Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ED29148F5B511EFB42D8758762E951A.roa
File: 3ED29148F5B511EFB42D8758762E951A.roa (raw, json)
Hash identifier: oUqqRJu9/vV+KPyML3W4mA/vFxvAKI7yOBA7RhQ1r3Y=
Subject key identifier: 51:3F:2C:D7:57:61:EC:9E:6A:24:25:C2:6F:8F:0E:1A:4D:C8:10:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013CDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ED29148F5B511EFB42D8758762E951A.roa
Signing time: Fri 28 Feb 2025 09:20:26 +0000
ROA not before: Fri 28 Feb 2025 09:20:23 +0000
ROA not after: Sat 29 Mar 2025 09:20:23 +0000
asID: 23470
IP address blocks: 156.225.70.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81117 (0x13cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 09:20:23 2025 GMT
Not After : Mar 29 09:20:23 2025 GMT
Subject: CN=67c17fda-ae6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:b8:9d:1b:d5:3a:4e:ad:8d:da:ec:b0:8e:
cc:f5:cc:46:ae:03:fb:66:6e:31:d3:88:f5:18:b6:
7f:ed:67:ee:1b:cf:61:0f:d3:74:5e:cb:e7:51:50:
d9:13:70:c9:98:cf:f1:20:2a:b6:11:b1:5e:0f:c6:
c1:46:79:e0:fc:bf:63:cb:7d:fd:fa:36:02:1a:b8:
14:f1:b5:32:bf:41:75:09:41:9c:37:e1:26:a4:9e:
97:c5:1a:d3:36:c0:eb:8c:05:28:d5:c2:e7:e1:24:
36:80:4b:34:ea:34:c2:60:36:22:bc:47:b6:63:31:
cb:46:0b:8a:72:50:6b:37:ed:f1:24:c8:22:09:96:
a4:1d:c1:d0:8a:f5:48:1a:a8:d3:9c:77:e4:c6:58:
f5:fd:38:47:54:c3:7a:1f:df:95:69:ed:cc:ac:1c:
ef:14:78:c3:c9:b5:6d:2f:52:c4:f4:6f:f5:47:31:
c9:42:a0:d8:c2:4f:7d:42:30:6e:e3:b3:e3:bc:89:
f9:8a:ac:27:5e:6b:73:6d:29:d9:e2:7a:0d:6e:56:
8a:db:ac:98:2b:b3:5d:12:46:5b:18:5d:cd:5f:66:
9d:2b:0f:4a:f4:04:95:47:5f:61:72:66:1b:2d:b5:
f0:f4:98:ec:2b:74:45:45:82:84:62:7d:85:d3:62:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:2C:D7:57:61:EC:9E:6A:24:25:C2:6F:8F:0E:1A:4D:C8:10:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ED29148F5B511EFB42D8758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:78:ea:2e:92:b5:9a:7a:d6:ac:74:c1:df:32:90:bf:e1:a3:
e6:7b:51:3b:8b:3a:b3:3d:51:06:91:12:1a:29:e9:48:63:71:
ba:70:a2:88:89:a3:9e:6c:62:19:3b:d5:3d:d0:58:85:a1:40:
67:95:ac:6d:d9:b2:02:b0:22:5e:c9:da:a1:b9:c0:36:bb:ff:
bb:22:f2:c2:10:9d:d0:29:b1:99:3b:20:ab:a7:b2:a6:9a:bf:
98:8b:b8:ce:05:ad:e3:eb:02:52:51:d8:0a:f8:38:99:13:b0:
72:4a:93:8d:46:cf:9f:47:21:aa:2e:92:9b:2d:2c:3f:8e:ee:
5b:f2:73:7c:9e:66:03:35:9a:f7:60:c2:b8:21:18:b8:50:0a:
55:b0:50:11:5d:b6:f6:80:bc:e8:dc:e9:07:ff:f9:ff:39:c7:
0c:30:bf:88:60:0a:aa:41:c7:46:dd:46:30:0d:38:64:22:ed:
48:84:92:f8:b8:ab:ed:a7:53:20:b9:65:77:54:d6:61:22:3d:
d1:56:0d:21:35:bb:8d:ae:40:c0:88:ef:a9:48:6d:60:0e:73:
03:dd:21:89:a8:14:40:58:61:aa:79:9e:6a:8d:8c:49:29:56:
f2:7e:69:ff:70:31:b3:36:f8:81:30:8a:53:a2:3f:46:bc:de:
c1:4a:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:14 2025 by rpki-client