Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F5D610406A11ED880A089CF1222468.roa
File: 48F5D610406A11ED880A089CF1222468.roa (raw, json)
Hash identifier: hBlCgGSggTRO6neu459wZzqiEdx4xVo4w4u4KM5v0cQ=
Subject key identifier: 48:B5:1C:A6:3F:93:7E:C3:30:97:E3:05:8F:11:62:F0:F0:B5:76:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 18C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F5D610406A11ED880A089CF1222468.roa
Signing time: Fri 30 Sep 2022 02:47:55 +0000
ROA not before: Fri 30 Sep 2022 02:47:50 +0000
ROA not after: Thu 05 Oct 2023 02:47:50 +0000
asID: 22773
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6345 (0x18c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 02:47:50 2022 GMT
Not After : Oct 5 02:47:50 2023 GMT
Subject: CN=633658db-3c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:e0:6f:2a:ff:41:80:cd:f8:ea:2b:6f:42:
77:da:a2:6b:c5:5a:63:9f:19:3a:40:2e:ef:ca:28:
d3:9d:b9:f9:f7:32:49:3b:41:7b:40:41:32:0f:0a:
d7:bc:c4:32:84:ec:b9:1d:b9:84:70:56:3b:7c:91:
db:a1:b0:54:75:c8:dd:1a:b7:49:f2:b9:ff:0e:e1:
fe:01:ba:45:2f:99:12:3b:0f:98:9b:55:28:83:b4:
0f:45:6a:3b:3e:6c:c1:f5:f9:52:16:e7:25:ad:ad:
fb:ce:72:f0:01:0a:6e:84:0c:1f:06:ce:e4:63:a2:
c4:d6:2a:a8:58:4b:cc:df:33:0a:ca:34:12:d2:be:
ab:e8:a0:3f:b5:78:f5:26:79:d1:d9:eb:50:e5:87:
32:ef:6f:fd:bf:cc:c3:3d:86:4d:4e:c8:e0:4d:9d:
6b:aa:e2:12:c5:97:f0:3e:72:dd:77:ca:8b:2e:6c:
a7:71:b1:80:a2:a1:dd:20:52:61:c3:6d:36:b2:8f:
51:d9:d4:ee:b4:e7:b8:fb:db:6e:c6:58:fa:8d:4b:
97:df:71:ed:05:9b:a1:18:20:8f:57:33:ba:98:27:
13:94:dc:63:2b:7b:8d:b9:37:48:44:d2:3c:1b:44:
6a:2c:aa:61:b8:4a:e5:8f:7a:36:07:36:0f:c0:49:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:1C:A6:3F:93:7E:C3:30:97:E3:05:8F:11:62:F0:F0:B5:76:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F5D610406A11ED880A089CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:2d:6c:58:41:56:06:8c:9a:63:d0:37:61:03:ef:80:1b:79:
9f:ec:55:b5:56:9e:c5:af:28:15:2f:20:8b:34:95:16:aa:f1:
78:86:6b:a9:06:05:af:00:0f:93:8d:29:2c:ae:f0:ea:d6:c1:
68:81:f2:cd:d3:ce:d2:8c:ed:00:84:27:56:4a:51:d7:48:76:
a8:7d:92:29:01:c2:90:89:72:ec:6d:ea:05:93:a6:83:ed:e9:
98:03:0b:e3:5d:c0:4f:0c:83:d1:b9:17:2d:12:52:c2:e1:cd:
9d:fd:e6:f4:fe:ae:30:43:44:77:0f:38:bf:36:d2:f8:a1:7d:
3a:17:b9:2b:36:62:0f:8f:48:56:c8:4f:ec:db:a7:36:06:e5:
62:de:af:23:8b:19:f2:c8:45:b8:6f:02:e0:72:71:95:ff:7e:
34:9d:a2:de:a0:14:9e:26:9c:7e:97:c1:12:8e:1a:92:ff:cf:
5d:55:71:5e:95:95:5a:db:32:0f:5d:ac:fc:bd:96:e4:1c:aa:
63:26:e0:23:e0:c5:f0:7f:07:df:7d:64:e3:0d:31:a9:39:c4:
9e:44:82:19:bb:64:f3:60:b0:00:72:0d:dc:a3:c8:bd:45:42:
8f:58:fe:5e:cb:c2:6e:db:70:3c:cc:c4:8f:fa:36:ee:74:07:
49:e7:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:13:14 2025 by rpki-client