Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B719D6A8F85C11EFA752B265762E951A.roa
File: B719D6A8F85C11EFA752B265762E951A.roa (raw, json)
Hash identifier: et38h5NKZXGjfac48LLHS1WnG7ZhQe8rbc5m4lgGo5Q=
Subject key identifier: BD:36:57:B0:6B:BE:2D:65:23:AF:60:CA:AB:46:60:00:3E:43:4F:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014231
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B719D6A8F85C11EFA752B265762E951A.roa
Signing time: Mon 03 Mar 2025 18:24:16 +0000
ROA not before: Mon 03 Mar 2025 18:24:13 +0000
ROA not after: Mon 31 Mar 2025 18:24:13 +0000
asID: 48031
IP address blocks: 156.236.22.0/24 maxlen: 24
156.236.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82481 (0x14231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 18:24:13 2025 GMT
Not After : Mar 31 18:24:13 2025 GMT
Subject: CN=67c5f3d0-6e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:26:89:7d:c1:51:77:ce:ce:fb:ac:66:0b:
75:4b:80:48:7e:cf:53:00:3a:8e:cb:3a:98:0e:75:
d4:9a:ea:24:98:85:d4:55:6e:f1:b0:f2:b4:5b:d6:
90:b5:e2:10:34:e0:26:d1:40:35:ba:23:1a:04:bb:
8a:2a:c8:07:15:e6:a5:5e:03:ee:9d:78:a5:a4:89:
d5:d3:dc:8b:ac:ed:3a:26:37:45:54:e9:96:e0:16:
2f:93:d3:af:89:d7:35:d5:d5:84:07:b3:d7:de:42:
6f:43:3d:a1:53:d0:67:6c:1b:d9:b9:ff:e3:28:1b:
56:47:03:bc:95:fa:32:dc:ca:3e:2d:2b:ff:61:fd:
aa:ce:31:c1:b8:11:3c:51:0b:16:06:97:23:d5:da:
3a:61:0b:02:86:50:c1:e3:68:5f:e5:31:ff:1b:fe:
ea:29:23:0a:5a:85:80:d2:3e:f5:9c:f0:80:70:5d:
c4:0a:1a:4c:c1:83:86:cd:f3:8b:57:f7:61:0b:3b:
a6:25:9f:01:17:bc:ff:8a:8d:38:18:15:7e:02:4f:
26:f8:01:6c:b0:b9:6f:df:c6:c9:bf:01:67:f2:d1:
11:bb:10:fa:86:e2:0a:35:f1:f2:d4:6e:72:a4:10:
6f:d9:8a:07:70:ed:62:5b:9f:4d:07:d9:d0:27:bd:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:57:B0:6B:BE:2D:65:23:AF:60:CA:AB:46:60:00:3E:43:4F:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B719D6A8F85C11EFA752B265762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.22.0/23
Signature Algorithm: sha256WithRSAEncryption
62:5d:ed:7b:87:bb:43:b8:1d:33:5e:f0:bf:ab:b8:5b:41:53:
76:0b:82:c7:24:28:0b:51:58:2e:49:a0:bb:2f:36:72:b1:f2:
2b:c3:fd:31:c2:51:b9:31:ea:c8:c7:23:96:b2:18:7e:71:be:
b7:b6:bc:2e:1e:ad:41:8d:68:6b:ab:6f:59:1f:6e:20:4a:61:
5e:4f:34:9c:65:85:b2:ea:23:76:93:f2:da:08:82:e8:90:92:
10:58:8a:c8:5e:47:f6:8d:a2:67:b4:3a:d0:8a:d6:18:51:7f:
bd:21:c4:42:cd:21:d4:3a:ca:8d:f5:c6:be:40:a8:3b:e9:8b:
bf:c9:37:5f:f9:46:92:5b:01:2f:d5:27:b6:9c:ea:92:f6:c8:
e7:5a:be:39:08:c3:0a:b6:c8:1a:66:4c:46:ea:99:cd:36:a5:
f7:03:92:0b:07:2e:a8:0e:c3:2d:8d:1e:64:d2:3d:da:69:e6:
d5:ce:fb:5e:17:a3:17:3d:9a:17:87:3e:b8:95:9d:ea:2b:aa:
ce:ac:fa:0b:5a:f4:2f:67:1c:57:e2:81:16:a2:68:89:d9:da:
20:17:5f:f7:40:43:f4:94:b5:91:f7:f9:cb:07:e5:20:04:95:
f8:3c:d7:1e:7c:34:58:f8:63:9a:84:91:1d:e2:ef:59:9e:9f:
89:53:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:49 2025 by rpki-client