Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD4385BEF16E11EF9F52316A762E951A.roa
File: BD4385BEF16E11EF9F52316A762E951A.roa (raw, json)
Hash identifier: irZc5ookfOiAvR6KHXC5FuFyJ6KW4IrUvGB48a4UuG8=
Subject key identifier: FE:35:84:78:E6:06:7E:38:72:4D:26:7B:7E:E7:58:76:6A:DA:D6:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0129BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD4385BEF16E11EF9F52316A762E951A.roa
Signing time: Sat 22 Feb 2025 22:45:40 +0000
ROA not before: Sat 22 Feb 2025 22:45:36 +0000
ROA not after: Sat 05 Apr 2025 22:45:36 +0000
asID: 18013
IP address blocks: 156.234.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76219 (0x129bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 22 22:45:36 2025 GMT
Not After : Apr 5 22:45:36 2025 GMT
Subject: CN=67ba5393-da08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:2c:17:dc:43:11:ca:55:36:48:c6:6f:8b:
9c:dc:1f:b5:d0:b5:36:39:60:0d:0e:9d:fc:c5:81:
da:8f:c7:6e:9a:6d:30:97:03:0d:25:1c:8a:55:5f:
ac:fb:5f:c1:e3:c1:54:b1:30:16:55:2a:a7:79:31:
dd:d1:8e:d7:15:25:b6:a9:40:84:5d:bc:16:df:dc:
1b:04:17:24:bd:bd:29:eb:88:61:d9:c7:e4:cc:a7:
33:0e:6f:75:4f:83:54:02:0e:87:83:4c:5a:e6:cf:
ae:f9:7c:df:8d:df:2f:0b:50:3a:ae:22:88:55:86:
32:c9:96:79:b2:28:f1:d1:5e:71:c8:6b:b7:77:07:
6c:2c:d8:cc:b8:65:f3:2e:5f:6b:b3:16:a6:5b:f9:
6a:09:a3:0e:9a:f3:c5:33:02:e6:8f:94:5f:d2:7d:
fd:47:db:b7:8a:c5:70:21:f8:9e:0e:52:ff:08:50:
9b:7c:69:47:b1:d8:13:92:97:e8:b5:b5:32:44:1a:
7f:20:df:45:b7:d2:7d:a6:27:e0:3d:54:7f:93:0f:
6e:83:f5:2b:08:e2:52:3f:c5:3f:2a:cb:97:79:73:
58:ab:3c:02:ac:ec:2c:ac:60:8d:d3:b0:84:bf:85:
7b:cd:e8:7b:63:da:b6:fa:c7:7d:1b:92:3f:da:c7:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:84:78:E6:06:7E:38:72:4D:26:7B:7E:E7:58:76:6A:DA:D6:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD4385BEF16E11EF9F52316A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
18:36:e4:77:64:d9:37:9c:f1:a0:76:ca:98:59:f8:2e:19:78:
90:8f:d3:13:7d:3c:3a:59:57:7a:eb:a8:bf:56:16:18:01:7c:
79:05:ad:07:e5:4b:25:ae:ec:7f:f6:4b:6d:01:b4:51:b4:66:
0d:1d:64:11:8c:55:ae:e3:18:33:d1:5a:2e:40:a9:c1:d2:8a:
d8:49:15:d2:44:c2:4f:b7:85:af:42:30:f0:0c:38:3f:ca:18:
75:28:b5:7d:6f:40:fc:60:16:f1:9c:eb:e1:93:47:83:0b:31:
06:f9:50:29:5c:fe:ef:b4:fa:06:c4:af:59:54:bd:41:96:1e:
9f:0b:6e:de:c6:45:21:22:e7:d8:33:c0:a7:1e:62:37:da:ea:
6c:c6:27:6d:83:35:72:12:a7:71:b7:79:da:3f:ae:aa:4b:6a:
ac:ce:8f:83:79:fb:f4:e9:4f:05:88:09:33:5b:3b:9c:12:a1:
6e:3a:8c:f6:bc:f9:16:04:86:14:e3:97:ee:90:4e:6c:ce:77:
70:1c:bb:8b:5c:7e:b6:9b:61:d6:52:10:d7:10:8c:03:13:dd:
45:bc:52:d0:e2:60:a6:21:75:1e:a6:0e:d9:bf:b9:a1:68:cb:
5c:56:b0:07:5a:78:a8:a1:07:87:0c:e0:1e:9c:3d:b1:74:ca:
3f:be:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:07 2025 by rpki-client