Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C036D572B35F11ED84ED2BACF1222468.roa
File: C036D572B35F11ED84ED2BACF1222468.roa (raw, json)
Hash identifier: 9iYBbjUg8JvWNOpxqfnFH6/5J0Q+Hnl9a1Z50N0XgOI=
Subject key identifier: D4:A4:C5:20:63:B8:0E:83:FE:9D:D5:74:CF:30:AF:8C:37:F8:A0:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C036D572B35F11ED84ED2BACF1222468.roa
Signing time: Thu 23 Feb 2023 09:52:15 +0000
ROA not before: Thu 23 Feb 2023 09:52:11 +0000
ROA not after: Mon 23 Oct 2023 09:52:11 +0000
asID: 133199
IP address blocks: 156.245.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7185 (0x1c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:52:11 2023 GMT
Not After : Oct 23 09:52:11 2023 GMT
Subject: CN=63f7374f-1429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:42:9e:2f:a5:6d:14:c4:fa:fa:20:5b:52:
b1:f7:6b:ba:6b:bd:77:f5:a0:db:3d:c2:aa:92:54:
d3:02:70:90:9e:d1:75:aa:c7:6f:33:a5:f9:44:fc:
76:fa:7e:ca:55:47:04:e2:0c:cd:b3:ed:8b:1a:48:
95:fc:a7:23:af:71:8e:2c:bb:6c:cd:bf:00:62:6b:
85:43:51:d0:d8:71:65:46:5b:e4:cc:ed:c3:be:54:
50:e3:2f:46:3a:19:58:7a:d8:24:b0:6b:8d:4a:4c:
16:b3:c9:6f:eb:5a:46:90:0e:3c:d4:72:56:42:d9:
83:80:19:f0:0c:cb:d7:00:c3:ab:31:4b:5c:50:7b:
56:60:e4:02:ce:7c:86:b9:71:62:81:fa:1a:72:90:
53:06:d5:2c:bf:ea:91:4b:a3:56:44:57:eb:5b:af:
ed:e7:e1:63:84:2f:34:72:bc:1b:c0:aa:d9:56:7c:
03:76:76:d9:78:b3:2d:03:9d:44:e8:8b:e0:bb:d8:
57:69:c5:64:df:a3:be:bb:9a:fd:d1:bd:3f:b0:69:
b2:6f:02:64:de:df:73:35:22:48:eb:7b:3d:af:d3:
22:7a:49:cc:c4:88:72:f3:23:8c:ac:dc:dd:31:7c:
54:69:4c:ff:eb:85:bb:4e:52:22:53:e2:95:0e:36:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:C5:20:63:B8:0E:83:FE:9D:D5:74:CF:30:AF:8C:37:F8:A0:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C036D572B35F11ED84ED2BACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.19.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f6:bf:24:54:46:30:d9:bf:49:1f:a3:3d:4c:7c:7d:60:be:
3a:0b:55:63:ed:64:fc:6c:7e:2e:ef:b9:8e:f4:15:7b:14:97:
c6:7c:4a:e4:1a:e2:19:c9:d7:5a:53:38:a5:d8:10:7e:ff:ca:
30:6d:e9:5a:41:97:e0:f9:19:d0:b9:77:e3:09:98:aa:ef:6f:
df:79:d1:3d:51:9a:e7:c0:71:77:c5:1b:75:9e:dc:33:98:8e:
28:84:55:46:32:fa:72:eb:49:48:b0:9a:5a:c3:35:06:72:d0:
31:70:d5:df:e3:a1:ae:75:16:c7:f1:ad:7f:f3:d1:a6:31:45:
26:e6:02:ca:55:ff:d1:11:87:6d:92:d1:20:32:de:d1:79:db:
a5:50:df:b6:0f:10:bc:2e:1d:d7:65:5b:72:46:7e:6b:38:90:
5a:3e:62:f8:05:a9:a2:0d:f9:ff:fd:6e:98:33:ff:e6:20:14:
da:bc:14:33:e7:72:42:c7:41:3a:4c:97:bf:41:62:36:62:35:
47:a2:87:81:3a:9c:6a:72:98:39:9c:92:2a:3e:13:87:f0:c2:
a0:a9:0a:42:4e:0a:c3:4c:0b:f7:04:dc:f0:27:50:9d:e8:fb:
15:a4:b8:71:54:8b:fc:3e:9a:39:b4:20:67:e3:c6:44:a3:b9:
17:77:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:00:10 2025 by rpki-client