Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A2871E261011EE85B842694AD9E6FC.roa
File: 50A2871E261011EE85B842694AD9E6FC.roa (raw, json)
Hash identifier: lU2whYwKZsWWA+5dJKuVbaoUd0iPERkBa24JAhQbwRI=
Subject key identifier: 39:17:BB:0E:05:9F:8C:E5:99:E0:16:EB:C1:90:AA:55:1C:99:17:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 30ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A2871E261011EE85B842694AD9E6FC.roa
Signing time: Wed 19 Jul 2023 08:43:21 +0000
ROA not before: Wed 19 Jul 2023 08:43:17 +0000
ROA not after: Wed 03 Jan 2024 08:43:17 +0000
asID: 139057
IP address blocks: 156.246.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12525 (0x30ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:43:17 2023 GMT
Not After : Jan 3 08:43:17 2024 GMT
Subject: CN=64b7a229-258f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:d9:76:70:78:6f:42:63:98:0f:b4:34:ab:
3e:e9:5f:7a:58:09:20:1d:ee:fa:77:30:66:96:61:
8d:7f:cb:1c:db:ba:41:79:5a:31:d8:30:66:fd:ed:
fc:28:ed:e0:58:ab:4d:76:cf:48:85:af:00:bf:88:
95:12:11:b3:a6:14:46:79:3d:71:ac:b7:7f:21:99:
45:96:f9:1f:bd:c6:29:d5:c1:b4:73:2e:a6:90:2e:
7f:90:f0:10:f4:51:11:0f:f9:2b:72:25:da:3b:62:
e5:91:2a:3c:1c:41:66:49:a9:7b:d1:f2:de:a3:f2:
e0:cf:f7:a9:e1:c3:12:64:75:16:5c:66:12:a1:3f:
70:3a:d0:6b:b5:e3:dd:18:3c:5f:cb:e5:6c:13:84:
85:95:0e:69:22:de:20:c7:0e:2d:f2:0a:1a:60:5c:
0d:20:a3:84:85:5a:e2:49:af:ad:f6:e8:21:d8:95:
07:f5:22:aa:ff:cc:67:64:fd:cc:00:4f:bf:40:45:
dc:e7:19:59:88:99:62:05:82:4f:fd:dc:4c:fa:53:
e3:72:ac:0f:10:d6:29:81:a4:d7:8d:41:78:2b:ae:
fa:e3:f0:c4:fe:bc:95:8d:fa:fa:4a:fc:51:c8:2c:
5a:32:9d:d1:00:d1:55:f7:22:f5:bf:0d:27:f2:ff:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:BB:0E:05:9F:8C:E5:99:E0:16:EB:C1:90:AA:55:1C:99:17:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A2871E261011EE85B842694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.18.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3f:21:62:b6:7b:53:cc:3e:ee:94:03:35:b6:5b:b2:64:7a:
8a:50:d1:f6:f0:db:c7:b2:01:1b:cf:d0:16:7a:33:7c:9e:9d:
25:fa:3b:8e:f3:02:dc:34:f3:f0:25:e0:f8:62:a9:94:c6:1f:
2b:31:8d:da:79:65:62:93:91:c6:c8:e2:b2:b0:af:7b:94:28:
b8:4b:e9:13:e3:3c:15:c2:0c:89:a6:4f:ff:ab:75:4f:79:cd:
8c:0e:f2:ff:81:3b:22:98:d0:44:8a:89:d9:dc:3b:f6:25:2e:
37:9b:85:65:bf:84:eb:51:7a:25:c8:7f:da:1e:27:d9:1b:80:
e1:a2:e6:36:67:78:63:7a:95:64:c3:23:f7:f4:96:dc:3f:1a:
51:df:59:9a:fc:cb:8c:08:83:8d:69:c8:e1:ad:ff:4d:dc:26:
a9:40:db:ca:ce:c2:3a:eb:6f:f6:7c:d7:27:4a:87:5b:64:d8:
03:e9:3f:3c:af:d9:98:02:4a:56:e6:bf:e1:97:80:7c:4b:05:
79:ef:3c:ff:87:85:8b:c4:c7:3e:a5:91:0e:56:10:20:ba:8d:
93:60:06:df:dd:40:c4:c9:35:50:87:e4:19:59:21:7f:59:f8:
93:2e:e3:ba:09:f0:7b:83:9e:83:b6:c4:8d:83:4e:df:25:43:
bd:7a:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:07:26 2025 by rpki-client