Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD38DFCF5CA11EF82038E66762E951A.roa
File: 3BD38DFCF5CA11EF82038E66762E951A.roa (raw, json)
Hash identifier: w2yNEaLSYKUTJJlnM+rwgcxaUOJAHgA1dZ5jMfaCoVM=
Subject key identifier: 3D:AE:6E:11:52:80:F6:67:11:88:D0:D6:63:8E:F6:78:5C:2B:FD:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD38DFCF5CA11EF82038E66762E951A.roa
Signing time: Fri 28 Feb 2025 11:50:41 +0000
ROA not before: Fri 28 Feb 2025 11:50:37 +0000
ROA not after: Mon 31 Mar 2025 11:50:37 +0000
asID: 54600
IP address blocks: 156.252.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81225 (0x13d49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 11:50:37 2025 GMT
Not After : Mar 31 11:50:37 2025 GMT
Subject: CN=67c1a311-a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:48:c2:72:cc:bf:4f:34:a8:70:02:cf:73:55:
7a:fc:7b:8f:3a:30:d0:f6:b7:78:9b:54:4d:0d:ef:
8d:67:4f:9a:b6:30:b7:05:90:2c:c3:87:84:67:5b:
99:18:8a:10:eb:f2:34:3b:40:6e:ff:61:aa:1f:ab:
1a:9f:ee:d7:ad:25:91:8f:36:8f:c0:f6:77:0d:96:
2e:a1:e4:8a:ca:eb:11:98:6c:de:f7:91:33:a0:cb:
49:c1:50:2b:db:57:ed:61:22:97:cb:d9:59:bd:36:
7d:d2:ab:69:39:ed:b6:01:1c:78:3a:55:4a:bf:9e:
6d:b2:b2:46:b6:5f:7e:8e:b7:8c:88:a5:d3:ea:8f:
8a:08:28:6f:1f:0b:6b:34:3f:6e:b9:1a:a3:7f:b9:
90:bd:43:07:e3:34:6a:14:15:89:a3:7d:53:51:5a:
a0:e0:1a:81:36:a0:33:63:da:b5:44:41:f9:a3:89:
24:34:50:1b:7f:95:03:c2:d4:aa:aa:16:84:37:78:
41:0c:d1:b1:ff:4d:44:07:2a:e8:cd:4c:b4:90:58:
41:c0:47:fb:b5:e0:7c:70:09:41:0c:a2:a7:d1:85:
07:aa:1c:70:77:c5:c1:0f:4a:69:4a:07:3f:8c:69:
b9:5a:2b:8b:f8:1f:91:92:f5:dd:2d:f2:22:7b:74:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AE:6E:11:52:80:F6:67:11:88:D0:D6:63:8E:F6:78:5C:2B:FD:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD38DFCF5CA11EF82038E66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:5f:72:cd:8f:4b:35:0a:13:7b:3b:ef:e8:bd:e1:24:99:6b:
2f:7f:ff:e1:b2:db:15:23:a2:06:33:9a:32:ec:eb:8d:72:cc:
ca:46:42:2e:79:e8:18:3a:ac:90:21:17:ee:a1:f3:55:d9:49:
c0:13:3b:a4:74:50:90:ae:e2:f1:f1:47:90:f2:c5:5b:39:4f:
de:d0:af:1f:91:ed:23:f8:6f:50:5a:bc:fa:0f:68:08:c3:cb:
92:47:b0:0e:6e:ac:c2:25:bd:6f:8f:6f:4e:5a:47:40:05:9c:
6f:31:58:7c:8a:a1:22:1d:6c:8b:25:fd:f3:4e:72:fb:c6:25:
a7:fe:79:29:93:d1:c9:ac:85:45:1e:c2:25:a0:f2:ae:84:0d:
e1:8e:e6:a1:28:84:06:33:33:1e:29:c9:59:5f:68:12:11:c1:
d0:22:f1:16:f2:0f:ea:24:7d:ab:af:5d:7e:21:ae:de:d2:19:
b7:97:ae:86:e1:a3:a1:2d:df:c9:25:a4:61:51:45:d3:06:a3:
43:ff:30:d8:da:4c:4b:30:89:52:d5:87:ff:a9:b9:91:a0:53:
1f:a5:71:3c:d1:e3:6d:73:47:d5:82:aa:d5:64:f0:62:5d:13:
57:fd:38:37:23:16:b0:c9:18:c5:8c:71:3d:39:c6:53:f6:dc:
e3:63:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:59:19 2025 by rpki-client