Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD9E4F4F90F11EDA5C0CA7D4AD9E6FC.roa
File: 2CD9E4F4F90F11EDA5C0CA7D4AD9E6FC.roa (raw, json)
Hash identifier: oaATjwWmvQz9vnhxL4GvDfk9dbYiI8NCSiHJIEiPX7U=
Subject key identifier: 7E:73:71:29:E6:9D:97:BD:C0:54:50:6E:31:05:2B:7F:EB:39:01:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 265C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD9E4F4F90F11EDA5C0CA7D4AD9E6FC.roa
Signing time: Tue 23 May 2023 02:11:49 +0000
ROA not before: Tue 23 May 2023 02:11:46 +0000
ROA not after: Sat 13 Apr 2024 02:11:46 +0000
asID: 64267
IP address blocks: 156.248.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9820 (0x265c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:11:46 2023 GMT
Not After : Apr 13 02:11:46 2024 GMT
Subject: CN=646c20e5-a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:e8:61:8d:32:d1:bc:25:ee:ea:63:26:68:
5a:03:3c:58:32:95:89:ea:1b:79:72:b9:85:9e:f6:
86:30:53:a6:c8:cc:f9:bf:89:2c:ed:5b:62:91:c2:
4d:06:fd:9b:80:c6:8b:ff:51:1a:d8:f9:9e:60:cb:
4e:ee:ac:8c:0a:c7:52:ee:e0:b0:14:28:29:c5:de:
5c:5a:3e:42:85:32:34:38:b0:cc:7e:35:a6:bd:71:
c1:9f:21:5b:d5:03:65:b9:db:86:e9:09:24:2f:ff:
74:da:99:d6:5b:fa:e9:c6:7d:51:d6:67:96:f0:72:
d8:0f:ea:ea:b3:b6:6a:7e:ba:b7:b4:db:f3:f5:20:
5a:30:63:d8:93:5e:89:c7:49:6d:c5:b7:30:72:f0:
99:a4:de:91:ba:6d:25:c3:32:c5:11:6e:f8:f8:d5:
cf:e3:5c:91:18:7d:ba:08:bc:f6:24:ca:9e:11:0c:
c5:1f:98:83:f0:30:bb:ad:79:05:b1:c0:55:4f:95:
d3:37:87:1a:6d:55:bb:3a:00:9f:a8:e7:f5:56:84:
96:4e:6e:2b:ed:f3:e0:42:48:a0:43:c0:04:cc:f7:
40:a7:4a:a9:76:14:f8:5f:96:51:4c:78:ad:c9:74:
7a:44:c9:e3:dc:96:fa:eb:fc:5f:eb:5a:1a:7d:a7:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:71:29:E6:9D:97:BD:C0:54:50:6E:31:05:2B:7F:EB:39:01:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD9E4F4F90F11EDA5C0CA7D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.103.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2e:e2:91:ad:eb:13:f4:9b:1d:33:8a:3a:97:6a:05:32:d4:
6f:a8:25:8a:9f:05:02:a0:fe:a8:b3:32:e5:3e:1b:96:8e:44:
aa:34:3c:c2:0b:c8:66:52:34:61:da:fa:93:e5:b7:9f:fb:8d:
bc:75:57:0e:07:56:4e:1e:26:1a:2d:2a:7b:dd:7d:aa:5d:30:
a0:14:ea:1a:50:04:75:73:29:e8:7d:29:54:af:45:35:a4:96:
d7:b2:7d:39:b5:f7:b6:0c:d2:fe:68:e6:5f:bb:68:31:59:91:
2d:76:33:16:15:66:ea:2b:7a:96:77:39:cb:93:fa:45:02:45:
71:a2:9e:53:4a:1b:88:a6:8f:4a:47:3c:39:f9:70:2a:9a:62:
d6:5d:11:67:e6:4f:b1:32:41:29:00:16:47:eb:b2:e2:ff:67:
f8:fd:4d:47:6f:b9:f0:08:e8:39:95:28:bb:fd:4b:81:94:a9:
fa:59:f1:54:75:5d:b5:9a:22:d5:76:ff:cc:c9:89:c1:cc:54:
01:2a:34:26:e0:ba:3a:94:17:20:eb:19:84:da:8c:9e:0f:9f:
34:f7:da:0e:ac:02:cd:8f:37:a7:28:a5:14:31:28:40:0a:df:
9f:a3:fd:9b:3f:4c:62:a0:4d:57:34:06:e4:a8:4a:8e:c0:16:
22:e7:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:49 2025 by rpki-client