Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D7DBB22B5A11EE9725D2534AD9E6FC.roa
File: 88D7DBB22B5A11EE9725D2534AD9E6FC.roa (raw, json)
Hash identifier: dm7aPHuvr2Xc8LaU3VuYbNGyTbaLbNEFZ9zlClI00Xo=
Subject key identifier: 8B:19:21:E4:15:D8:33:62:90:60:FB:C9:79:90:D9:24:00:13:D9:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3282
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D7DBB22B5A11EE9725D2534AD9E6FC.roa
Signing time: Wed 26 Jul 2023 02:17:14 +0000
ROA not before: Wed 26 Jul 2023 02:17:10 +0000
ROA not after: Wed 03 Jan 2024 02:17:10 +0000
asID: 139057
IP address blocks: 156.246.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12930 (0x3282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 02:17:10 2023 GMT
Not After : Jan 3 02:17:10 2024 GMT
Subject: CN=64c0822a-158a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:9a:ca:b2:3d:2e:51:53:cd:54:28:be:17:
bf:b8:de:11:cb:da:c2:dc:97:42:d1:06:33:31:8c:
85:13:26:27:88:ce:31:1c:00:55:4b:b0:20:bf:08:
fe:97:64:28:68:1c:dd:e2:4f:59:c4:b2:2e:c8:b1:
41:41:30:7d:3e:bc:43:96:84:47:d4:1f:b9:3c:cd:
3b:92:80:8f:09:5a:ce:f3:6b:29:d1:df:91:da:80:
d6:a0:ab:16:3c:27:bf:1c:7d:fa:63:81:1b:60:52:
4b:9e:0d:e9:ae:01:07:2a:fd:5d:db:fb:b5:52:a3:
18:ab:8c:8a:9c:28:1b:b0:aa:52:82:aa:cc:3e:9e:
e6:ed:53:80:40:16:de:bd:fd:d9:5c:7b:ab:f2:b1:
2a:95:ac:50:06:4e:f6:c0:ec:c9:5b:24:ec:22:f5:
c6:c4:3b:42:94:3b:65:55:0a:55:cb:13:ad:a6:39:
97:e0:5b:03:f5:82:69:52:3c:a8:79:80:2d:0b:7a:
cf:31:b3:2f:50:14:96:b8:f3:f3:13:5f:d0:60:31:
85:92:51:0d:78:0e:d0:2e:e7:62:4e:6f:7e:05:61:
21:d6:26:43:ed:fa:c7:58:de:51:07:cd:9f:90:42:
1b:e2:71:9b:e5:23:8c:f1:b9:20:ee:d3:48:0b:8b:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:19:21:E4:15:D8:33:62:90:60:FB:C9:79:90:D9:24:00:13:D9:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D7DBB22B5A11EE9725D2534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.20.0/24
Signature Algorithm: sha256WithRSAEncryption
77:27:ad:15:a0:53:3b:8a:0c:03:fb:fe:93:ef:ea:d1:77:5d:
da:8a:52:82:df:3b:ad:d4:77:4f:71:b5:8f:8b:2a:c6:18:91:
0a:be:e6:83:52:ad:59:1a:d5:89:06:24:7e:90:13:31:19:85:
8d:73:4d:05:68:fb:57:db:bc:a1:05:d0:80:1c:c5:e7:11:13:
69:49:1c:f9:c3:56:db:59:53:b8:77:b6:4a:9f:4c:34:35:70:
be:d4:49:dc:7f:1d:b4:58:45:ba:df:7f:c6:f6:ce:c4:f2:0f:
31:c8:e4:fe:44:74:6a:af:b6:b0:8c:58:ae:4e:7b:fb:e0:13:
c9:fa:bb:1d:12:28:8d:ac:3a:d1:60:a3:e9:48:bb:b7:28:2a:
00:5d:7c:23:53:2b:5a:7e:b3:19:c0:21:35:1c:43:80:01:ee:
e1:92:fe:f1:ce:dc:42:84:c6:c6:d0:1c:0c:9e:f8:03:71:91:
27:ba:c0:16:72:ca:76:ed:68:07:1d:4e:fa:93:65:94:15:9f:
b8:df:67:80:0b:27:1b:ab:6f:1d:a8:5c:3b:86:d1:63:7d:13:
01:8d:b4:8a:6f:e9:67:45:9a:df:df:82:33:2d:dc:18:b7:2f:
38:d7:a2:fa:d4:51:30:a1:8f:b6:e3:ff:3d:57:d0:d3:db:5c:
6a:27:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:35:09 2025 by rpki-client