Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488D922E809911EEA52EC05C4AD9E6FC.roa
File: 488D922E809911EEA52EC05C4AD9E6FC.roa (raw, json)
Hash identifier: sEU2BJnQ9RcoW7dFS2ZcwE9P+BvyzpkZAMnlARodqIc=
Subject key identifier: 46:8E:BD:B2:FC:54:C1:39:14:28:E9:51:2E:A3:67:8F:95:31:E8:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4705
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488D922E809911EEA52EC05C4AD9E6FC.roa
Signing time: Sat 11 Nov 2023 13:50:33 +0000
ROA not before: Sat 11 Nov 2023 13:50:30 +0000
ROA not after: Mon 11 Dec 2023 13:50:30 +0000
asID: 211826
IP address blocks: 156.226.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18181 (0x4705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 11 13:50:30 2023 GMT
Not After : Dec 11 13:50:30 2023 GMT
Subject: CN=654f86a9-5308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:03:c5:fd:63:02:c9:32:3b:6e:4a:5f:bc:
9d:a9:45:a4:62:9f:6a:37:37:c3:7f:33:a5:24:21:
20:5f:01:e6:21:88:f0:ae:e6:ac:ec:b6:e8:d0:24:
6f:37:ea:6a:5a:0a:24:a4:b2:f3:67:6b:87:94:a1:
e4:d9:89:cc:8e:c3:79:20:22:e7:9b:a4:08:d5:46:
87:a1:24:ef:71:4c:4f:ea:56:5f:b6:43:36:ec:e9:
77:41:03:86:cd:d0:a6:05:fd:a6:06:b3:68:db:a7:
03:9b:9d:42:40:e4:cf:5a:63:24:76:c4:86:9c:ad:
d7:51:84:8e:1b:d7:ec:6d:6f:9a:91:40:dd:36:41:
80:68:0a:aa:84:1a:3f:26:b2:67:83:a7:3b:e4:29:
1e:4a:4f:3f:94:29:69:e5:22:74:67:ab:a1:44:7b:
74:06:76:81:19:e4:4a:24:85:7c:47:92:a0:65:e4:
d4:63:52:74:36:3f:76:f2:4a:69:e1:09:58:61:cd:
e2:ce:39:e4:cf:bc:7d:83:28:40:0e:b4:c4:1b:03:
a5:2a:e2:04:60:80:43:c3:42:bd:7d:c6:50:ba:98:
ed:7d:75:e1:ae:99:1f:ff:f2:66:ef:bf:77:e4:5f:
eb:fb:17:9f:bc:dd:63:04:fd:c0:2b:6a:85:2e:a4:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:BD:B2:FC:54:C1:39:14:28:E9:51:2E:A3:67:8F:95:31:E8:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488D922E809911EEA52EC05C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.7.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0d:3f:43:80:a5:a8:82:d1:f5:b5:50:eb:e0:9a:2d:c5:8c:
32:08:21:de:93:de:9e:82:00:cf:f9:2a:f1:7d:1a:6d:74:bb:
e8:d6:8c:1d:06:5b:2b:b8:c6:c3:c2:f8:28:56:fb:f0:e3:58:
30:cf:bb:e2:60:e1:a1:23:70:69:4b:26:2c:09:a1:9b:80:31:
aa:96:f8:8d:b4:e4:5e:2e:2f:78:03:10:70:c6:25:19:88:27:
4f:f5:ee:e8:75:d4:11:b2:e7:60:8d:65:0d:b6:ed:6c:98:81:
4c:bd:7c:74:e5:1c:02:6c:5b:eb:f8:72:d1:1b:17:28:76:ea:
1f:65:33:af:fb:45:00:c2:3e:e1:45:8d:de:e2:9e:e5:a5:e2:
6a:7d:f0:b7:52:d0:12:a1:0b:73:23:79:50:05:dd:ef:27:56:
03:4c:19:4c:73:5c:e9:cd:1f:ec:09:60:0e:e3:2e:c8:bd:d9:
df:f8:23:09:93:e3:fd:35:33:68:f0:6e:7f:15:e1:30:95:b6:
b7:f5:19:07:8e:12:3d:b8:f7:29:d0:4f:9c:8a:fb:c3:80:6b:
1e:c5:67:52:23:d3:6c:ca:09:53:53:28:5e:46:e6:33:69:20:
f6:9b:10:f2:b0:46:cc:78:72:e6:db:c9:a9:31:0e:48:54:c7:
c9:21:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:29:23 2025 by rpki-client