Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53628734FFC011EF8361A95F762E951A.roa
File: 53628734FFC011EF8361A95F762E951A.roa (raw, json)
Hash identifier: N2Ak56xhp3hUO/sOrnlM/bhLXNNEJMHag1WwWyiAGf8=
Subject key identifier: 07:BA:42:15:01:A9:62:12:58:23:FF:3E:BC:E6:C4:4D:33:32:95:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01457C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53628734FFC011EF8361A95F762E951A.roa
Signing time: Thu 13 Mar 2025 04:04:57 +0000
ROA not before: Thu 13 Mar 2025 04:04:52 +0000
ROA not after: Wed 02 Apr 2025 04:04:52 +0000
asID: 57043
IP address blocks: 156.253.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83324 (0x1457c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 04:04:52 2025 GMT
Not After : Apr 2 04:04:52 2025 GMT
Subject: CN=67d25969-739f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:80:2f:ab:e4:b1:a0:99:23:3b:b6:83:b7:
61:37:12:ee:82:ec:2a:cd:a9:87:b6:d6:ff:b8:0e:
79:18:53:ea:ac:b9:9f:58:31:49:18:6e:55:4b:0c:
78:fd:e3:9a:9f:d8:bb:4c:38:f2:bb:37:30:bf:e7:
6f:82:6c:17:ff:fb:d1:05:b9:e8:c6:de:25:ac:32:
8d:e7:9f:cc:4a:6d:ea:7f:ad:b5:6c:2c:38:a6:d3:
4a:92:f0:b8:85:4f:c4:b0:c1:0a:6c:f1:f5:2a:3d:
63:03:54:49:ea:77:ab:43:48:f1:d7:a1:50:10:dc:
9c:b6:1d:c9:95:5f:b1:db:8f:33:2b:28:7b:fe:00:
1b:d6:40:51:db:cf:2a:72:e3:26:7f:ad:4f:49:b2:
2b:c8:fc:43:58:13:65:b5:8e:db:a5:6f:1a:5e:ff:
55:5b:ee:0f:9a:f9:3f:c8:1d:e1:dd:cf:39:82:92:
6a:08:ca:e2:89:94:ad:2c:ac:78:af:e9:6e:95:3f:
ac:10:dc:6e:82:91:3d:d0:d2:c0:aa:88:0e:04:b4:
8e:81:da:aa:ab:ae:65:e1:8b:43:e3:a0:36:48:39:
8d:17:13:da:f6:77:d2:cd:29:dc:a2:3f:2e:a6:6d:
14:66:d8:d4:a8:07:2b:ad:cb:d1:6c:e2:ce:59:4b:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:42:15:01:A9:62:12:58:23:FF:3E:BC:E6:C4:4D:33:32:95:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53628734FFC011EF8361A95F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:03:94:1c:48:b9:3a:d2:b2:ec:72:72:69:04:d9:38:19:23:
89:00:20:2f:68:0b:0d:88:20:45:c0:66:56:46:b1:f2:e5:a7:
4b:e8:41:9e:0f:c1:c2:bc:4f:58:34:3d:72:5a:c9:3e:d9:0b:
01:0c:46:21:e5:89:19:e6:7d:ca:f2:63:6b:43:d5:3a:e5:67:
55:d4:88:01:74:69:70:9b:a8:ad:82:f4:4e:91:c1:ec:44:03:
1d:d3:08:05:1e:85:51:6a:70:c3:54:92:b9:c7:67:ff:6d:2d:
2a:29:3d:3f:9b:e4:56:1e:f3:09:af:d8:fb:dc:39:dd:85:1c:
3c:14:21:63:26:cb:04:10:60:1c:2d:b2:e7:98:03:b6:a0:79:
be:86:e6:bc:61:21:d3:b0:0c:2a:6c:50:14:32:6c:d5:7b:24:
14:05:fe:e9:35:57:db:d8:45:2d:66:0d:be:8f:f5:d0:d8:f1:
13:64:30:9b:af:5c:9b:d7:5a:71:cd:c2:eb:7a:db:3b:a4:f8:
dc:92:3a:39:4e:18:ff:ee:13:32:e4:43:1e:0b:e0:f4:d2:73:
51:f4:c8:ad:84:be:a8:3d:7b:6b:db:2e:63:82:a5:a2:fb:62:
d6:7a:1d:9f:84:7d:25:9a:d5:95:d9:84:b4:56:f7:bc:27:fa:
c0:3d:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:00:39 2025 by rpki-client