:8c:fc:26:37:89:dc:63:
72:01:91:81:bb:7d:b2:0a:42:16:d3:f4:65:d0:72:
c7:c6:ff:5d:a6:f6:b4:b0:31:0d:6c:05:9c:88:9d:
bf:b9:d1:81:3f:26:d8:42:fc:e0:d5:2a:0e:89:13:
69:82:d4:e7:55:7e:37:49:d4:af:66:40:57:73:6a:
28:00:2e:b1:ef:5c:77:74:b2:0c:f5:1d:9d:21:35:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:70:17:1F:87:21:24:3B:DE:A9:06:DB:0C:5E:F4:31:D9:BA:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20334434544A11EE8A77BC854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:47:82:19:4c:fd:41:de:7f:a3:92:71:52:a0:b8:40:4f:05:
f0:e8:64:e6:2c:b2:60:87:64:02:2a:d9:a3:f0:d2:23:49:b1:
a0:f4:05:a9:de:8e:0e:b6:79:88:51:2d:75:2c:5c:82:7a:57:
ad:8d:5e:4a:e1:67:9d:e8:60:a2:e0:10:ad:df:62:2e:20:c7:
d9:c8:a4:45:2e:58:b0:f8:d3:35:a8:09:75:a1:8a:c3:c1:a4:
a0:ab:eb:4d:cc:1e:00:85:39:4d:36:da:6d:80:c3:6d:1d:0d:
cc:78:22:71:f3:9a:61:ea:d1:a6:dc:e9:94:dc:a6:69:ca:de:
e1:a2:ff:42:3a:52:fe:ce:3c:e8:e7:a7:32:88:ba:de:2f:7e:
74:fa:4f:21:7f:ec:d3:e6:e8:d2:8a:10:8e:03:9b:c5:b7:53:
9a:2e:6d:1a:05:0b:c5:bf:3d:1f:4d:df:d2:89:b7:3e:51:f6:
d9:52:10:a5:1f:c2:98:a5:91:2d:b6:0a:e1:6f:35:b3:df:c8:
ac:8f:85:81:9b:6b:19:e2:60:44:df:1d:f6:49:71:23:5e:b8:
56:7c:75:bf:6f:66:1a:93:fa:6b:09:d5:19:78:78:48:2c:67:
44:05:08:28:66:3d:ce:99:70:98:82:d2:84:6c:9a:54:8c:ce:
10:68:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:42:32 2025 by rpki-client