Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/235C01C0FD9811EFB7C05243762E951A.roa
File: 235C01C0FD9811EFB7C05243762E951A.roa (raw, json)
Hash identifier: IzZyXU7EDaunjSrJ923zHSFkKeGHiuFBhUOT7eoNcKU=
Subject key identifier: BA:3B:92:4F:75:41:86:3A:BF:0C:B8:99:AC:10:E3:D3:81:E0:17:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/235C01C0FD9811EFB7C05243762E951A.roa
Signing time: Mon 10 Mar 2025 10:12:14 +0000
ROA not before: Mon 10 Mar 2025 10:11:39 +0000
ROA not after: Thu 03 Apr 2025 10:11:39 +0000
asID: 39600
IP address blocks: 156.238.170.0/24 maxlen: 24
156.238.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83110 (0x144a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 10 10:11:39 2025 GMT
Not After : Apr 3 10:11:39 2025 GMT
Subject: CN=67cebafe-1527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:84:fa:9e:dc:d8:0e:e8:a2:df:84:a9:1c:
7b:40:f0:dd:c4:cf:58:77:bf:70:35:e2:d7:c5:29:
f4:b0:37:be:7c:38:32:8a:f2:4b:2d:5a:3e:4e:c2:
d3:fb:23:d5:15:3e:5f:1c:b5:35:3e:fe:69:ee:14:
75:15:ac:ce:94:e5:df:e3:d6:28:f0:e3:0b:d7:24:
38:7c:31:52:70:75:ee:72:38:f5:43:80:0e:d1:29:
b8:e1:7e:ca:be:ba:a2:ef:1e:0b:7b:6c:6d:71:b6:
d1:20:1b:8b:69:c3:b2:35:c0:ae:60:3a:a4:8d:34:
ea:59:aa:e3:cf:bd:55:e4:aa:23:c0:7d:4f:9a:6c:
e4:1a:40:24:7e:00:c9:67:f3:b5:0a:9c:10:7c:e7:
02:35:59:04:96:e5:29:45:4c:70:28:90:32:2a:3b:
c2:b9:d1:52:a2:29:7c:92:2c:c8:84:e0:b6:97:6a:
2d:96:13:74:f4:9b:01:d3:8d:e1:e1:c1:43:52:25:
1f:d4:99:6e:00:37:95:38:0e:af:ba:92:45:dc:4a:
48:57:d6:50:e8:e6:5d:7d:d2:07:d2:a7:cd:0e:48:
5f:8f:07:83:d0:05:45:fd:5d:6f:4d:a9:76:8b:ca:
20:31:b3:e8:85:81:f8:be:21:7b:99:a9:99:b2:b7:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:92:4F:75:41:86:3A:BF:0C:B8:99:AC:10:E3:D3:81:E0:17:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/235C01C0FD9811EFB7C05243762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.170.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:b8:a9:ce:93:b6:78:71:a0:cf:3a:99:e7:97:95:90:84:c1:
99:88:10:31:36:9b:f9:ff:34:b9:94:4c:ed:43:02:df:0e:b4:
ee:f5:cc:a4:6a:8f:b7:74:15:e2:31:72:bd:79:2f:f3:24:d1:
e9:ae:0f:5a:c0:28:04:36:c6:57:8a:df:35:f7:15:64:72:69:
55:4c:95:67:89:8c:93:1d:f6:31:ea:ed:91:a4:31:aa:ad:ce:
97:f8:b6:ec:77:85:3b:b3:37:38:2a:eb:61:ee:42:1c:21:4e:
7c:e5:06:4f:92:b4:1c:e5:01:fb:1d:be:17:da:b3:83:06:8a:
36:c5:24:29:20:36:a7:25:d4:08:a1:d0:1e:96:90:ba:94:fc:
4e:b5:b8:bd:80:71:3b:84:74:33:75:22:10:17:9b:a2:67:2d:
12:f3:d6:78:f4:32:e4:86:fb:49:fd:ba:75:2d:e8:15:82:b0:
d5:ab:83:d8:f2:df:23:7b:d5:95:4b:fe:d6:79:99:54:9f:42:
d7:89:fc:e2:19:19:ed:87:fe:ad:78:11:d5:7a:bf:09:e0:24:
1c:f7:57:52:a3:74:64:32:73:42:35:28:62:cf:85:98:7b:7c:
1a:d3:4d:f5:ad:aa:34:16:5a:98:7c:1e:16:a4:d0:2c:10:ca:
4d:55:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:52 2025 by rpki-client