Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E67DB287EBD11EE94DF99684AD9E6FC.roa
File: 5E67DB287EBD11EE94DF99684AD9E6FC.roa (raw, json)
Hash identifier: OkvbpxirlKC43o0F+gGZQPmr2a9uhCA5XSQbcxWCCdU=
Subject key identifier: E0:62:ED:38:ED:01:42:64:25:0E:9C:81:12:0D:62:22:4F:3F:2D:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E67DB287EBD11EE94DF99684AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:03:50 +0000
ROA not before: Thu 09 Nov 2023 05:03:46 +0000
ROA not after: Wed 06 Nov 2024 05:03:46 +0000
asID: 139057
IP address blocks: 156.238.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17645 (0x44ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 05:03:46 2023 GMT
Not After : Nov 6 05:03:46 2024 GMT
Subject: CN=654c6835-7eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:94:ae:69:5c:69:c4:cf:2f:7d:d4:70:c3:
6e:c4:50:81:2b:24:b8:c3:8a:60:0d:94:4b:5e:43:
c9:de:b1:56:bb:17:22:2a:4f:f0:ef:6c:93:d1:ee:
40:2c:fe:be:62:70:34:a5:3e:8c:fb:e1:43:20:74:
38:ad:7c:ef:f6:2c:ad:4d:e3:69:73:d8:90:c6:7f:
a5:15:06:ac:fc:33:15:ec:09:b5:f7:23:bf:3a:df:
7e:60:67:07:b7:a9:f8:fb:51:a6:96:79:88:8a:9b:
5e:1a:71:45:19:81:20:73:60:3b:e9:44:3c:20:04:
2a:c3:c6:8e:d5:46:38:d6:05:96:08:c4:e2:5b:c7:
1e:44:28:02:de:8e:7c:7b:c6:f3:6a:eb:1c:69:d2:
7f:c9:de:c4:20:7e:d8:09:9c:1e:64:63:b5:84:3c:
71:cb:9d:07:d5:f5:a1:22:0f:58:4e:5f:ba:d4:a6:
1d:4f:85:46:54:1b:13:2d:78:73:bb:69:b7:4e:53:
ed:63:dc:2f:f6:6b:78:60:d2:0e:45:ed:68:d1:d3:
28:2e:5e:81:83:5c:f8:00:58:ac:22:60:c0:1d:31:
52:54:b2:a5:1f:85:b0:ea:81:c4:97:21:5c:c2:19:
e6:97:07:2e:7e:7b:ca:35:53:a4:7a:89:6f:a0:32:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:ED:38:ED:01:42:64:25:0E:9C:81:12:0D:62:22:4F:3F:2D:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E67DB287EBD11EE94DF99684AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ca:ae:ce:81:d6:cf:72:82:18:23:8b:01:fd:7f:fc:4c:83:
1e:da:d6:c1:61:6e:4e:06:aa:bd:42:b3:78:fc:9b:30:94:57:
81:ef:7c:49:88:9c:99:d1:2a:34:19:d2:e8:46:f1:f5:0b:76:
ec:df:08:0e:e9:9f:1b:84:0e:69:f8:7a:b1:9e:8a:de:7c:81:
96:00:b5:19:4d:21:26:54:c7:7d:ed:09:30:98:4d:ba:20:5b:
3f:bb:21:c3:b1:c4:b7:f8:88:54:fa:4f:6a:66:c7:4d:16:b2:
e7:30:c9:1e:c9:f5:f3:c2:20:b8:ff:50:15:d9:d0:5d:0c:17:
06:f5:f4:ad:46:29:55:fd:0c:1b:90:c3:bc:a7:de:60:86:3d:
f0:0d:57:8b:44:44:70:93:78:62:09:6d:bb:d9:4f:28:e3:22:
05:9e:0b:17:54:c8:46:cb:46:13:29:ac:bb:c6:7d:bf:8e:af:
b2:d3:73:7d:69:f3:3a:62:75:eb:c8:7d:25:9d:01:0d:52:01:
6d:9f:31:b7:3a:b5:e1:01:8c:9c:62:d9:08:44:06:e5:70:95:
b9:db:ac:bb:99:d5:4d:e6:45:00:3d:c8:62:07:8a:d2:7a:dc:
ec:fe:09:c0:68:a6:e6:64:f3:a8:b5:3a:2f:67:51:7b:59:4e:
05:3c:e1:b5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRO0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNTAzNDZaFw0yNDExMDYwNTAzNDZaMBgxFjAU
BgNVBAMTDTY1NGM2ODM1LTdlYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3TpSuaVxpxM8vfdRww27EUIErJLjDimANlEteQ8nesVa7FyIqT/DvbJPR
7kAs/r5icDSlPoz74UMgdDitfO/2LK1N42lz2JDGf6UVBqz8MxXsCbX3I786335g
Zwe3qfj7UaaWeYiKm14acUUZgSBzYDvpRDwgBCrDxo7VRjjWBZYIxOJbxx5EKALe
jnx7xvNq6xxp0n/J3sQgftgJnB5kY7WEPHHLnQfV9aEiD1hOX7rUph1PhUZUGxMt
eHO7abdOU+1j3C/2a3hg0g5F7WjR0yguXoGDXPgAWKwiYMAdMVJUsqUfhbDqgcSX
IVzCGeaXBy5+e8o1U6R6iW+gMp3/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4GLt
OO0BQmQlDpyBEg1iIk8/LT0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzVFNjdEQjI4N0VCRDExRUU5NERGOTk2ODRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7oEwDQYJKoZIhvcNAQELBQAD
ggEBAI/Krs6B1s9yghgjiwH9f/xMgx7a1sFhbk4Gqr1Cs3j8mzCUV4HvfEmInJnR
KjQZ0uhG8fULduzfCA7pnxuEDmn4erGeit58gZYAtRlNISZUx33tCTCYTbogWz+7
IcOxxLf4iFT6T2pmx00WsucwyR7J9fPCILj/UBXZ0F0MFwb19K1GKVX9DBuQw7yn
3mCGPfANV4tERHCTeGIJbbvZTyjjIgWeCxdUyEbLRhMprLvGfb+Or7LTc31p8zpi
devIfSWdAQ1SAW2fMbc6teEBjJxi2QhEBuVwlbnbrLuZ1U3mRQA9yGIHitJ63Oz+
CcBopuZk86i1Oi9nUXtZTgU84bU=
-----END CERTIFICATE-----
Generated at Sun May 11 13:57:26 2025 by rpki-client