Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F3025AB35F11EDA71A8BABF1222468.roa
File: 80F3025AB35F11EDA71A8BABF1222468.roa (raw, json)
Hash identifier: t6pYOe96YY2c25sjVhtONZw8Uvf86wHjTb4x+hMLKSI=
Subject key identifier: 40:C4:EF:DE:B8:42:B8:51:50:E6:1E:9A:53:C8:87:94:39:2D:C1:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F3025AB35F11EDA71A8BABF1222468.roa
Signing time: Thu 23 Feb 2023 09:50:29 +0000
ROA not before: Thu 23 Feb 2023 09:50:25 +0000
ROA not after: Mon 23 Oct 2023 09:50:25 +0000
asID: 133199
IP address blocks: 156.245.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7179 (0x1c0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:50:25 2023 GMT
Not After : Oct 23 09:50:25 2023 GMT
Subject: CN=63f736e5-4085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:4d:b1:1a:c9:7d:b4:b5:56:16:18:a0:46:
1f:bd:ad:f5:4b:2c:f1:2c:47:ae:4b:b2:ff:d9:62:
ef:f0:80:55:1d:0e:b0:c5:ca:a0:ce:62:3e:84:83:
cf:3a:c2:bc:cd:74:90:15:a1:42:80:ff:bd:9e:3f:
70:0a:40:74:b1:b6:aa:22:db:91:a8:39:96:90:1c:
d8:5a:23:ba:94:49:0c:63:e2:9d:39:7e:8a:2b:52:
c9:2e:77:ae:dc:67:cc:f1:51:09:dc:6f:78:94:0a:
d2:5b:90:5d:7d:57:0f:79:4e:44:31:9a:51:98:de:
95:40:ed:5d:af:59:ea:df:81:28:da:a8:04:f4:db:
9f:cd:70:88:80:17:c0:4e:71:7f:28:9b:93:91:dc:
79:c4:ac:60:82:aa:32:71:40:f3:04:35:1e:66:48:
47:86:b0:a9:b9:5b:69:f9:77:13:aa:29:77:97:7e:
bd:a6:ae:b8:d9:d5:f5:e2:c5:6c:2a:fe:50:f6:59:
28:a1:45:d8:ac:82:12:5f:2e:92:a2:4e:2b:03:33:
e6:b1:63:dd:fe:fc:1b:16:43:ef:a3:ce:e3:e6:32:
a9:64:cf:a3:29:02:e3:8c:6d:37:1c:c7:c1:33:96:
70:66:58:7f:25:11:d0:d5:e5:f7:7a:fd:be:fe:f6:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:EF:DE:B8:42:B8:51:50:E6:1E:9A:53:C8:87:94:39:2D:C1:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F3025AB35F11EDA71A8BABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7b:a8:fa:92:f9:44:71:33:ef:89:45:d5:6b:03:3f:c4:b0:
8d:49:43:26:5a:5b:1e:e2:3c:b5:0a:cc:50:d0:45:8d:2c:09:
48:54:f1:2e:b1:94:32:13:6d:73:05:75:28:f4:10:aa:7b:57:
10:82:4d:fb:03:af:4e:86:47:42:fd:90:3e:9b:85:95:72:a2:
51:89:61:48:c9:08:81:79:f0:4b:f3:23:ac:66:1c:86:42:57:
ac:84:6d:36:a3:0c:ec:b8:f0:60:3c:53:aa:72:24:7e:a8:8c:
c1:37:a6:b3:22:41:dc:ad:88:38:1c:a1:36:cc:b5:63:eb:94:
2c:d3:a9:c7:5b:9e:f6:29:40:8e:df:ce:83:4f:ea:64:35:eb:
f8:d3:a1:e8:82:e9:35:51:d5:d6:2d:da:a9:29:22:f4:c3:d2:
66:01:0e:e2:01:d6:19:9a:85:9e:d0:61:ff:bc:86:20:23:21:
2f:b8:4e:e9:7e:bc:30:9b:10:0b:a3:c3:27:99:a4:9b:94:d1:
7f:ba:79:95:78:b5:63:c4:cd:46:34:d3:6c:9a:52:bd:9f:9f:
e2:d4:3b:de:94:5c:45:c8:14:f3:5f:c1:3f:1d:9c:86:9d:47:
e7:74:a4:90:aa:98:8d:6b:6c:33:5c:db:e2:75:8f:d5:c3:69:
dd:7d:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:41:08 2025 by rpki-client