Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5DAC0A6F61111EFAF72BC4C762E951A.roa
File: B5DAC0A6F61111EFAF72BC4C762E951A.roa (raw, json)
Hash identifier: bLzZvDfI9dbh3Zn3t/iPLCZfv5gEuhIEvxIJkHo18p4=
Subject key identifier: DC:30:74:FA:B1:CA:3E:D9:D7:14:00:D5:14:9E:C0:33:60:52:5F:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5DAC0A6F61111EFAF72BC4C762E951A.roa
Signing time: Fri 28 Feb 2025 20:22:20 +0000
ROA not before: Fri 28 Feb 2025 20:22:16 +0000
ROA not after: Sun 30 Mar 2025 20:22:16 +0000
asID: 203020
IP address blocks: 156.253.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81720 (0x13f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 20:22:16 2025 GMT
Not After : Mar 30 20:22:16 2025 GMT
Subject: CN=67c21afc-6c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:7e:69:98:30:d1:0e:b8:40:79:93:2f:b2:
5f:ef:dd:44:07:4a:bc:04:1f:72:5f:87:31:70:90:
29:9e:d8:92:29:8f:b9:5d:99:2c:f6:f8:ca:38:ea:
e2:4e:44:a6:cb:e7:8b:16:d9:c6:c0:6b:09:09:27:
c7:30:c6:02:84:40:ab:98:d4:3a:38:24:d6:26:66:
f6:c8:a4:30:1d:fc:20:25:16:0d:f4:5c:7a:ac:d1:
08:96:0d:16:a9:af:37:d5:1a:03:32:2e:a6:f2:25:
dc:2e:25:88:44:2a:84:48:19:46:50:4a:73:9a:6b:
11:b3:85:62:6b:f0:24:cc:22:a2:de:88:c0:84:52:
21:42:dc:b1:a2:86:ba:91:d7:e6:37:fd:16:64:0a:
8f:5b:d9:ef:9e:ac:0c:ee:b5:44:2b:34:1d:e3:0d:
fc:44:48:34:af:20:3d:1e:43:4c:0d:6a:31:b2:b1:
4d:ba:4c:d5:5d:48:ec:aa:7d:03:ed:07:3e:a1:65:
b2:be:d8:3a:ee:0f:d4:47:4f:c7:4e:d1:16:9c:d0:
e2:7a:57:77:63:ee:60:09:5b:a0:f9:dd:7f:29:f2:
52:77:d1:03:78:6d:eb:a9:54:57:0c:28:c8:44:16:
54:d1:cd:f2:65:61:c7:fd:3a:a0:5c:b1:7a:e0:11:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:30:74:FA:B1:CA:3E:D9:D7:14:00:D5:14:9E:C0:33:60:52:5F:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5DAC0A6F61111EFAF72BC4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.194.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:99:66:e1:60:f4:e7:de:8f:63:ac:fb:4e:16:c0:54:47:4b:
2e:f0:cd:50:db:0a:74:80:63:29:a6:9c:b7:44:f7:f6:f0:df:
7c:0b:da:ea:b2:be:16:3a:f6:c9:5c:30:87:97:67:2c:5e:21:
c8:e0:33:67:ee:04:bb:ec:6e:21:35:88:52:05:66:a2:37:a5:
cc:01:64:1b:8a:1d:e7:ef:3a:cb:87:6f:30:09:aa:da:7a:38:
36:47:66:47:12:82:ac:b7:8c:75:9a:78:f0:af:01:37:34:99:
8e:c3:1d:37:46:73:b2:a9:3e:46:0b:b4:c7:52:4b:67:29:d8:
63:74:ad:d7:06:f2:87:7b:b6:76:14:66:59:1c:1c:30:ca:5d:
d1:fe:5d:d1:54:58:59:35:ac:b0:23:f4:a9:ef:9f:bb:b1:bc:
cc:53:91:3d:af:4e:cd:f1:7d:5b:3c:b3:52:06:81:3e:78:13:
8a:71:66:51:50:c3:8c:86:51:fe:38:39:d4:0c:74:26:b4:f3:
6a:35:7c:44:45:b8:85:2f:53:02:89:16:e5:89:0e:2d:1e:4d:
3f:f5:08:ca:59:8e:08:d1:5f:b1:bf:fd:5c:5a:7b:34:b4:71:
87:f9:38:bc:80:bd:de:8c:8c:df:a9:6a:73:40:01:eb:af:8e:
db:e3:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:47 2025 by rpki-client