Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3BEB3A3A4911EE8857C5134AD9E6FC.roa
File: 6C3BEB3A3A4911EE8857C5134AD9E6FC.roa (raw, json)
Hash identifier: Cc5bjO+kPx+pIjvovTm6048eTnicJCG+OrUzbG9y5ds=
Subject key identifier: 47:1C:9D:51:CA:78:0F:EA:CE:E8:6A:5C:02:47:09:0B:8C:FC:87:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3530
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3BEB3A3A4911EE8857C5134AD9E6FC.roa
Signing time: Mon 14 Aug 2023 02:22:32 +0000
ROA not before: Mon 14 Aug 2023 02:22:29 +0000
ROA not after: Sat 13 Jan 2024 02:22:29 +0000
asID: 139057
IP address blocks: 156.251.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13616 (0x3530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 02:22:29 2023 GMT
Not After : Jan 13 02:22:29 2024 GMT
Subject: CN=64d98fe8-d558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:09:22:b0:86:4c:3c:eb:71:f9:40:78:5d:
0a:c1:a1:25:f8:b3:f4:29:e3:c2:d8:33:98:aa:5e:
0a:51:c3:1d:7c:8e:94:9e:ad:2e:22:b7:ff:16:31:
da:4d:53:c1:ac:07:df:a3:db:8c:e5:63:61:77:3b:
60:ab:f6:99:fc:7e:62:05:3f:c4:85:5b:41:d6:af:
50:60:71:85:12:0a:01:59:60:db:e3:cc:4b:eb:4d:
3c:f9:0b:c4:ca:8a:97:38:60:2e:89:f7:60:72:1a:
bf:01:1a:e6:f3:05:ae:d6:ab:42:dc:5a:39:80:4a:
4b:ec:85:60:c0:b7:bf:de:b7:c9:30:53:99:9d:4a:
71:f5:12:1f:1d:33:66:dc:9a:72:21:17:5f:3b:68:
f3:61:a2:cd:0c:68:aa:3a:0f:c2:2d:3f:4c:26:e0:
0a:1d:b5:ca:bd:50:fd:73:c8:fb:86:38:82:f8:e7:
aa:30:23:00:58:e8:dd:87:e2:36:47:cf:04:6a:03:
9b:7b:4e:33:80:63:f4:a8:80:ce:8a:53:41:1c:d4:
7d:88:52:08:6c:88:36:43:40:f7:bf:52:17:4e:50:
c2:86:68:b2:11:e2:d0:bc:05:9a:7c:37:4c:b8:e8:
ec:72:64:e4:bc:ba:8a:30:e1:58:10:66:96:d3:03:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:9D:51:CA:78:0F:EA:CE:E8:6A:5C:02:47:09:0B:8C:FC:87:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3BEB3A3A4911EE8857C5134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:86:8f:2d:0f:bd:09:2a:65:ba:e4:bb:d0:c0:9b:47:d1:b0:
3a:0c:9a:cb:6d:17:ea:39:41:ef:dd:b9:66:58:d5:88:c1:75:
6d:1d:09:cc:30:f3:89:1e:20:2d:07:31:38:e5:5c:38:fd:0f:
ac:3b:9a:48:ad:f3:a8:4d:ce:ad:ae:97:8e:8a:d5:f2:b4:0c:
2f:c2:ce:74:8c:35:6e:f9:52:a1:79:fb:50:0d:f5:ca:dd:21:
d8:a4:bb:dd:21:4a:0e:a0:5e:a9:5e:4a:e6:02:80:15:dc:18:
05:7f:d1:04:1b:ca:c3:c8:b2:1f:27:6b:64:ec:2e:38:db:ea:
20:cc:08:99:29:b4:4e:76:66:74:c2:7d:b5:4f:d3:b3:99:e4:
cc:42:ea:a9:dd:21:35:f7:1e:8b:d6:3f:76:4f:19:5e:20:d3:
b0:11:d5:13:61:e8:ae:5e:b8:b3:e4:72:57:5e:c5:42:f9:2d:
c8:1f:88:a8:6d:b1:95:6b:a3:02:e8:08:b1:49:98:2b:8e:2c:
88:9c:9c:b4:12:02:2e:dc:55:46:35:16:55:3a:13:6b:6b:75:
6b:99:29:49:7c:c6:a0:20:da:3d:be:2f:1f:b4:0b:d6:94:8d:
e0:6e:1b:2d:fd:78:48:25:c6:b6:28:c9:a5:62:5b:2e:7b:9b:
d0:87:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:44:50 2025 by rpki-client