Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F86338F91011EDAF5198824AD9E6FC.roa
File: A9F86338F91011EDAF5198824AD9E6FC.roa (raw, json)
Hash identifier: IKf1DH9PuoDA2yi9Wst/AoOE0vqXXm4SZXpQaCyUw50=
Subject key identifier: 2C:E9:D4:F9:BD:29:26:9F:14:8C:1F:41:9B:0D:BB:CA:AC:8A:D7:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2680
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F86338F91011EDAF5198824AD9E6FC.roa
Signing time: Tue 23 May 2023 02:22:28 +0000
ROA not before: Tue 23 May 2023 02:22:25 +0000
ROA not after: Wed 10 Jan 2024 02:22:25 +0000
asID: 64267
IP address blocks: 156.248.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9856 (0x2680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:22:25 2023 GMT
Not After : Jan 10 02:22:25 2024 GMT
Subject: CN=646c2364-889f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:5d:d3:b1:f7:95:fe:83:69:4e:01:8d:b5:
b2:d1:51:10:1e:6f:a0:7a:bb:7c:ae:91:32:cd:79:
b4:e5:e5:b3:00:9e:f9:33:02:d2:b1:05:a3:8c:ae:
70:12:ac:15:83:2c:36:80:12:cd:6a:43:13:f5:32:
3d:3b:96:84:56:01:2b:26:67:73:bc:6b:e7:3a:05:
8e:be:2e:d3:b8:54:a5:27:df:0a:fe:d0:a0:a2:67:
73:d4:3a:33:ae:a9:7f:b8:d3:b1:b8:4e:8f:b3:06:
86:e2:32:e9:c1:1a:97:6c:c6:ad:c0:2f:56:67:8f:
be:d5:52:15:b6:5c:01:96:5b:de:6d:a2:c4:f3:c5:
c3:f2:03:89:58:00:06:56:76:a3:60:d8:69:f7:8e:
38:f9:cc:ba:17:67:75:19:00:e1:ec:6e:77:ea:d2:
4b:af:44:4a:d9:50:d6:34:24:1f:5c:0f:43:d3:66:
97:ae:bc:14:bc:32:48:9e:7e:15:88:15:15:b5:85:
e3:75:cd:7d:9f:fc:4e:39:95:e5:da:bf:f7:dc:db:
87:51:a3:46:ad:88:70:aa:9f:24:ab:4a:ec:bf:af:
93:7c:bf:3c:bb:a3:73:20:43:a2:4f:bd:a6:d4:52:
c1:17:c0:9e:c2:85:9c:48:c9:c6:2a:20:aa:01:2d:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E9:D4:F9:BD:29:26:9F:14:8C:1F:41:9B:0D:BB:CA:AC:8A:D7:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F86338F91011EDAF5198824AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.67.0/24
Signature Algorithm: sha256WithRSAEncryption
84:67:67:1e:5a:05:e8:4d:d2:24:3c:f0:1c:aa:2d:57:6a:5e:
85:a5:e8:9b:42:40:75:3c:ee:93:8b:65:c8:37:9f:ba:78:38:
30:49:c4:51:01:0e:5a:f7:a1:7d:cc:7c:d3:9d:0e:b8:00:26:
c9:90:c7:c3:57:7a:07:7a:91:de:62:15:99:c3:f3:07:f2:9c:
d1:c8:1e:5b:9c:b7:a0:c8:05:e1:42:15:af:90:e1:c0:97:4a:
8a:57:73:2c:e2:c8:43:d2:c1:b3:d3:0c:ce:7b:9b:e6:b4:86:
d1:50:17:a7:58:35:5a:c9:f3:b1:a8:76:05:37:a4:c7:b3:22:
26:91:5a:b8:be:f8:38:07:80:23:73:43:ec:23:80:39:f8:0a:
0a:6d:2d:89:21:14:c9:33:82:86:5e:a8:ad:01:8e:e3:2b:d9:
a1:5d:1d:ac:ac:d8:83:6e:48:0e:91:ba:46:0b:dc:71:8a:39:
49:05:44:b3:cf:eb:6b:b6:8d:eb:55:e9:8c:19:be:20:fc:df:
05:b8:0f:fc:f5:07:7e:0d:a9:74:39:21:d5:20:ab:28:02:02:
a9:2d:02:da:19:bb:1c:39:13:56:23:86:1d:a1:c6:8b:ea:88:
8a:8c:f3:8d:fa:b0:1a:3e:09:38:dc:3e:37:ab:b8:77:e4:e8:
f0:f4:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:23:44 2025 by rpki-client