Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3F0D16F5CF11EF8620A287762E951A.roa
File: 2D3F0D16F5CF11EF8620A287762E951A.roa (raw, json)
Hash identifier: aClqa5rW04basMrr7oGcQS8nTeBoGBZ/3WN4VlAwJLg=
Subject key identifier: CA:8A:09:49:F7:54:EF:20:A1:86:8D:08:EC:4A:E7:F7:22:D6:EE:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3F0D16F5CF11EF8620A287762E951A.roa
Signing time: Fri 28 Feb 2025 12:26:04 +0000
ROA not before: Fri 28 Feb 2025 12:26:00 +0000
ROA not after: Mon 31 Mar 2025 12:26:00 +0000
asID: 398478
IP address blocks: 156.252.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81286 (0x13d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:26:00 2025 GMT
Not After : Mar 31 12:26:00 2025 GMT
Subject: CN=67c1ab5c-09e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:dc:9b:9e:67:aa:79:15:9d:cf:0f:1c:7b:
ae:c4:30:bf:f8:03:ed:3c:3e:3f:ad:46:c7:bb:b0:
99:91:46:62:37:5c:5e:50:18:02:aa:0f:b3:aa:e1:
ca:85:cf:58:66:e8:8b:1b:b6:a2:e9:53:cd:84:47:
37:84:00:3e:ea:c5:fa:30:11:d5:05:4a:ed:19:bb:
23:72:9f:92:e0:f3:0f:11:da:96:67:77:e1:f0:61:
a6:25:b2:1a:9f:3b:bf:d2:50:26:01:17:bd:27:10:
f5:c9:8e:51:73:b7:bb:c8:af:ec:21:66:cf:c5:90:
ce:50:92:20:53:cc:45:01:2b:85:46:d3:4f:c5:0c:
f5:8a:fe:68:a2:71:01:bf:ff:c9:78:1d:74:06:ff:
6f:05:54:2a:5f:e1:70:8d:4d:b7:fe:08:3c:5f:39:
ba:13:37:1a:d4:b4:4d:41:51:83:16:19:4d:77:b4:
f0:e4:ff:83:08:0e:38:d7:20:b8:47:a3:c2:67:30:
57:67:8d:a2:bd:0a:fa:09:2c:08:a2:81:ee:e6:23:
5b:26:0d:1b:4b:61:f4:e0:ad:21:b1:0c:38:c9:a9:
3d:0e:5d:f8:db:e5:5d:12:0f:89:7d:93:3c:20:46:
b7:29:a3:e7:26:0b:02:59:22:0c:e9:09:75:6f:70:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8A:09:49:F7:54:EF:20:A1:86:8D:08:EC:4A:E7:F7:22:D6:EE:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3F0D16F5CF11EF8620A287762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.160.0/20
Signature Algorithm: sha256WithRSAEncryption
12:73:e2:6b:c1:95:bf:7a:b7:6b:67:b8:3b:70:53:65:4d:d8:
09:fa:88:0c:d2:df:47:bd:70:60:7e:72:c0:25:76:e6:7c:6e:
2a:99:12:68:4d:f7:bc:2e:26:91:72:61:44:e1:6f:74:df:ef:
5c:10:09:bb:f2:8f:30:d4:ba:5e:9f:f3:63:2b:28:aa:cc:2c:
94:97:d4:98:f0:20:6e:0d:de:fe:5d:5b:55:5f:9f:a9:61:e4:
7b:6c:ee:1d:a8:44:a8:44:98:9c:16:11:0f:39:33:53:5d:42:
e9:4f:59:09:47:44:e4:73:50:9e:03:75:a3:1d:6a:97:57:6f:
5c:3e:52:7a:c4:9a:60:99:4e:02:af:44:89:a9:80:a5:57:3c:
0f:71:7d:08:31:63:c1:6e:69:10:59:55:30:c8:b3:c3:31:68:
9d:7a:bf:21:42:66:29:09:df:1e:85:5e:ce:27:9a:4d:ae:02:
af:5e:ef:39:7d:36:9c:cc:17:00:d9:1e:9c:89:24:58:23:5f:
ac:17:67:04:6a:94:d6:37:f7:ea:9b:8e:f4:d5:64:b0:ed:f6:
11:3a:5a:55:1c:34:de:70:b8:18:41:fd:a4:54:b4:84:60:a3:
ba:3d:67:dd:db:9b:73:70:58:4f:f8:8b:96:7b:b8:94:f5:0e:
2d:26:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:46:34 2025 by rpki-client