Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A03F10D8FA6411EF9D4B7CAA762E951A.roa
File: A03F10D8FA6411EF9D4B7CAA762E951A.roa (raw, json)
Hash identifier: vbqmp1Pi625r56dx5B5IfXuvnUeQO7j2v1SGk//GvVg=
Subject key identifier: 1B:92:49:7E:A3:2E:B0:99:9F:36:64:D2:B8:CE:C6:69:2B:10:C2:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014365
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A03F10D8FA6411EF9D4B7CAA762E951A.roa
Signing time: Thu 06 Mar 2025 08:25:56 +0000
ROA not before: Thu 06 Mar 2025 08:25:52 +0000
ROA not after: Wed 26 Mar 2025 08:25:52 +0000
asID: 54600
IP address blocks: 156.227.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82789 (0x14365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 08:25:52 2025 GMT
Not After : Mar 26 08:25:52 2025 GMT
Subject: CN=67c95c14-15c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:45:9c:46:9e:d5:c5:7b:e9:a2:18:ce:02:
57:11:75:1e:dd:64:99:fd:cf:de:31:b2:7d:8f:26:
28:d3:84:c8:ac:bf:c7:18:a4:a8:3f:a2:e9:5d:cb:
ee:f9:c4:21:a6:1e:88:0f:d0:ef:bb:56:ff:86:e7:
f4:08:16:a2:aa:5b:f2:44:2d:2c:52:64:34:4a:8b:
30:ce:ff:91:cc:2b:f9:bc:9c:cf:d1:f2:28:a8:6d:
db:56:f0:95:b1:27:cb:a4:5d:5a:91:ed:fc:88:42:
80:ef:12:04:0d:f1:34:3f:af:a0:92:fb:a8:09:85:
98:1a:f9:ed:b9:b4:bd:40:e9:35:b4:e4:ad:1d:d7:
6c:fe:20:82:22:18:cf:8c:4a:cb:53:e7:3e:2d:95:
c0:c4:af:a9:e5:b5:59:58:3e:70:67:88:7a:94:be:
f2:65:db:6a:23:1f:77:a0:2e:16:18:27:a9:43:8f:
4f:87:6f:c9:08:4b:98:bf:b5:4d:39:d8:3c:ee:31:
f0:79:ed:e2:ae:90:74:d7:80:5d:4b:a7:fd:c8:ee:
f9:f3:36:10:35:e5:49:42:8d:af:89:97:3b:5d:88:
85:57:a9:2d:7f:f0:61:5b:cb:97:e3:a1:e6:d8:a9:
f1:c4:56:83:e3:d2:a0:e9:83:cf:6f:9f:ef:bb:a5:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:49:7E:A3:2E:B0:99:9F:36:64:D2:B8:CE:C6:69:2B:10:C2:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A03F10D8FA6411EF9D4B7CAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:82:df:df:ea:5e:e6:99:97:38:78:b6:24:35:d3:c0:e3:df:
d1:6d:0d:58:40:49:ae:34:37:5d:a7:84:e1:28:d0:00:c7:3c:
50:f4:7a:fa:13:84:ea:37:aa:9e:12:a3:07:dc:b6:c9:80:97:
29:8e:e0:4d:e1:d9:0a:35:6a:a9:ce:a4:ff:42:84:e1:be:8e:
9e:1b:94:fa:c6:96:6f:4f:b8:60:10:a4:cc:47:72:12:6d:54:
c9:ca:c9:b3:6f:40:3c:06:1f:46:5b:28:f3:41:c3:04:b4:fc:
ea:a3:04:f1:7a:d5:c8:b9:3a:45:6f:6a:9c:74:0a:85:38:35:
df:d6:23:51:4b:56:a3:c3:3f:8d:43:dc:fe:bb:7b:9c:0a:96:
99:55:2d:4f:4d:3e:ac:e7:d7:a5:22:da:48:da:47:3c:b8:68:
6c:39:1d:f7:74:ee:eb:ed:dc:ac:b0:0c:c3:64:6a:57:4e:33:
50:52:e6:51:e6:04:2a:6a:51:f0:3c:e7:33:af:1f:bf:2c:ff:
a0:f3:9f:a0:9f:b0:43:01:db:bf:ee:dd:b3:39:fc:b7:b9:83:
f9:f1:4a:29:87:86:0b:0c:c3:42:ab:90:dd:88:3c:38:1a:96:
ad:bc:d4:d6:30:22:f3:87:e4:de:ad:33:4a:9f:20:32:2a:22:
1b:1a:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:47:26 2025 by rpki-client