Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EDDA7722CFA11EDB196E0B4F1222468.roa
File: 7EDDA7722CFA11EDB196E0B4F1222468.roa (raw, json)
Hash identifier: 4EPxvZKVfsQW0EvzfDnwPT/iPeiYkGcogxI4FICdqls=
Subject key identifier: EB:BF:0D:50:F5:3B:68:E9:30:20:75:78:1C:17:1D:8E:C0:A7:CB:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 175F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EDDA7722CFA11EDB196E0B4F1222468.roa
Signing time: Mon 05 Sep 2022 09:09:50 +0000
ROA not before: Mon 05 Sep 2022 09:09:46 +0000
ROA not after: Wed 05 Jul 2023 09:09:46 +0000
asID: 22773
IP address blocks: 156.239.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5983 (0x175f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 09:09:46 2022 GMT
Not After : Jul 5 09:09:46 2023 GMT
Subject: CN=6315bcde-c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:5a:a0:c9:69:21:87:19:37:8e:a0:65:e0:
2b:c5:d1:97:c2:c9:c9:3d:eb:ec:0b:b1:bc:07:65:
eb:46:b8:e5:13:e9:59:f3:cf:28:39:6d:10:fc:be:
ea:23:d3:3c:b1:17:cb:8d:e0:3c:27:90:ec:e6:28:
be:b5:d8:bc:54:4f:ad:c9:9c:de:a9:e6:6a:5e:24:
ac:ef:8b:31:ad:ae:2e:22:7e:b6:a2:77:4a:1e:58:
b6:d2:1f:9c:9e:24:e1:fe:7e:da:5a:59:28:06:42:
ff:12:28:6a:3d:e0:4e:b1:b0:f4:1c:9c:51:c5:0d:
c0:cf:3a:6c:0d:3b:aa:f3:44:cd:37:42:ea:20:da:
aa:d6:f4:3e:d1:50:0d:5e:ff:75:03:6c:d9:b3:46:
78:9d:6e:0d:c6:75:c8:3c:18:1f:d4:2f:24:76:3a:
b6:bc:be:1a:22:4f:6c:cf:67:ba:fc:90:9a:fd:b0:
88:5d:01:b0:de:0a:53:8d:c6:9b:02:60:3f:44:fe:
1a:81:d1:a5:52:f3:2a:b4:3f:f3:3b:ef:e6:ef:ae:
82:17:23:6b:67:de:e2:59:0d:2d:31:ba:fd:90:45:
cb:92:5b:25:07:4e:94:86:ea:9e:2e:bf:1a:22:fd:
9b:c3:6e:dd:a1:f4:71:e8:e3:b5:31:78:9d:ff:ce:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:0D:50:F5:3B:68:E9:30:20:75:78:1C:17:1D:8E:C0:A7:CB:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EDDA7722CFA11EDB196E0B4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:7e:2b:0a:76:c5:32:98:a7:dc:9c:00:af:d9:88:3c:12:a2:
30:79:11:39:ce:0d:aa:95:f8:f6:d7:1e:ad:4a:91:b6:3a:4e:
92:7d:f2:71:aa:a9:e1:04:5d:eb:a5:d2:35:dc:11:10:50:e7:
e2:0a:b7:da:51:31:b4:ec:35:06:00:9d:08:d4:36:60:dd:04:
d5:45:dd:aa:22:15:ff:b7:7e:fa:75:03:dd:80:74:1b:25:65:
b7:49:e5:a3:34:11:2f:ed:23:43:73:f9:27:13:a1:be:af:72:
8b:00:b3:c1:18:70:df:04:c7:5a:0b:f7:52:8e:ed:cf:f4:db:
6e:e2:57:c8:7f:35:0d:55:fd:11:dd:63:6a:fc:95:bb:a8:d5:
fc:c7:ca:de:21:96:37:37:b9:82:3d:46:b5:69:72:52:23:f3:
85:23:ed:f6:12:b3:91:1a:af:49:3a:97:a3:24:f7:be:63:f7:
a2:89:32:86:06:05:0d:90:05:4a:58:91:89:15:b1:48:df:16:
83:b4:b8:89:89:69:79:f9:a7:bf:16:88:83:3c:14:7b:3b:50:
59:ff:07:e4:a7:43:e6:49:c8:dd:5b:af:c7:e7:0b:60:a0:e4:
f2:4d:d7:99:61:52:b9:6b:f1:d9:4b:54:4f:2c:94:1d:9b:40:
c1:a0:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:13:55 2025 by rpki-client