Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CFC84B2244611F080985D9FDAE4EC9C.roa
File: 4CFC84B2244611F080985D9FDAE4EC9C.roa (raw, json)
Hash identifier: lauhgXsqzTneJWuiJYL7pnKsP9JsQR2UWSULSAVKBG8=
Subject key identifier: 41:D7:23:65:E8:1F:BD:8B:5D:33:F7:07:54:C7:30:36:37:85:25:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CFC84B2244611F080985D9FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 15:34:41 +0000
ROA not before: Mon 28 Apr 2025 15:34:36 +0000
ROA not after: Tue 03 Jun 2025 15:34:36 +0000
asID: 20473
IP address blocks: 156.253.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85923 (0x14fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 15:34:36 2025 GMT
Not After : Jun 3 15:34:36 2025 GMT
Subject: CN=680fa011-a885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:4e:df:75:73:b2:4c:e5:f4:60:be:18:ff:
0f:d5:c5:6c:3a:28:fd:a9:76:4f:9a:91:d2:c5:08:
51:a5:ec:12:4c:b4:2d:4a:95:f0:8e:a6:89:33:ae:
90:e3:02:70:f9:cb:36:73:b6:eb:4a:ec:fc:2e:cc:
7e:76:aa:af:e4:fd:d7:b3:36:49:3e:fc:d5:c4:3b:
14:e5:17:17:8c:3e:d9:9b:10:86:ca:8c:96:b9:07:
5c:ce:78:e3:63:70:38:75:8c:53:e2:eb:42:bd:ca:
28:63:4a:c7:45:8c:98:15:f2:7b:26:0e:bf:f7:67:
4b:44:bd:c3:95:b0:37:ae:ba:bb:87:cc:92:54:88:
e0:6e:f7:b3:ed:00:f6:c6:8d:9c:7d:4d:b5:b4:62:
2c:74:4c:75:7c:01:6c:24:77:f1:7d:f6:3a:60:e7:
6a:bf:0c:a9:80:48:25:1d:eb:b6:9d:a5:2d:a0:94:
86:08:86:55:d9:0f:48:35:9a:e8:fc:a2:4c:24:e5:
e2:6f:c6:6c:8b:18:84:30:49:d4:8c:71:c2:8d:63:
e9:40:c7:f4:7d:2c:ab:c0:fc:40:c2:21:75:27:ab:
2a:68:f0:ac:45:d0:d0:a8:d2:af:3a:16:fa:15:09:
8f:8f:72:31:24:03:f9:9b:c7:59:79:56:28:e7:37:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:23:65:E8:1F:BD:8B:5D:33:F7:07:54:C7:30:36:37:85:25:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CFC84B2244611F080985D9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b5:23:b4:de:0b:f2:14:aa:78:f5:87:c3:a2:59:c2:eb:fb:
cb:9e:8d:c8:3f:f3:fd:9b:5b:90:0b:f5:66:ee:0e:50:05:74:
fc:ad:f3:9a:7a:c5:61:ec:98:7c:19:30:c5:73:0b:10:5d:85:
95:d0:41:53:74:e1:0e:4d:95:a3:15:c6:6a:a7:2f:f4:00:48:
b8:a4:61:73:5e:4e:b1:2d:a2:6f:66:e6:91:6a:6d:5b:86:29:
77:1b:9d:08:b8:ca:83:f9:81:7b:ec:c7:cc:93:9a:44:04:64:
e2:13:53:8c:1d:e1:3e:55:5a:0f:57:c0:df:8a:8e:1f:db:f9:
2c:ed:8a:9b:19:6d:3e:ed:8b:76:51:04:b8:26:b8:2c:c9:4a:
a1:0a:75:df:5d:8e:af:d5:4e:27:01:e3:4f:78:cd:bb:30:a5:
25:7d:f6:c8:9c:55:2e:92:d7:b3:83:17:67:ca:2b:98:07:9a:
e7:2a:55:09:c2:c9:8f:d8:55:8a:7b:f3:ba:4b:ec:ed:52:5b:
f2:df:45:40:c4:a9:8e:5a:43:24:13:61:b2:95:52:8f:1c:80:
3c:17:c8:85:24:d0:dd:e5:ba:3a:52:4a:d7:15:52:f6:b2:b4:
db:67:a4:48:4c:8b:33:7d:c2:a1:95:71:5d:0a:08:4f:d1:46:
d8:4e:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:44:27 2025 by rpki-client