Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50C691EAF02B11EFB5119ABA762E951A.roa
File: 50C691EAF02B11EFB5119ABA762E951A.roa (raw, json)
Hash identifier: O0BL+2Gwe9JclG501RvLmQXvA2fSq+X1T07UsfFTiY4=
Subject key identifier: FC:17:6E:D2:C9:28:B5:14:8D:11:6D:DD:8C:06:E2:3A:94:CF:F1:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0127DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50C691EAF02B11EFB5119ABA762E951A.roa
Signing time: Fri 21 Feb 2025 08:10:30 +0000
ROA not before: Fri 21 Feb 2025 08:10:26 +0000
ROA not after: Thu 20 Mar 2025 08:10:26 +0000
asID: 54600
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75740 (0x127dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 08:10:26 2025 GMT
Not After : Mar 20 08:10:26 2025 GMT
Subject: CN=67b834f6-75f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:e6:fd:10:df:01:1a:1e:2f:d1:d3:60:1f:
4b:12:6a:04:16:72:4f:d4:33:cb:84:36:5c:aa:fe:
eb:95:c6:22:ea:0e:0d:70:b7:02:6b:6a:d4:ce:cf:
c3:c1:ab:80:b2:11:3d:c1:f0:70:f5:f6:63:2b:f2:
08:4c:93:e5:3c:cc:16:95:6c:c3:52:5a:df:dc:ef:
95:eb:ca:74:4c:4e:93:79:c9:8d:fc:42:cb:1a:7d:
d9:79:e8:e1:69:96:a2:d9:d5:aa:5c:56:b2:83:9c:
05:ea:a0:01:59:fe:a9:7e:84:a3:91:08:a3:88:de:
cd:aa:22:ee:22:48:d6:9d:50:07:9e:0e:2e:cc:15:
d4:a6:8d:9e:aa:8b:a5:32:d7:f0:d1:ff:e8:c3:95:
0c:81:d7:95:89:34:24:66:a2:19:77:b5:fe:47:a1:
bf:46:73:42:4a:f3:73:f9:a9:02:58:28:7a:00:a5:
0b:17:f8:be:9c:79:3c:f5:be:cd:78:69:2e:66:e7:
2b:46:41:91:da:ff:7b:98:d1:37:21:f9:4f:43:72:
54:57:05:0b:3a:aa:48:a9:1d:92:a5:c9:81:e1:0a:
5a:a0:71:ff:6e:0c:99:e3:ac:c7:16:f5:be:9b:20:
5b:ba:7c:f0:9e:d2:07:d5:b0:2b:d7:02:56:a7:5f:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:6E:D2:C9:28:B5:14:8D:11:6D:DD:8C:06:E2:3A:94:CF:F1:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50C691EAF02B11EFB5119ABA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
32:1b:77:18:ec:14:c8:46:c0:8b:7f:59:b7:a4:a3:9c:e9:ba:
11:c7:e5:ef:3d:e7:c8:9b:f0:7b:41:1b:44:32:66:54:e2:c6:
15:e8:38:dc:3c:bc:41:e5:eb:75:52:16:3a:9e:f2:54:97:73:
2d:74:39:5a:45:e2:de:90:c8:0f:dc:e5:b2:bb:35:bd:d3:b6:
3f:8a:cb:bd:d6:6b:08:f0:b1:90:0d:54:9a:21:24:76:ef:26:
34:e8:5f:fc:7b:ea:5c:5d:c8:db:d8:42:ab:a8:d9:71:2c:53:
53:ea:53:2b:07:53:14:c5:fb:14:ea:05:8e:65:f2:c1:36:4a:
41:20:a3:c2:13:7d:4a:93:3c:5a:82:e2:af:da:a3:d4:5d:18:
2e:ce:ee:97:34:58:6c:8c:57:c8:f8:fc:55:ae:d5:a5:f9:8d:
4a:aa:fe:a9:fb:2f:ad:24:2d:a5:a4:57:b8:fe:56:48:77:cd:
1d:6c:53:3d:c9:37:f7:53:09:64:7b:26:21:ab:bb:89:c7:db:
45:f5:89:3d:9f:96:98:b1:2e:d3:6b:f2:c0:92:bd:a4:fa:b9:
d0:dd:a4:f1:01:15:22:93:5e:fe:b5:15:74:ac:23:d9:5b:50:
5c:55:a4:aa:8f:6c:d6:6c:90:71:a9:1d:74:a8:bc:4a:05:3f:
05:99:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:58:22 2025 by rpki-client