Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ABEF24E53C611EEAC63BB574AD9E6FC.roa
File: 5ABEF24E53C611EEAC63BB574AD9E6FC.roa (raw, json)
Hash identifier: Anukbd06HPk8Rn3JJjKLNZqT0cw7X5FuWMM0mrV6Dxg=
Subject key identifier: 82:53:7F:FA:64:37:19:BE:89:17:3A:C2:A5:A9:EE:5B:19:E4:15:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 39B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ABEF24E53C611EEAC63BB574AD9E6FC.roa
Signing time: Fri 15 Sep 2023 12:49:49 +0000
ROA not before: Fri 15 Sep 2023 12:49:45 +0000
ROA not after: Sat 28 Oct 2023 12:49:45 +0000
asID: 9009
IP address blocks: 156.236.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14772 (0x39b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 12:49:45 2023 GMT
Not After : Oct 28 12:49:45 2023 GMT
Subject: CN=650452ec-355d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:05:fd:13:d5:84:03:ba:d2:3b:11:89:af:
9e:f0:c3:16:3a:55:b1:9e:67:43:bc:76:78:55:07:
7b:a0:1a:f9:01:70:9b:65:da:4b:34:27:01:86:e5:
7f:dd:90:88:cc:be:87:cd:64:0e:63:a5:e9:bb:e0:
57:99:04:b6:eb:16:99:bd:d4:14:b1:50:2b:56:e2:
56:49:1d:c2:ce:0d:99:27:87:a7:d9:50:50:d7:0c:
1e:ad:8f:af:16:aa:60:c5:4f:d8:80:6f:3d:94:7e:
45:1c:e6:4d:61:ac:5f:a7:0c:88:76:92:63:77:5b:
35:f8:b3:b0:a4:37:47:39:17:65:0e:ac:58:a7:07:
d1:42:0b:8d:60:8f:87:8f:43:48:16:d4:e7:68:cb:
24:f7:f3:2c:ed:75:4b:e2:d5:2d:76:43:89:38:34:
fa:d1:6c:21:82:0b:0a:fe:9a:cc:5c:fe:73:d9:0f:
3d:dc:53:2d:dd:0a:16:b7:7d:15:10:ba:0e:ea:95:
5a:3f:0c:65:e4:66:1a:d3:90:5a:1a:17:6d:d0:c1:
89:55:5d:cd:ad:8f:bd:5d:74:3f:e5:e1:83:3f:84:
42:67:4b:d8:a4:5c:8f:9c:5d:da:95:86:ee:4b:1c:
58:3b:15:9f:23:6b:05:52:87:31:de:9d:34:2e:50:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:7F:FA:64:37:19:BE:89:17:3A:C2:A5:A9:EE:5B:19:E4:15:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ABEF24E53C611EEAC63BB574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.9.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ec:d7:00:b9:19:8d:1a:90:99:8e:d4:ff:5a:dd:7b:9e:74:
aa:21:52:96:8c:30:76:5c:22:ae:19:5e:6e:fe:05:68:5f:af:
ee:98:27:00:b3:ca:10:90:34:45:23:6d:19:da:8f:c3:ae:fa:
f4:3d:87:b0:c1:99:d2:b5:6d:b6:97:c3:22:90:46:12:a9:84:
44:1e:e4:fc:fb:50:ee:91:fc:c5:dc:9e:d4:84:24:08:5e:e3:
e9:b3:66:cc:7b:4f:a4:de:80:d3:11:ce:34:1b:fb:d4:4a:0f:
30:a8:73:0d:55:03:06:5b:8b:d3:cd:6a:08:f8:ff:17:a5:ff:
75:f6:b9:a0:2c:62:54:fd:db:95:81:ec:73:13:66:d4:4c:dc:
c0:72:c2:2c:13:49:fa:c5:e9:bd:f3:26:51:7e:26:3c:33:04:
79:dc:4c:58:d8:0d:01:d5:97:bb:02:f2:a0:15:10:94:cb:54:
f3:8c:15:db:1c:3a:04:49:86:3c:98:73:f1:57:95:0f:5e:63:
58:96:f5:77:d0:11:77:f6:7c:41:1e:39:c0:f9:93:87:b1:28:
9b:ef:5f:39:92:78:fd:90:8b:a8:74:15:44:02:b6:56:e6:bd:
c2:dc:a4:ac:e8:d0:4f:09:1b:40:1c:3d:22:a1:50:fc:20:21:
20:09:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:08:19 2025 by rpki-client