Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E7132CEB35F11ED8C3615ABF1222468.roa
File: 5E7132CEB35F11ED8C3615ABF1222468.roa (raw, json)
Hash identifier: huI5o07H5kGo7Ua6O/0OedM9xOE8FqJD/0xi0vkcrLs=
Subject key identifier: 31:79:BF:C1:CC:ED:FE:FF:69:08:4B:00:91:30:3F:65:4B:24:75:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E7132CEB35F11ED8C3615ABF1222468.roa
Signing time: Thu 23 Feb 2023 09:49:31 +0000
ROA not before: Thu 23 Feb 2023 09:49:27 +0000
ROA not after: Mon 23 Oct 2023 09:49:27 +0000
asID: 133199
IP address blocks: 156.245.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7174 (0x1c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:49:27 2023 GMT
Not After : Oct 23 09:49:27 2023 GMT
Subject: CN=63f736ab-7603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:22:d2:73:c4:d9:0f:69:4a:62:cc:c1:7b:
18:13:9c:c0:e7:c8:bc:fa:78:fa:45:9a:ec:9a:b1:
23:b3:cb:77:4d:2c:cb:d1:4b:ac:f9:41:a4:5d:bb:
30:9c:24:a7:a0:2d:e6:af:0e:b5:22:33:0c:ec:bf:
96:60:52:94:15:a3:0e:3d:be:b9:fe:01:e4:92:bc:
be:b6:ce:7f:d8:33:0c:76:0a:c0:6a:83:9d:13:dc:
74:03:b8:6c:c6:a7:76:a5:75:45:e2:08:0b:cd:78:
07:d6:2b:e3:c6:1c:27:e7:6d:a3:37:f0:88:ae:6c:
dd:b1:12:4f:7d:b1:f4:78:a2:8a:76:25:7e:23:23:
d8:64:fe:d4:7c:01:ac:a3:e3:1c:b0:46:2a:c8:62:
7f:f9:e2:ca:76:36:fe:65:ab:0f:6e:03:35:48:28:
8b:e7:e4:5d:61:39:34:c0:2e:17:31:29:2a:d4:aa:
be:3d:69:de:0a:15:3c:35:6c:11:c5:b3:88:90:7d:
3d:fc:99:d9:f6:4b:cb:bc:6e:16:5c:7d:0b:66:70:
36:19:40:87:dd:b4:eb:45:7a:a1:bc:b4:41:77:49:
02:77:da:7a:0f:63:cd:41:74:f3:5f:9b:65:6c:29:
56:a2:78:3d:6a:26:b6:39:c9:4b:3b:cd:d1:28:c5:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:79:BF:C1:CC:ED:FE:FF:69:08:4B:00:91:30:3F:65:4B:24:75:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E7132CEB35F11ED8C3615ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:71:82:ba:f6:75:20:fa:8e:6b:61:b6:ec:f4:7e:ce:11:6b:
e9:d3:45:ca:c0:58:ec:54:51:a8:22:e5:61:25:c5:4c:cb:4a:
79:94:e3:07:70:48:f3:3d:f8:ca:8c:25:c2:b2:6c:41:47:b2:
de:db:99:95:49:5c:64:0d:eb:56:31:60:7a:55:80:fa:21:3e:
26:f8:a8:5f:65:03:9a:17:36:32:4a:00:a7:54:6a:fb:9b:06:
60:9b:0e:78:5a:62:0a:31:f8:b5:b3:45:38:36:2b:57:ff:fc:
23:f4:6c:da:67:8b:96:d9:5e:84:77:7b:25:8f:e2:57:5b:80:
81:c4:68:71:7f:df:18:55:f0:19:7f:64:4d:59:5e:d4:f2:8d:
0e:12:2c:e1:16:23:8e:37:2c:3c:13:2b:72:b3:10:2b:2d:13:
d5:43:5a:c0:5b:c1:b6:5f:62:84:77:14:9f:d3:a2:65:f4:8a:
31:8d:c2:26:d6:b9:70:85:74:8f:a9:00:73:31:4e:8f:83:9b:
f1:22:e9:25:ff:9a:d7:4e:fc:3e:f1:35:89:bf:80:94:a1:df:
e8:54:ce:d5:97:93:24:e9:a3:ce:fc:46:23:0d:d8:05:79:25:
b1:a4:38:c4:3d:c8:34:1d:68:fe:c6:d2:6d:4c:df:13:db:36:
d6:98:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:57:25 2025 by rpki-client