Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CFEDDDC7C5811EEB4C25F414AD9E6FC.roa
File: 7CFEDDDC7C5811EEB4C25F414AD9E6FC.roa (raw, json)
Hash identifier: U7q8RQuuce1WSWnvJDD1hyehz35OrwTrJ3kAWYgclRA=
Subject key identifier: 2E:80:D4:23:AB:51:96:84:47:DA:C1:0D:57:02:3B:7A:AE:97:F9:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4333
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CFEDDDC7C5811EEB4C25F414AD9E6FC.roa
Signing time: Mon 06 Nov 2023 03:56:39 +0000
ROA not before: Mon 06 Nov 2023 03:56:36 +0000
ROA not after: Fri 08 Dec 2023 03:56:36 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17203 (0x4333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 6 03:56:36 2023 GMT
Not After : Dec 8 03:56:36 2023 GMT
Subject: CN=654863f7-3f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:aa:be:80:3c:75:c0:bf:8a:cd:62:2b:7f:
d0:64:91:de:ae:a4:a4:3b:cc:d6:8a:c9:2b:fc:3a:
27:aa:ad:f6:52:29:82:2a:3c:00:6b:1e:07:12:ec:
b3:4d:9b:ff:60:44:8b:54:b2:94:28:68:9f:1c:3b:
18:d4:38:57:cc:ec:76:e4:55:6e:db:1f:27:71:6b:
d5:e5:84:74:2e:c2:51:b7:bf:1a:89:bd:e2:ec:cb:
25:0b:c8:a1:48:ae:e5:50:cf:1c:a6:0b:f0:cc:88:
f0:a0:9a:cf:41:bd:eb:cc:1a:58:8b:46:85:97:80:
1f:4a:1b:b9:ea:45:f6:52:80:8b:27:14:5d:4d:57:
50:b9:76:66:f8:37:28:d6:7d:e8:87:69:a2:08:e1:
41:be:04:3b:00:fc:2f:87:5c:64:ba:0e:78:07:fa:
e0:6d:d2:88:73:a8:be:4c:a3:6a:9f:7b:43:81:47:
b1:b5:08:3d:5d:b4:a0:b8:1e:25:3b:e7:3a:b8:de:
01:55:bb:c7:27:6e:f1:97:20:f5:ed:7d:ba:89:43:
41:83:8f:c3:9b:bd:5c:8d:f3:23:d6:2e:68:c4:c9:
9d:93:c2:0e:e9:86:39:da:cf:20:f4:60:fa:a1:3b:
09:22:60:0f:d9:1d:0d:4a:de:9a:98:0a:87:db:57:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:80:D4:23:AB:51:96:84:47:DA:C1:0D:57:02:3B:7A:AE:97:F9:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CFEDDDC7C5811EEB4C25F414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1e:0e:f9:95:f2:28:45:64:d9:68:35:1d:d3:17:ab:a7:b1:
d8:d6:e0:13:e2:e3:12:d5:92:0f:74:1b:77:79:c3:62:5b:03:
0a:ca:65:9e:5d:66:a2:ce:a8:0e:74:37:61:7d:c2:ee:84:31:
18:dc:97:07:24:e5:38:35:48:91:2c:84:7d:60:4d:c5:6d:d7:
92:a8:10:84:20:fa:5f:1e:b2:fd:3a:a5:54:b3:7b:1b:7b:a3:
a3:e5:4c:ba:dd:c3:56:40:fd:4b:50:ac:fb:22:41:9c:ae:c2:
18:98:26:fa:42:eb:24:ed:a3:b3:da:55:0b:34:37:25:f9:e6:
12:4f:fa:cf:cf:0d:8f:19:2a:a7:bf:7b:ef:e0:9b:bd:ef:d6:
85:c2:40:cb:a8:cf:f7:ff:cb:e7:9c:9f:59:d6:6e:d9:cc:4d:
b7:43:e4:dc:b1:a1:3f:84:ad:8c:62:91:b8:a5:ea:de:7a:81:
1c:fd:d9:36:fd:49:23:f5:9a:03:3f:52:66:50:70:a1:bd:d8:
56:c9:9e:8a:b2:2f:d2:39:63:aa:d1:ae:e9:03:42:97:32:5e:
fc:a2:4c:1a:a9:15:03:fa:07:e0:ef:e0:11:fc:49:b7:28:20:
6b:cb:34:5a:74:45:af:51:49:35:06:b3:af:a3:82:e6:d2:8e:
88:18:ea:0f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICQzMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDYwMzU2MzZaFw0yMzEyMDgwMzU2MzZaMBgxFjAU
BgNVBAMTDTY1NDg2M2Y3LTNmMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe/aq+gDx1wL+KzWIrf9Bkkd6upKQ7zNaKySv8OieqrfZSKYIqPABrHgcS
7LNNm/9gRItUspQoaJ8cOxjUOFfM7HbkVW7bHydxa9XlhHQuwlG3vxqJveLsyyUL
yKFIruVQzxymC/DMiPCgms9BvevMGliLRoWXgB9KG7nqRfZSgIsnFF1NV1C5dmb4
NyjWfeiHaaII4UG+BDsA/C+HXGS6DngH+uBt0ohzqL5Mo2qfe0OBR7G1CD1dtKC4
HiU75zq43gFVu8cnbvGXIPXtfbqJQ0GDj8ObvVyN8yPWLmjEyZ2Twg7phjnazyD0
YPqhOwkiYA/ZHQ1K3pqYCofbVysnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQULoDU
I6tRloRH2sENVwI7eq6X+W0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzdDRkVERERDN0M1ODExRUVCNEMyNUY0MTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4UEwDQYJKoZIhvcNAQELBQAD
ggEBAEceDvmV8ihFZNloNR3TF6unsdjW4BPi4xLVkg90G3d5w2JbAwrKZZ5dZqLO
qA50N2F9wu6EMRjclwck5Tg1SJEshH1gTcVt15KoEIQg+l8esv06pVSzext7o6Pl
TLrdw1ZA/UtQrPsiQZyuwhiYJvpC6yTto7PaVQs0NyX55hJP+s/PDY8ZKqe/e+/g
m73v1oXCQMuoz/f/y+ecn1nWbtnMTbdD5NyxoT+ErYxikbil6t56gRz92Tb9SSP1
mgM/UmZQcKG92FbJnoqyL9I5Y6rRrukDQpcyXvyiTBqpFQP6B+Dv4BH8SbcoIGvL
NFp0Ra9RSTUGs6+jgubSjogY6g8=
-----END CERTIFICATE-----
Generated at Sun May 11 21:51:03 2025 by rpki-client