Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F19C86F5CF11EF99DF418B762E951A.roa
File: 61F19C86F5CF11EF99DF418B762E951A.roa (raw, json)
Hash identifier: 30r5IAx/PDINdJ1APgmVreQd274wDY0vq8SD7WgLujw=
Subject key identifier: 12:BB:1B:91:49:C2:48:5E:ED:F4:96:FF:D3:4E:DB:D2:9A:92:46:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F19C86F5CF11EF99DF418B762E951A.roa
Signing time: Fri 28 Feb 2025 12:27:32 +0000
ROA not before: Fri 28 Feb 2025 12:27:28 +0000
ROA not after: Sun 30 Mar 2025 12:27:28 +0000
asID: 203020
IP address blocks: 156.243.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81292 (0x13d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:27:28 2025 GMT
Not After : Mar 30 12:27:28 2025 GMT
Subject: CN=67c1abb4-1429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:65:cd:02:04:67:27:99:a9:80:85:17:db:
75:34:0a:8d:8e:0f:9f:62:fb:5b:8d:42:58:29:2b:
2f:47:86:ae:4b:8f:5e:94:e6:88:0c:f6:f8:00:8d:
7d:e8:2e:99:f9:09:8b:8c:f0:45:65:b3:00:d6:2a:
67:9a:51:88:d8:51:8a:1a:12:d8:72:bb:dd:9f:ce:
30:ba:ae:26:af:59:59:ec:c9:dc:39:75:9a:51:2f:
b8:8d:ef:aa:c8:30:0f:e4:39:1f:8d:6c:2c:9e:15:
e1:c3:54:d4:e0:c4:82:d3:df:87:55:f3:66:ea:3a:
2c:c0:66:c0:82:d5:49:23:57:a1:d3:f1:c0:fa:ee:
de:c5:36:86:62:ba:7d:59:50:6a:76:ec:e6:c7:87:
02:c1:bd:4e:5a:2c:72:13:17:2c:a0:c5:a1:86:b8:
1d:e8:ee:23:7a:0f:58:ff:73:63:0c:ee:40:42:f5:
57:fa:1e:a7:9f:76:36:ed:14:e0:8f:5a:08:a7:fa:
25:c4:e7:b4:c0:36:9c:c1:c5:aa:23:cc:fd:e7:b2:
47:73:a4:3e:a0:aa:ae:c9:aa:3b:1a:ff:3e:50:7d:
b8:91:cf:9e:ba:81:cf:e8:8b:63:03:6e:b3:85:ea:
00:e7:50:3a:be:be:1a:20:54:df:4f:eb:22:9a:80:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:1B:91:49:C2:48:5E:ED:F4:96:FF:D3:4E:DB:D2:9A:92:46:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F19C86F5CF11EF99DF418B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3d:ce:be:b6:4e:57:87:b0:bb:11:67:09:aa:09:ba:36:43:
e5:70:7d:5d:37:68:d1:89:c6:1a:99:77:2c:c2:fb:d4:2a:19:
f6:98:f4:13:3e:53:40:f4:61:28:b9:89:2d:42:cd:3e:13:ef:
10:e1:35:8f:81:8a:4f:9d:ab:b0:96:36:a4:a6:8f:4f:5d:23:
09:fa:b9:10:56:ff:7a:95:91:70:7d:10:d8:43:c2:f3:6e:3e:
24:e6:11:42:eb:9b:95:be:9a:8f:1d:7b:04:67:54:d6:6b:bc:
7c:89:81:6f:f1:78:34:93:ef:d0:18:8d:59:e0:aa:06:5e:ee:
16:07:6c:3f:dd:40:66:59:e9:40:65:48:91:ea:bf:ed:71:d3:
11:e3:02:93:5d:7e:11:f9:7c:3d:4c:6a:05:6e:56:1f:37:35:
70:6d:e9:04:73:84:a7:a6:5c:84:20:df:4e:2a:be:2b:7c:93:
35:1e:34:9b:92:d4:bb:0e:e6:02:b2:e9:e1:ab:3a:53:03:b7:
94:bb:9e:2e:c1:fc:48:fc:37:da:70:d2:e7:aa:15:de:27:76:
f1:6d:2d:f3:48:c4:3b:eb:6b:20:d6:7a:33:c9:bf:ea:cc:f1:
1f:25:1b:6e:c3:4d:2b:7f:e3:37:8e:72:91:a5:61:ac:c2:ed:
fc:0b:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:35 2025 by rpki-client