Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E049FB8F2C111EFA4F7458B762E951A.roa
File: 4E049FB8F2C111EFA4F7458B762E951A.roa (raw, json)
Hash identifier: kWyJnWqAyccMKNcUjDLC6rwF+gmXoyZ+qQNKcWKmhOY=
Subject key identifier: 21:6B:80:EF:2E:40:2A:59:8F:40:F2:8F:90:CB:3B:30:74:F3:C9:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012BFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E049FB8F2C111EFA4F7458B762E951A.roa
Signing time: Mon 24 Feb 2025 15:09:12 +0000
ROA not before: Mon 24 Feb 2025 15:09:09 +0000
ROA not after: Sat 29 Mar 2025 15:09:09 +0000
asID: 203020
IP address blocks: 156.226.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76797 (0x12bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:09:09 2025 GMT
Not After : Mar 29 15:09:09 2025 GMT
Subject: CN=67bc8b98-c36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:d9:b3:57:a3:a8:11:da:49:5e:29:d1:89:
e1:dd:12:4b:81:87:47:8c:1c:5d:1b:09:00:67:97:
58:2a:13:16:ab:3a:4e:be:81:84:f0:12:09:6e:59:
66:fc:1d:70:8e:25:6b:42:30:86:9e:c8:7e:1d:f6:
1b:53:9b:c2:90:30:c8:0a:50:70:2e:fe:1e:fa:3a:
31:16:55:97:dd:41:8c:7b:fa:28:19:fa:d5:5a:2f:
c3:0b:bc:44:a5:70:6c:8f:ab:f6:7e:4e:2f:35:6f:
2c:6c:a9:98:1d:c2:e1:6f:7e:e3:ff:8d:9a:aa:f8:
59:5b:78:e3:df:46:bd:5b:cb:8c:94:2d:9d:b0:7a:
bf:a9:6e:c2:21:00:0b:69:5c:79:fc:70:d3:c2:1b:
a3:27:17:19:4a:51:12:7f:83:a1:95:fa:9a:f3:b2:
f9:3a:9d:52:c3:d8:7b:ef:c6:ec:1e:93:50:db:f6:
0e:82:ef:13:79:d7:68:f8:e0:c0:cb:0d:5e:20:b0:
cb:12:d2:23:f6:78:69:1c:e5:30:d4:5f:d8:2f:f0:
9a:80:89:f6:15:13:88:18:7c:58:d8:b0:67:8a:9c:
19:c1:8b:e4:c1:5b:56:21:ec:40:a4:88:1a:29:09:
e8:67:54:c8:0b:4a:59:c4:35:4a:4e:ad:91:09:e5:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:80:EF:2E:40:2A:59:8F:40:F2:8F:90:CB:3B:30:74:F3:C9:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E049FB8F2C111EFA4F7458B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.7.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2e:2c:82:ba:64:52:60:ff:10:ff:82:e6:4f:f6:75:84:50:
49:80:4c:a0:84:17:fe:61:d1:9a:06:3e:32:b6:05:6a:a6:f4:
02:16:31:c1:b0:25:7f:64:c5:b7:cd:42:c6:24:b5:a0:27:49:
d5:25:39:07:a3:a6:b8:bd:62:37:c2:6a:70:88:5a:8c:da:9d:
f4:a6:ea:35:74:8f:0e:d3:f5:0f:e2:b9:41:10:6e:ce:46:68:
77:95:9e:cb:da:3b:67:e6:17:5c:03:50:6e:31:3f:eb:82:50:
e4:e1:ad:07:7a:06:2d:e4:88:e2:16:7c:cf:17:98:4e:16:27:
15:64:c0:5e:f9:4c:7b:70:3d:e6:64:ca:72:81:40:5e:59:54:
59:78:a1:9a:b6:25:9f:16:29:9a:3c:bc:5c:38:0e:73:4a:0f:
ef:84:1f:60:3a:b7:f0:1b:09:5a:80:c7:dd:06:d8:e4:f9:59:
2d:5f:a9:d9:a6:ff:6f:fe:fe:ac:d5:2e:a6:19:a4:f7:00:e3:
f9:c1:64:15:d3:61:e7:cf:d7:88:55:83:8f:f7:4e:ca:9b:de:
01:c4:db:38:ca:12:d5:0d:99:cf:e2:20:a1:71:c2:bc:b3:0c:
8a:46:85:d7:58:72:3d:d8:65:ca:ea:fa:b5:26:f9:50:68:e4:
32:d8:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:15 2025 by rpki-client