Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/684F225EF1AF11ED9140B1724AD9E6FC.roa
File: 684F225EF1AF11ED9140B1724AD9E6FC.roa (raw, json)
Hash identifier: RD0GjtPdrpds9YlbsOvBe7Vcv+gTSDa6gab0/THVkd0=
Subject key identifier: 53:74:8F:F0:58:20:37:2D:D6:E6:0D:70:74:26:CE:1A:3D:22:09:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 231D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/684F225EF1AF11ED9140B1724AD9E6FC.roa
Signing time: Sat 13 May 2023 16:58:39 +0000
ROA not before: Sun 14 May 2023 16:58:35 +0000
ROA not after: Sat 10 Jun 2023 16:58:35 +0000
asID: 138995
IP address blocks: 156.227.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8989 (0x231d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 16:58:35 2023 GMT
Not After : Jun 10 16:58:35 2023 GMT
Subject: CN=645fc1bf-d1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:65:e0:50:b1:d4:e8:6a:f5:6b:b2:44:57:
0a:b0:de:3b:6d:43:91:7e:7d:8e:40:52:83:3a:2d:
92:7b:95:96:84:d5:d2:0b:f7:e6:be:04:89:6e:56:
0d:ad:a0:1a:70:9d:93:79:55:48:b9:d6:6b:b6:99:
c3:05:c5:23:23:c0:e8:66:40:39:a6:d4:5f:aa:8d:
75:ae:97:0f:dd:24:ea:0c:8c:ae:0d:9c:fc:bd:88:
29:c0:9b:b7:04:5c:1c:e2:88:8f:fa:43:23:79:cc:
c4:34:a0:6c:f0:5a:85:8c:34:7a:d1:50:2d:8c:ff:
80:a2:13:96:0e:0c:ab:ea:67:d1:49:70:f2:0d:b1:
5b:aa:ec:44:83:1f:9c:0c:ad:df:ba:09:39:bb:08:
01:b8:e8:71:9d:fe:1c:7d:49:ba:95:8d:9b:57:d7:
4a:62:c2:8c:7e:4c:dc:db:80:6c:11:c1:44:f4:62:
cf:74:e6:dc:24:4c:34:63:33:55:10:a7:fa:2b:50:
2e:65:e2:21:53:f5:ce:62:e7:af:46:6d:a8:fa:e2:
cb:1d:2f:3b:9d:8e:62:ca:d4:ff:74:15:9e:46:ee:
3a:6a:76:56:4e:be:8e:d6:16:b7:61:f7:14:b9:a7:
e6:2a:3e:b2:04:3d:33:24:e1:fd:b4:c6:4a:63:4b:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:8F:F0:58:20:37:2D:D6:E6:0D:70:74:26:CE:1A:3D:22:09:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/684F225EF1AF11ED9140B1724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.30.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5e:25:e8:a6:52:cb:a8:57:9e:96:c0:d2:ce:ad:d5:80:92:
2c:56:c9:17:92:90:69:c1:37:fa:21:49:9d:79:e4:b2:a4:5d:
de:1a:1b:3c:1c:c8:79:c7:b0:81:c4:f5:de:d8:dc:a4:0a:fb:
f9:1a:ae:57:b8:20:ac:98:0a:68:57:c9:68:6c:66:dd:cb:c2:
50:a1:cc:ce:6d:6d:f2:4d:5d:b1:6d:62:7b:2a:6a:11:a8:dd:
db:4d:bf:f7:82:9e:e2:fc:03:52:7c:af:12:3c:64:c8:40:22:
ec:5a:a1:90:a2:ae:83:c0:f2:3a:f7:c6:2e:91:06:80:7d:a8:
c6:f5:ea:3d:c4:06:07:af:52:6a:44:fc:ab:b4:da:6b:a7:a7:
39:9c:78:df:30:f2:3a:40:e3:c3:5a:e0:1f:16:39:fe:37:a8:
59:73:2b:5d:43:5b:27:30:4c:5d:7f:11:f4:64:58:56:2f:05:
87:c7:68:d4:5c:15:2e:6f:7b:02:e9:b7:b2:1b:13:e9:ee:ec:
46:74:6f:63:f0:1f:f0:37:6b:64:ee:25:d7:1b:17:d1:88:f5:
12:55:11:5b:0d:cd:c9:9d:ed:e1:4a:49:e4:a7:fe:d4:b0:49:
f7:63:be:62:d8:5b:f4:15:8a:94:75:50:9e:4c:f1:1a:69:90:
00:ef:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:47:16 2025 by rpki-client