Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A995CF3EB36011ED9667CEAEF1222468.roa
File: A995CF3EB36011ED9667CEAEF1222468.roa (raw, json)
Hash identifier: grly8xguMuPPdX9cwsGQRc7GlFDvpJYw2cGsky6oDLY=
Subject key identifier: A1:41:4B:1A:01:B5:E7:C8:41:6C:80:62:EC:83:FC:1F:7F:18:7E:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A995CF3EB36011ED9667CEAEF1222468.roa
Signing time: Thu 23 Feb 2023 09:58:46 +0000
ROA not before: Thu 23 Feb 2023 09:58:42 +0000
ROA not after: Mon 23 Oct 2023 09:58:42 +0000
asID: 133199
IP address blocks: 156.247.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7207 (0x1c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:58:42 2023 GMT
Not After : Oct 23 09:58:42 2023 GMT
Subject: CN=63f738d6-8d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:6d:da:9a:c4:70:d6:74:67:f6:b6:88:7b:
0a:f2:be:0d:2c:b1:43:96:0f:ba:f6:66:c4:26:35:
97:1a:11:01:01:ce:03:8b:95:ea:71:66:b1:5b:40:
61:ca:80:3e:92:9b:07:9c:a4:5d:da:c8:8d:01:52:
fd:5a:34:7b:bf:64:d3:b7:14:df:cd:88:75:83:8c:
df:1b:33:a6:89:b9:49:d8:31:be:46:57:f0:3a:b7:
a7:3e:33:e0:28:2e:c9:0d:1b:28:ea:74:64:aa:fd:
dc:b2:4a:0f:06:1d:bc:0c:0d:39:ff:65:3d:92:40:
41:86:0e:1d:3b:da:1b:09:82:8b:21:77:2f:04:61:
14:6f:94:44:81:ba:95:b7:36:91:ea:53:10:3f:8a:
8f:f9:ad:4d:8c:4f:97:c1:81:78:e4:d7:8e:54:ba:
d9:a1:02:66:f4:97:1a:34:fa:ef:29:bd:88:d4:dd:
db:54:9a:9f:c2:c7:3d:59:0b:2b:19:a5:3c:a3:ee:
b6:32:f0:aa:05:15:e2:1a:6d:ab:a2:19:57:0c:0b:
b9:f5:27:44:b9:9d:5b:97:23:ab:11:9a:e6:d6:17:
ee:14:61:13:06:d5:ab:ca:bf:90:fa:f1:a7:cb:a8:
97:bf:7d:08:62:7c:4e:27:16:74:4d:aa:1d:5f:c5:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:41:4B:1A:01:B5:E7:C8:41:6C:80:62:EC:83:FC:1F:7F:18:7E:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A995CF3EB36011ED9667CEAEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.15.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ee:48:10:42:be:83:69:fb:76:cb:cc:5b:77:5f:3d:f4:c7:
8c:4f:cf:c9:3f:41:dc:60:75:4a:7b:0b:6a:09:cc:47:0a:99:
80:35:93:c8:2a:dd:27:32:a4:3f:53:65:d7:d9:09:18:ac:5a:
bf:df:01:0b:79:77:05:8c:53:d9:57:98:be:33:74:27:27:c6:
e3:56:7a:7a:25:a1:43:8a:5e:0d:68:74:35:03:07:ce:c9:49:
fa:73:0c:57:ba:da:92:5d:0f:aa:51:e7:ab:ba:e3:d2:63:d5:
9e:ff:d7:9a:64:29:83:b4:0d:34:04:2c:40:c2:f1:57:ec:ab:
39:fa:9d:9d:c3:8a:9f:2d:b1:55:e3:85:f5:5b:80:d2:27:15:
32:2b:37:e6:28:9e:91:d2:21:5e:a2:33:cc:b3:e8:fd:8f:d6:
3c:33:09:b4:72:9c:d6:a3:76:f6:df:41:a2:46:1f:19:7d:3f:
e7:fb:3b:de:9d:20:57:c7:4c:a5:3a:06:5a:74:de:7d:51:ed:
d7:02:62:a7:a1:53:2d:cb:b9:c0:e2:f0:d0:d3:05:00:1e:0e:
f0:43:7a:61:f5:ba:8c:75:5d:3d:8f:07:94:aa:1f:b1:5f:db:
8f:96:08:9c:a7:43:8f:34:d7:ea:59:8a:b2:1e:b7:9e:99:85:
59:e6:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:56:32 2025 by rpki-client