Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA272E4F1AF11ED9FBD09734AD9E6FC.roa
File: 7FA272E4F1AF11ED9FBD09734AD9E6FC.roa (raw, json)
Hash identifier: svogFkrmzcsUOh3860nKPeeuD5xixjIyJaicfYqSlVo=
Subject key identifier: AE:DC:C7:16:7D:83:2B:7F:3C:B5:F6:CC:87:AC:50:BC:98:75:61:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2320
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA272E4F1AF11ED9FBD09734AD9E6FC.roa
Signing time: Sat 13 May 2023 16:59:18 +0000
ROA not before: Sun 14 May 2023 16:59:14 +0000
ROA not after: Sat 10 Jun 2023 16:59:14 +0000
asID: 138995
IP address blocks: 156.227.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8992 (0x2320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 16:59:14 2023 GMT
Not After : Jun 10 16:59:14 2023 GMT
Subject: CN=645fc1e6-90da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:0c:56:59:97:30:f2:db:2f:30:e1:bd:0a:
cb:69:8e:b5:6a:2c:9b:c4:c9:21:c0:cd:74:d8:98:
dd:6e:3e:72:04:14:bd:04:45:bb:f6:3b:86:c7:87:
dd:7b:1b:69:1f:da:9c:74:97:82:6f:3c:7a:61:71:
31:e7:67:57:19:fc:03:67:25:fd:be:9d:01:e9:cd:
9a:88:b5:81:c2:85:fa:80:d4:1b:68:4b:d9:a2:03:
f5:22:9b:2d:fd:d8:b2:10:9c:72:55:7f:a8:42:dd:
f7:58:3c:c2:ac:5e:45:29:bb:00:83:2b:e4:27:e5:
97:e3:db:93:43:9f:64:45:61:33:20:91:71:f6:c9:
fd:67:62:95:5e:99:0f:f6:87:0d:38:ae:93:df:22:
d9:e5:93:56:6d:3b:a9:59:00:da:73:4d:f1:e3:c2:
3f:44:36:5a:55:4d:05:7d:69:19:3f:e7:02:ea:ad:
73:67:c6:81:1b:fb:d7:c1:c1:08:53:8a:29:95:d2:
33:d1:3b:be:97:cb:56:12:a6:89:08:5d:ef:a3:d1:
7a:ba:0e:9b:df:26:c8:19:0a:ce:a0:16:54:51:7b:
95:4b:a8:a9:87:36:60:cb:87:6a:58:d5:49:04:1d:
20:f1:28:7a:ca:ef:d9:25:45:e8:34:1c:4b:93:1b:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:C7:16:7D:83:2B:7F:3C:B5:F6:CC:87:AC:50:BC:98:75:61:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA272E4F1AF11ED9FBD09734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c1:f9:07:47:ff:3f:5a:d9:18:e3:28:8f:ff:87:de:3f:31:
5c:f5:28:9e:c1:12:06:f4:d1:94:3f:75:15:bd:0e:7a:dd:45:
3b:a8:e3:15:5e:9c:55:cd:bf:1b:f4:44:35:33:49:96:ba:e7:
2a:30:80:c0:54:1a:9c:55:85:81:92:2f:e7:5a:c4:83:84:33:
19:dc:22:9e:b8:29:bf:70:eb:d4:ac:3b:3d:79:6d:79:8e:e5:
59:64:1a:03:ee:19:32:a4:3a:d6:59:60:9e:de:5f:b6:a7:52:
2a:b6:f1:2e:4f:58:96:2a:f5:f2:e8:24:48:e6:5c:f3:74:4d:
eb:65:d2:e3:6d:a8:7d:5c:bc:5a:a9:ac:5d:54:03:ef:56:6a:
60:3f:24:d5:87:f7:17:a4:6f:da:a4:8d:a1:96:45:4f:96:43:
e9:55:6b:5a:31:19:ab:65:5d:75:92:06:9b:41:43:52:db:45:
e6:ec:1a:01:92:73:61:d7:9c:18:fe:9b:32:d1:e4:c2:17:3f:
e0:31:81:df:8f:7c:16:82:a7:25:07:96:ee:2a:f5:17:4f:3c:
18:27:c6:7a:33:79:f7:f5:e2:10:4e:b2:81:20:c5:f5:fc:56:
b7:68:49:f6:c4:03:9d:9e:89:bc:ac:16:2b:22:c7:c0:7f:01:
04:1c:6f:06
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICIyAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MTQxNjU5MTRaFw0yMzA2MTAxNjU5MTRaMBgxFjAU
BgNVBAMTDTY0NWZjMWU2LTkwZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw2QxWWZcw8tsvMOG9CstpjrVqLJvEySHAzXTYmN1uPnIEFL0ERbv2O4bH
h917G2kf2px0l4JvPHphcTHnZ1cZ/ANnJf2+nQHpzZqItYHChfqA1BtoS9miA/Ui
my392LIQnHJVf6hC3fdYPMKsXkUpuwCDK+Qn5Zfj25NDn2RFYTMgkXH2yf1nYpVe
mQ/2hw04rpPfItnlk1ZtO6lZANpzTfHjwj9ENlpVTQV9aRk/5wLqrXNnxoEb+9fB
wQhTiimV0jPRO76Xy1YSpokIXe+j0Xq6DpvfJsgZCs6gFlRRe5VLqKmHNmDLh2pY
1UkEHSDxKHrK79klReg0HEuTG4vFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUrtzH
Fn2DK388tfbMh6xQvJh1YZ8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzdGQTI3MkU0RjFBRjExRUQ5RkJEMDk3MzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4x8wDQYJKoZIhvcNAQELBQAD
ggEBAKHB+QdH/z9a2RjjKI//h94/MVz1KJ7BEgb00ZQ/dRW9DnrdRTuo4xVenFXN
vxv0RDUzSZa65yowgMBUGpxVhYGSL+daxIOEMxncIp64Kb9w69SsOz15bXmO5Vlk
GgPuGTKkOtZZYJ7eX7anUiq28S5PWJYq9fLoJEjmXPN0Tetl0uNtqH1cvFqprF1U
A+9WamA/JNWH9xekb9qkjaGWRU+WQ+lVa1oxGatlXXWSBptBQ1LbRebsGgGSc2HX
nBj+mzLR5MIXP+Axgd+PfBaCpyUHlu4q9RdPPBgnxnozeff14hBOsoEgxfX8Vrdo
SfbEA52eibysFisix8B/AQQcbwY=
-----END CERTIFICATE-----
Generated at Sun May 11 18:28:10 2025 by rpki-client