![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF180C244E111EFA8078AB2762E951A.roa
File: 7CF180C244E111EFA8078AB2762E951A.roa (raw, json)
Hash identifier: FqaElGJ8P5et+zAoq8prPCqbbtqQFZMCLf8N0XdQpXA=
Subject key identifier: 0D:4F:92:E3:97:E9:C1:F0:0B:AA:B4:1A:28:B8:E1:F8:B7:43:15:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF180C244E111EFA8078AB2762E951A.roa
Signing time: Thu 18 Jul 2024 08:41:13 +0000
ROA not before: Thu 18 Jul 2024 08:41:09 +0000
ROA not after: Sun 28 Jul 2024 08:41:09 +0000
asID: 5065
IP address blocks: 156.249.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40287 (0x9d5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 08:41:09 2024 GMT
Not After : Jul 28 08:41:09 2024 GMT
Subject: CN=6698d529-5db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:99:d8:cb:61:e8:59:50:8e:7d:87:74:22:75:
98:5b:f9:93:9c:5f:b0:04:d6:e5:dc:a1:11:45:36:
5b:1f:dd:0b:b4:5d:ab:18:d2:27:55:ba:7d:c8:c0:
8c:e4:aa:de:84:45:d4:e3:05:37:f3:57:37:72:ec:
f5:16:ba:d8:9b:be:85:2e:ae:35:eb:18:19:f9:f9:
f3:8a:f2:d0:04:e0:84:e7:a4:3f:0c:44:82:0c:ab:
5d:43:4b:9f:10:39:8d:2e:26:6b:63:be:4d:05:66:
7a:f7:33:fc:df:30:70:85:f8:e2:1c:75:c5:ad:c3:
b4:74:f8:11:7e:64:3b:79:44:a2:dd:bb:43:fe:2a:
1a:68:64:c0:72:e9:3f:89:30:7d:2d:4a:32:15:62:
eb:2a:38:6e:2e:c8:c3:6f:da:be:65:e4:37:fe:a3:
92:dc:94:8e:c2:cd:7b:1c:31:0a:fd:b8:6b:5f:6f:
39:f5:50:0d:2c:d7:7a:7c:03:a6:b1:67:89:fe:69:
1e:ba:17:50:5c:dd:d6:70:9f:23:af:2b:88:bd:c5:
2e:02:c5:51:ac:cb:73:c3:22:a4:6d:59:e6:0e:5c:
cb:5f:08:48:06:46:e9:2d:8e:ce:db:df:57:21:fe:
41:4c:0e:d9:7d:bd:0a:0f:58:e8:64:f3:5b:40:04:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:92:E3:97:E9:C1:F0:0B:AA:B4:1A:28:B8:E1:F8:B7:43:15:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF180C244E111EFA8078AB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
52:3e:69:a3:01:14:b0:4e:e3:eb:95:38:ec:27:b9:0c:e5:64:
a8:96:b4:4c:e0:59:f3:55:65:c6:8b:fe:88:e7:d6:63:6d:cc:
5b:56:b3:b3:25:1e:e0:df:70:12:f3:dc:de:10:7f:98:b3:cb:
c0:87:29:2a:6b:02:a3:79:09:65:b0:14:0d:5a:c9:a1:94:5d:
27:67:14:e2:87:22:19:03:a9:21:00:c9:fa:8e:63:1d:cc:0d:
e7:4d:c5:97:06:4c:1d:6d:db:3b:fa:1f:40:f0:0e:fb:4b:fd:
9e:3e:d1:0a:ce:8d:61:b3:19:33:88:0a:a4:3f:02:7f:34:18:
d8:eb:50:ef:24:65:13:33:63:ec:21:9d:87:a9:76:b5:55:fd:
14:b0:a5:28:aa:11:ce:1f:ac:c9:6d:94:58:90:eb:a3:b6:53:
fb:cd:34:9b:0f:42:19:1c:ef:d2:9a:3a:ce:53:3c:a4:58:5a:
52:09:e0:6f:29:b9:6b:c0:d3:3e:4e:5c:ac:5d:5c:7e:d1:64:
3b:47:3d:46:dc:c7:a2:26:77:32:02:0b:ee:17:d0:59:b7:c0:
cf:6f:ac:43:01:a9:d2:88:d5:0b:66:b9:17:45:20:40:3b:05:
fb:fe:35:c0:4a:66:92:ac:20:83:34:f9:55:2a:49:3a:f0:81:
4e:65:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 03:38:52 2024 by rpki-client on console-ams.rpki-client.org