Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D2D19EF2C411EFB984E9A1762E951A.roa
File: B9D2D19EF2C411EFB984E9A1762E951A.roa (raw, json)
Hash identifier: du7liUc2tKjM849DbIyiXvaWqs2+c44LKga8aXM0A6M=
Subject key identifier: 35:4C:1A:B5:63:C1:9D:25:47:A5:91:9C:54:56:20:5F:10:14:EC:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D2D19EF2C411EFB984E9A1762E951A.roa
Signing time: Mon 24 Feb 2025 15:33:42 +0000
ROA not before: Mon 24 Feb 2025 15:33:38 +0000
ROA not after: Sat 29 Mar 2025 15:33:38 +0000
asID: 203020
IP address blocks: 156.235.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76807 (0x12c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:33:38 2025 GMT
Not After : Mar 29 15:33:38 2025 GMT
Subject: CN=67bc9156-a821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:01:94:d5:75:43:f5:64:71:45:4c:6e:2b:
14:b4:cb:bc:60:f7:47:61:c0:35:ee:08:8f:11:53:
92:4f:11:08:4d:de:71:05:ea:8f:d7:51:6d:3a:55:
91:49:7b:96:e5:8d:95:c9:84:5c:69:f2:9c:fa:11:
5c:d0:ca:24:59:ab:fc:98:61:b2:57:e5:4d:16:4a:
8c:34:02:74:ff:40:f3:81:a2:c1:6c:cc:7d:82:82:
91:cd:1d:02:f9:ab:4d:50:b7:43:41:77:c1:e3:b2:
6d:d2:2c:12:22:47:dd:7f:71:37:3b:aa:6c:fb:de:
8d:c1:19:99:17:24:4f:f6:a5:28:d1:3a:f4:a7:45:
e8:c2:c1:ec:5b:a7:0a:27:fc:f9:11:50:bd:34:9e:
f3:f8:c8:e5:9e:aa:16:bf:00:5b:15:67:39:02:f8:
ba:a3:d0:42:df:fb:71:f9:e6:bf:f7:a2:6a:85:ce:
99:86:42:ef:dd:b0:a4:b6:30:71:51:fa:23:92:8b:
45:3f:db:85:dd:ff:26:fd:db:68:05:52:67:1d:f0:
04:f9:58:dc:36:3d:83:6c:69:58:6a:a9:8b:05:64:
c0:7d:9a:30:1c:1d:55:21:df:3d:74:19:9f:d5:b7:
f6:a0:ba:6d:10:83:de:88:f9:db:7c:30:64:e0:df:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4C:1A:B5:63:C1:9D:25:47:A5:91:9C:54:56:20:5F:10:14:EC:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D2D19EF2C411EFB984E9A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:b7:79:b0:ae:a7:a8:c5:0c:30:a7:94:8b:b8:b1:2a:00:a4:
42:e2:30:dd:dd:b9:0c:0c:e3:9b:a0:47:86:00:dd:3d:72:4b:
97:27:ad:d6:b1:d5:69:66:20:44:8a:ff:e4:dc:b4:2d:71:53:
a4:9d:58:a8:48:6d:51:e9:c7:8a:08:d9:e6:8a:cd:dd:a8:bb:
8a:d8:7c:b3:6b:6c:2d:3c:ee:8d:b6:3d:33:69:96:f6:27:d7:
5b:c6:f5:38:28:7d:ea:fa:69:33:f2:06:bb:8b:80:b7:b6:a4:
bc:da:fe:a7:bf:21:3c:1a:b0:1e:b1:9e:84:27:08:9c:de:2b:
66:6c:32:d7:a9:fa:80:c7:52:70:83:a9:80:b9:ee:87:a3:74:
16:fb:0c:6d:97:b7:a9:3c:91:22:2c:f3:2b:52:d0:08:6d:7b:
19:d1:00:fb:c2:28:f5:3f:e7:87:d7:fd:14:a2:3c:d0:23:ca:
0d:2e:9c:16:37:ee:51:54:00:ab:0c:21:12:36:7d:6d:7a:1c:
02:12:42:87:db:f5:de:5e:ae:06:3f:9a:00:eb:ed:14:26:7c:
d4:83:71:c8:86:27:17:a9:ab:12:aa:c1:24:76:13:e3:c3:de:
07:f0:00:5f:fd:64:43:ef:ea:af:79:1f:c7:ea:de:ec:90:98:
05:27:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:24 2025 by rpki-client