Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95D2264AF52211EF9BD6DD66762E951A.roa
File: 95D2264AF52211EF9BD6DD66762E951A.roa (raw, json)
Hash identifier: WvyjMlYilT5OMW7sNEzh/pC5WHxfwBVfrOu7ki+O7Og=
Subject key identifier: A5:54:E2:97:46:E4:0B:2C:E1:06:D9:54:75:95:E1:12:7A:F9:02:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013AE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95D2264AF52211EF9BD6DD66762E951A.roa
Signing time: Thu 27 Feb 2025 15:50:36 +0000
ROA not before: Thu 27 Feb 2025 15:50:33 +0000
ROA not after: Fri 04 Apr 2025 15:50:33 +0000
asID: 7018
IP address blocks: 156.248.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80617 (0x13ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 15:50:33 2025 GMT
Not After : Apr 4 15:50:33 2025 GMT
Subject: CN=67c089cc-bc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:5d:7b:f2:a4:47:22:26:f1:b8:06:b8:df:
3d:43:b5:a9:c2:1a:5b:e7:64:74:8f:86:3c:1d:36:
c2:62:e1:dc:92:e9:56:92:cb:5b:1c:b8:9b:b2:80:
c1:6f:37:08:73:ff:49:fe:3d:6b:5f:45:f2:46:37:
d6:48:69:90:12:32:02:19:7c:53:bb:8c:6f:be:56:
eb:d1:92:37:96:1f:39:d7:01:fd:7f:56:26:02:c9:
7d:9e:07:d9:6d:73:f7:f5:f9:8a:b1:ea:5f:85:6f:
3e:bf:e3:a0:14:db:96:f4:49:56:09:c9:7a:aa:74:
b9:14:bb:26:88:9c:ef:88:55:65:0a:f9:8d:65:f6:
ab:5c:b6:27:d8:64:2e:a9:33:71:53:a7:65:96:fa:
28:a4:59:36:88:da:9c:6b:af:6c:91:eb:f7:57:03:
4e:9b:95:f3:49:46:df:2b:bb:cd:e3:a2:9f:9a:4f:
e9:2d:cf:67:71:cb:ac:bc:c5:55:e8:6b:35:23:cf:
dd:3d:0a:c0:df:13:22:8b:b3:64:91:2f:08:7d:53:
99:80:04:a0:71:c4:ce:cd:56:71:7f:d2:9b:92:0d:
12:36:81:fc:9a:2d:29:2a:f3:89:bc:15:e2:63:3a:
2a:39:29:b4:8c:96:57:5d:3b:aa:4d:71:f9:54:6c:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:54:E2:97:46:E4:0B:2C:E1:06:D9:54:75:95:E1:12:7A:F9:02:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95D2264AF52211EF9BD6DD66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
50:e4:11:83:25:fc:bf:94:60:00:8b:8f:a6:c7:a5:01:0a:48:
38:9d:51:b0:8f:06:dd:d4:45:63:0e:db:39:1a:08:6d:d7:8e:
96:ae:59:c8:fd:0b:4a:c4:ce:f3:3e:6c:ea:34:69:94:6b:e5:
f5:dd:d9:31:8f:bf:a0:15:56:58:22:63:d6:db:6a:31:6d:87:
0d:d3:bc:05:88:0f:1a:f1:83:bd:d3:1c:46:40:b5:d9:55:4d:
35:76:05:b8:51:a5:7e:9a:b2:07:56:94:74:f1:a0:be:29:27:
1e:f8:ab:09:cc:82:68:11:22:53:e2:e6:bc:a0:26:8e:85:20:
05:e1:92:b0:d7:a7:c4:a7:53:5d:3a:72:7d:25:08:b6:9f:f2:
86:9d:fb:a2:49:eb:17:71:c7:3f:9a:a4:f9:dc:0f:d0:f0:f8:
6a:c3:c4:5d:21:86:26:c5:7a:28:43:4d:22:66:dd:41:49:6d:
ce:13:fc:24:46:24:2a:7f:23:e9:8b:a2:95:2b:68:0a:40:9f:
7a:3b:97:42:2b:cf:b4:80:00:66:cd:23:d6:6c:d0:dc:af:3d:
d3:e5:ea:3e:86:a3:cb:4c:4e:9e:cd:a5:53:c0:4a:da:8c:17:
2a:f4:ff:be:01:e9:a9:73:e5:15:b8:69:69:37:f3:21:f4:a4:
9f:2f:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:41 2025 by rpki-client