Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF555C6EF8411EFB7270A73762E951A.roa
File: 2EF555C6EF8411EFB7270A73762E951A.roa (raw, json)
Hash identifier: SqNcTm6CRNrE5LGW0y1DFqCKGuoSFXFv6HeGp1KSMJM=
Subject key identifier: 7C:5B:FC:14:FA:DC:5A:45:AC:41:C2:2E:C0:E4:6A:C4:79:AC:E4:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0125D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF555C6EF8411EFB7270A73762E951A.roa
Signing time: Thu 20 Feb 2025 12:14:08 +0000
ROA not before: Thu 20 Feb 2025 12:14:04 +0000
ROA not after: Thu 20 Mar 2025 12:14:04 +0000
asID: 54600
IP address blocks: 156.239.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75221 (0x125d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 12:14:04 2025 GMT
Not After : Mar 20 12:14:04 2025 GMT
Subject: CN=67b71c8f-262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:53:aa:d1:70:53:ce:11:b0:ce:ee:8c:ac:
54:ca:eb:83:de:9f:9b:b1:05:e1:00:70:a5:be:32:
86:5c:a7:02:ce:4f:cf:f5:90:eb:5d:14:51:0b:0c:
14:ac:3a:11:1e:c3:50:3f:3e:b0:0b:98:f3:ec:4a:
7a:b6:cc:3f:46:22:59:db:a9:a5:c8:63:31:a1:cb:
05:d9:53:c1:5f:b2:f9:07:c3:cd:61:33:c4:27:44:
93:17:c5:b4:99:6e:60:fc:b2:3a:09:c4:f9:3b:7f:
d9:4d:fb:99:fb:1e:a5:cf:50:90:1f:e8:2c:78:90:
87:0a:c6:b3:d0:43:00:76:e8:27:7a:22:8e:a4:d2:
96:27:b6:09:79:14:fa:ba:9b:d4:17:a1:9b:d9:fb:
98:2b:4c:0a:62:bb:97:23:31:08:a0:45:49:64:ff:
31:76:0d:2e:9f:b3:e3:cb:e7:84:f9:3b:c0:af:8e:
51:eb:e5:e7:cc:2b:b3:53:28:cb:7c:38:2c:1c:09:
e3:93:5a:fe:65:43:24:67:d5:bf:36:f7:54:56:e6:
2b:af:c4:f5:a6:4b:90:53:7e:b6:ec:6f:92:b2:bf:
90:75:01:00:47:2e:99:1c:56:43:a9:6a:08:17:2f:
a8:ad:6f:eb:b5:21:61:74:bc:4b:25:7f:63:41:bd:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5B:FC:14:FA:DC:5A:45:AC:41:C2:2E:C0:E4:6A:C4:79:AC:E4:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF555C6EF8411EFB7270A73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.48.0/22
Signature Algorithm: sha256WithRSAEncryption
54:11:6b:80:cf:dc:03:ef:ce:55:33:a5:15:63:f2:5c:c6:82:
87:4b:14:e9:1c:54:64:0f:a2:20:db:d8:76:ad:98:13:b9:35:
af:8d:a0:86:ba:57:ce:86:b6:f2:d7:2d:fe:78:e8:da:cd:2f:
42:03:69:e5:b3:40:9e:95:66:46:95:b9:bf:17:55:3c:0a:92:
58:e0:c9:de:8e:9f:0a:12:ae:ef:ba:de:55:e8:b9:7b:e8:b8:
16:a1:7a:6d:90:29:17:10:96:46:40:40:3a:7c:19:5a:cc:62:
7d:a4:89:d1:a0:31:7d:40:49:70:4c:5f:ee:1e:95:c0:64:22:
75:d7:35:96:16:3c:03:c4:c4:a6:4c:8b:13:02:53:71:72:e8:
69:97:ff:15:e7:77:f2:e6:fb:e1:5f:02:24:aa:22:4a:fc:5f:
fa:55:c1:93:74:cd:38:36:73:83:9f:b0:ac:72:51:ed:f0:d6:
01:59:24:13:57:c3:5f:11:3a:83:92:85:cb:4f:5c:e4:3d:80:
14:5f:03:06:a7:8b:f1:b2:fa:60:3e:ea:93:1d:6e:74:2b:b9:
ef:29:88:b2:f7:54:71:2d:6f:73:ce:18:be:68:08:9e:96:40:
5e:16:67:66:46:1d:4e:b7:4e:01:10:95:e9:2e:df:c6:43:7f:
72:94:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:02:43 2025 by rpki-client