Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/899050E653C511EE89DE17554AD9E6FC.roa
File: 899050E653C511EE89DE17554AD9E6FC.roa (raw, json)
Hash identifier: 1YlSkkCF7cDquIKIz3Jj74PNkqOo0nUdNJTyQtJRB+o=
Subject key identifier: 8C:CA:91:2E:F2:4F:7C:3B:96:D0:2D:EB:C9:42:05:E9:EA:8F:D9:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 39A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/899050E653C511EE89DE17554AD9E6FC.roa
Signing time: Fri 15 Sep 2023 12:43:58 +0000
ROA not before: Fri 15 Sep 2023 12:43:55 +0000
ROA not after: Sat 28 Oct 2023 12:43:55 +0000
asID: 9009
IP address blocks: 156.236.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14760 (0x39a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 12:43:55 2023 GMT
Not After : Oct 28 12:43:55 2023 GMT
Subject: CN=6504518e-b151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:be:59:d0:45:4d:48:c7:cd:22:a9:9d:f0:
d8:43:6a:dd:68:13:a2:dd:fe:24:63:ba:41:70:86:
ee:d0:c8:d9:81:ef:7f:ef:2d:c4:6a:6b:b6:d1:26:
e0:af:bd:15:33:d1:97:e5:7e:0e:bf:35:34:f5:63:
8a:77:b7:d8:7c:11:e3:f0:a8:18:84:70:17:c1:e4:
31:08:81:b3:72:0d:ee:3a:14:d5:b5:c3:af:3a:d0:
60:29:c0:ab:05:04:4f:b9:0e:9c:b4:f1:c8:93:2a:
ad:5a:7c:b4:1c:ad:1f:20:9a:1b:19:69:b8:a6:4b:
47:16:63:ce:b5:59:62:be:44:4c:fc:bd:ac:a5:a2:
a4:02:f5:44:ea:fc:40:73:3c:26:4d:b7:95:97:51:
7e:34:d7:44:9b:60:db:96:89:b3:53:14:17:fb:fe:
b8:fa:36:d6:7a:6a:4a:43:dc:b5:15:54:e5:c2:46:
26:73:d1:93:28:1a:c2:64:62:45:fd:8b:42:28:0a:
2b:0a:5e:11:98:f3:c8:08:2e:0a:a4:59:6a:5d:90:
37:9c:9f:a3:72:20:3f:85:03:ee:6c:a4:1d:24:ca:
c8:04:92:f3:b4:5a:70:e0:ad:10:00:1e:f7:27:73:
f7:8a:91:40:34:88:88:81:4a:a1:e7:69:53:0a:28:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:91:2E:F2:4F:7C:3B:96:D0:2D:EB:C9:42:05:E9:EA:8F:D9:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/899050E653C511EE89DE17554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.10.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fe:18:67:5b:bb:d6:1b:32:bb:cd:f7:ad:8e:f0:63:ec:42:
d7:0d:f7:3f:c6:57:6b:75:1e:cc:51:ca:92:0c:b6:e0:8e:21:
e3:36:64:55:de:1f:42:47:68:77:a5:42:5f:b8:57:24:86:7b:
23:9a:22:97:c6:1b:36:44:a6:6f:94:09:54:0e:38:bf:5c:cb:
41:8a:62:dc:16:40:57:8a:37:ee:c5:a6:9c:0c:d8:fc:a6:c1:
22:73:54:99:d8:21:db:10:59:09:0e:18:19:f0:28:cd:a9:a3:
c9:ed:bd:6b:59:be:58:68:6d:92:7e:80:1b:75:f1:a9:0e:ff:
a7:75:81:13:3d:28:79:53:3a:dc:20:90:09:31:c9:6f:65:4b:
ae:35:74:2a:49:d7:34:ce:7a:b3:5c:42:aa:bb:0c:db:0e:80:
01:31:9b:e4:61:f5:56:c6:19:9b:a5:e5:ea:61:e2:58:1b:7e:
89:f1:fc:f8:b7:ea:f2:65:59:50:6f:7d:9f:61:8d:44:93:6b:
86:f9:78:f9:75:17:9e:da:04:5b:97:f3:ad:e0:08:ec:eb:89:
d5:46:31:96:c6:16:6e:67:16:79:9b:fb:8c:2f:dc:46:44:e9:
89:dc:2d:8d:7f:7d:a7:bc:ab:70:a0:94:77:52:3b:b7:29:f1:
45:27:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:08:19 2025 by rpki-client