Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C728918B35F11EDAB6C4CABF1222468.roa
File: 6C728918B35F11EDAB6C4CABF1222468.roa (raw, json)
Hash identifier: lmWLxXKyVnSnO5pp2Js0L4j1+1sQHbhsocGRwlIhaTc=
Subject key identifier: B5:DA:61:28:D4:6D:BD:CB:1E:8D:73:5A:7C:BB:BB:36:52:11:FD:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C728918B35F11EDAB6C4CABF1222468.roa
Signing time: Thu 23 Feb 2023 09:49:54 +0000
ROA not before: Thu 23 Feb 2023 09:49:50 +0000
ROA not after: Mon 23 Oct 2023 09:49:50 +0000
asID: 133199
IP address blocks: 156.245.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7176 (0x1c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:49:50 2023 GMT
Not After : Oct 23 09:49:50 2023 GMT
Subject: CN=63f736c2-3744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:85:91:ce:22:1a:57:a8:7d:31:60:36:0d:
b2:13:20:65:41:de:f0:81:75:7a:cb:14:2b:9b:60:
ae:fc:f0:46:3a:44:60:2c:7f:c3:31:fd:4c:3e:da:
3e:a2:3a:3b:79:26:ab:60:b5:45:87:5e:14:23:eb:
c1:db:f9:8c:4d:f4:55:9c:78:85:ce:22:1a:bc:07:
88:20:5a:2c:ab:97:9b:aa:17:cc:77:9b:81:5b:e9:
ec:b1:dd:8e:0c:09:a4:0b:01:0a:02:15:28:1e:66:
33:2a:25:d0:52:2a:c8:7d:da:39:d4:ad:47:ac:60:
7f:ef:78:36:03:e7:1f:c4:86:41:63:e6:5c:95:3e:
eb:38:42:a7:0d:f7:f1:af:6e:7d:cb:48:6e:ca:cc:
a8:d3:99:79:12:bc:67:64:db:9a:fe:bd:80:4c:ef:
35:69:9c:dd:98:09:60:5f:0b:ea:7f:a7:69:42:10:
ec:13:e8:58:02:a1:6c:e6:7c:3a:f4:1d:4e:2f:56:
76:b7:34:b1:60:7d:3e:54:e7:78:73:a9:7c:0d:9e:
b4:fc:97:84:cc:10:bb:7c:f5:ec:a9:11:85:68:c8:
de:b3:e6:b3:82:27:39:f3:68:f2:e3:15:1c:0c:f5:
07:2b:8a:af:eb:48:48:67:05:93:3c:6c:4e:5d:23:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:61:28:D4:6D:BD:CB:1E:8D:73:5A:7C:BB:BB:36:52:11:FD:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C728918B35F11EDAB6C4CABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:75:a5:92:3e:6f:5a:53:a2:e8:ad:e9:f6:20:f6:7c:fd:88:
ab:ae:37:cb:fd:66:d2:20:60:b4:28:21:5f:de:5d:36:80:e9:
a3:9d:f9:10:50:76:e7:fe:dd:de:e4:9f:8b:c7:c3:b3:55:db:
b0:d0:71:9c:d2:44:7e:f3:e3:f2:3b:48:73:75:0e:ae:0e:d5:
c2:ed:c8:0e:32:7d:77:29:16:67:c5:99:cd:b8:59:3f:41:8a:
96:6f:5d:bb:8e:09:bf:5c:f3:9f:c5:b4:8f:2d:42:33:5b:41:
6b:cf:71:69:b9:b8:91:d9:f0:01:83:e6:78:40:ec:22:7a:97:
49:63:71:6a:51:87:b0:7f:d4:c2:cf:20:f6:a9:29:36:5f:68:
e8:a3:b3:e5:5f:a7:97:6a:29:a3:2b:da:11:72:35:f6:b6:e3:
27:15:ae:3e:30:ae:aa:4a:1d:f4:54:a2:44:cb:c0:4d:0c:ec:
7f:07:16:dd:27:97:1d:71:8e:75:b2:ea:71:b6:64:44:f0:12:
9f:04:1a:95:ee:06:4f:85:00:48:6e:c0:47:30:3a:64:f5:0b:
9e:23:77:fe:c9:4b:a1:14:51:0d:f5:ec:26:d7:2e:e3:4e:85:
e2:05:da:d1:55:97:82:9c:f9:b3:27:9f:c2:da:4f:5f:18:99:
4f:22:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:18:48 2025 by rpki-client