Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A671C09CF5D011EFAA7ECD92762E951A.roa
File: A671C09CF5D011EFAA7ECD92762E951A.roa (raw, json)
Hash identifier: BbNm5jeHhJKXFzpBIZib+PNIKDSwaztxcMZwitTxemw=
Subject key identifier: E7:8A:AD:97:2E:36:9D:A3:1F:C9:1A:0C:05:16:34:20:A8:DC:A7:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A671C09CF5D011EFAA7ECD92762E951A.roa
Signing time: Fri 28 Feb 2025 12:36:37 +0000
ROA not before: Fri 28 Feb 2025 12:36:33 +0000
ROA not after: Sun 30 Mar 2025 12:36:33 +0000
asID: 203020
IP address blocks: 156.228.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81310 (0x13d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:36:33 2025 GMT
Not After : Mar 30 12:36:33 2025 GMT
Subject: CN=67c1add5-293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:26:26:a1:f4:48:7e:f1:68:bd:2f:73:7f:
1b:60:1c:7e:8d:ca:04:1b:d7:eb:96:56:98:79:b2:
8d:97:f2:be:62:14:4c:33:26:37:38:e8:f0:5d:c9:
53:c2:7a:5b:91:e4:11:34:e1:7d:12:5b:34:d4:35:
a1:82:15:c1:a5:05:a5:de:86:d4:7f:78:37:b1:ad:
6a:77:e9:d4:4b:62:1f:6d:5d:b4:f7:59:a3:ef:52:
74:96:8b:bd:95:66:c0:45:a0:ac:5f:ff:08:ec:13:
ab:01:9d:78:1b:5f:7b:0d:b4:1d:b5:8a:fd:4d:e9:
16:86:67:ae:e8:88:89:8d:e2:bd:5f:6b:b2:fe:09:
6d:33:65:98:ec:53:22:9d:27:63:66:c5:aa:88:00:
28:f6:b3:30:97:90:0d:ed:cc:1a:a0:51:83:dc:7a:
a6:da:d3:37:de:d6:fa:c5:9b:0b:e6:9d:6f:3e:12:
fc:21:a9:8d:f4:70:a6:4c:99:19:0b:f6:5e:37:d0:
e1:f9:50:4b:80:84:e0:35:b7:dd:76:3c:be:4e:88:
61:df:ab:b8:5b:44:6c:f4:93:5d:d5:69:c8:4d:d5:
4d:8b:8b:e3:33:1d:a4:0c:c8:b6:30:60:35:87:f1:
07:99:55:5a:f2:76:b0:ec:ea:1e:2b:17:29:1d:52:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:AD:97:2E:36:9D:A3:1F:C9:1A:0C:05:16:34:20:A8:DC:A7:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A671C09CF5D011EFAA7ECD92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bd:16:d0:b1:d2:0b:b3:f0:27:90:b1:4d:94:53:ed:7e:52:
cf:2d:5e:20:c0:68:4e:3c:84:c1:19:5e:fd:3f:fc:a1:53:d6:
16:d7:b1:4f:b1:01:5e:ce:92:a5:3a:eb:a3:e7:88:e9:5a:f9:
3f:84:46:62:52:cd:f6:4d:4d:c5:65:cd:e2:b8:5b:db:02:62:
77:33:23:d5:ec:b4:9a:63:4e:d6:22:36:07:b0:88:5c:0e:25:
bf:ba:32:c2:24:a8:23:a8:09:ff:98:10:f4:23:9a:28:71:98:
34:51:98:bb:cc:88:05:dd:1e:4c:2d:20:24:92:38:24:e4:4e:
8f:71:45:10:bf:ca:2f:99:34:b5:9a:b7:af:2c:ff:3e:77:e9:
c5:8b:1b:22:4c:2b:0c:c8:63:25:fa:ce:31:19:32:31:28:e5:
74:76:48:d5:75:35:70:30:59:4f:e8:41:57:02:f0:1f:e5:d3:
d9:dc:3d:4d:7f:5a:3d:0e:98:a2:3d:45:4b:f7:0c:6f:ce:78:
30:68:4a:ae:20:c2:ae:da:08:7a:5b:23:73:f3:f9:65:5d:9b:
27:dc:a7:35:13:11:3d:ca:84:2c:ca:ca:06:34:70:5c:dc:71:
56:62:f1:cb:f5:0f:0d:ed:14:31:06:57:8b:fd:a3:e5:eb:19:
6d:8c:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:46 2025 by rpki-client