Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28B77048B36011ED89C389ADF1222468.roa
File: 28B77048B36011ED89C389ADF1222468.roa (raw, json)
Hash identifier: 1RoC8pCH6lReMocTrF4l8seoaF7qXhkuoZ06THZ1kf4=
Subject key identifier: 82:93:65:E2:D4:B8:53:58:FA:9F:40:AF:22:55:E5:A3:84:EF:A5:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28B77048B36011ED89C389ADF1222468.roa
Signing time: Thu 23 Feb 2023 09:55:10 +0000
ROA not before: Thu 23 Feb 2023 09:55:06 +0000
ROA not after: Mon 23 Oct 2023 09:55:06 +0000
asID: 133199
IP address blocks: 156.245.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7199 (0x1c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:55:06 2023 GMT
Not After : Oct 23 09:55:06 2023 GMT
Subject: CN=63f737fe-f639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:a5:dd:5f:b4:fc:fe:77:6e:61:3e:4e:96:
03:cd:7e:ee:68:52:dd:df:98:3f:12:f7:c4:cd:25:
7b:97:04:62:33:48:05:9e:45:9d:5d:10:82:98:6f:
ee:de:7d:22:26:4f:a9:6c:33:ef:00:0e:84:7b:f4:
93:a5:7e:89:7c:2c:d8:98:da:5c:96:03:cd:bd:f7:
31:c3:51:89:49:d0:51:f0:50:b8:e4:d8:61:e4:3a:
f4:a2:fb:11:0e:bb:f5:39:dd:8d:f4:1f:a6:33:ba:
1a:b8:b0:0c:02:62:ef:7c:81:cc:22:77:53:5b:86:
f5:bc:d6:ba:2b:43:c6:fc:19:b0:4a:e3:f6:a9:d5:
1f:81:c2:08:a1:9a:8a:5a:bc:0f:6b:ab:40:52:e1:
01:b4:cd:0d:62:97:18:34:7a:32:a3:38:cb:05:c9:
a8:24:84:0c:0d:88:33:ad:6e:13:27:74:aa:56:53:
6f:c3:57:11:6a:38:7d:56:c4:be:94:70:b4:a8:3e:
7f:a5:4d:97:d2:d8:11:c2:6c:e1:36:b5:dd:28:02:
62:74:ad:bb:4b:d7:11:7e:50:2f:20:28:86:81:71:
a4:b3:29:0a:f5:fd:c7:27:51:dc:03:4b:76:87:35:
f2:26:af:4b:25:46:f6:a3:11:a3:90:1d:88:f8:17:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:93:65:E2:D4:B8:53:58:FA:9F:40:AF:22:55:E5:A3:84:EF:A5:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28B77048B36011ED89C389ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.26.0/24
Signature Algorithm: sha256WithRSAEncryption
39:34:74:f4:d3:bd:58:51:ff:43:5a:32:f9:08:99:ff:c8:72:
24:74:6a:a8:49:1a:16:bb:4d:78:04:25:07:ae:3c:cd:c3:3a:
c1:80:e7:49:17:f1:ab:6b:40:e9:44:d9:e5:f7:92:a3:4a:cf:
1a:d9:b3:66:e1:dc:a1:1a:15:a7:99:46:9e:b5:cc:8c:05:79:
47:10:ed:0c:3b:1a:8f:84:6f:c9:f9:76:ed:c6:e1:37:21:07:
64:5b:1f:6e:a2:be:e4:31:c9:6f:83:c1:c7:7c:41:6f:e8:57:
32:d3:97:2f:52:0d:f3:b6:2f:57:64:2a:e1:32:2a:6b:29:00:
e5:06:4b:db:f9:2a:f7:d8:b2:43:4e:36:f5:63:14:78:91:3c:
6d:45:33:5c:fd:11:cb:c0:ed:d2:71:85:6d:e8:91:06:6a:20:
d7:82:78:fd:66:97:6e:b3:8e:88:e5:4a:dd:fe:3a:f5:ce:7e:
79:16:e0:5c:fd:d7:66:f8:db:9d:6c:87:3d:34:e9:d4:68:ac:
92:2b:3b:e5:85:69:86:2e:4d:6b:c9:d1:88:44:65:07:50:ac:
d6:ba:82:61:77:fb:24:86:49:3c:77:8e:96:91:31:3a:3a:fe:
e2:22:ab:41:0b:b9:56:bd:0d:8c:dd:21:5e:5c:35:53:54:f9:
d0:98:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:59:25 2025 by rpki-client