Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C093603EF91011EDB7B0E9824AD9E6FC.roa
File: C093603EF91011EDB7B0E9824AD9E6FC.roa (raw, json)
Hash identifier: /G8qe7pK6Vc8yer58XeIdLqO+xtDxR1nYGgDOa7pFwE=
Subject key identifier: 90:61:CF:33:E3:FA:9D:67:33:7E:01:37:7F:97:39:85:87:88:89:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2682
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C093603EF91011EDB7B0E9824AD9E6FC.roa
Signing time: Tue 23 May 2023 02:23:06 +0000
ROA not before: Tue 23 May 2023 02:23:03 +0000
ROA not after: Wed 10 Jan 2024 02:23:03 +0000
asID: 64267
IP address blocks: 156.248.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9858 (0x2682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:23:03 2023 GMT
Not After : Jan 10 02:23:03 2024 GMT
Subject: CN=646c238a-7a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:5d:bc:64:d9:00:49:17:5b:b4:40:f5:8f:
36:8c:e8:ad:84:5b:7b:60:b3:89:73:2e:91:c1:aa:
70:7e:e2:d9:08:50:70:0f:cb:af:b7:dc:0a:6b:f6:
0c:5d:4c:8e:06:5a:ef:cc:8b:38:cd:fd:fb:10:d9:
b6:4e:38:fd:a2:64:cf:08:04:a9:e9:96:9a:cc:87:
ad:ba:fc:9a:38:7b:b8:86:e3:8f:e0:0f:75:00:2f:
0e:e1:99:29:b7:f7:a3:54:05:2d:86:89:a7:01:56:
fc:b4:db:a5:f0:81:01:d2:43:23:2a:1b:54:52:1a:
5a:f3:93:0c:56:2c:e5:d1:db:ed:2b:ed:49:fc:05:
d8:68:a6:ce:f9:0f:8d:40:9c:f7:2b:29:22:e2:37:
6d:8b:2f:65:39:f8:e9:55:74:9c:4d:b2:16:a9:b5:
7e:4b:44:17:ca:87:41:32:8b:1e:fb:81:0c:31:2a:
2b:01:b4:c6:6f:00:5d:16:6f:fb:7e:f3:66:6e:38:
cd:30:fa:82:21:92:fa:25:64:3a:10:58:75:14:ab:
4e:87:6b:dd:be:f8:93:73:f8:ff:0b:f3:6f:d3:86:
b9:be:ee:41:25:17:6d:00:4f:b6:72:c8:8a:b7:ec:
f2:79:0e:c5:d3:74:49:ac:10:e6:6f:b4:35:2c:cd:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:61:CF:33:E3:FA:9D:67:33:7E:01:37:7F:97:39:85:87:88:89:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C093603EF91011EDB7B0E9824AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2c:92:95:4f:08:e8:97:e3:8d:c6:95:8a:bf:ee:cf:f0:d9:
1d:21:fb:b3:66:93:62:b6:ab:8e:51:3d:e5:44:8e:1b:07:f0:
56:73:2a:7d:be:b8:4a:1c:9d:8d:c7:94:d6:c5:e4:8a:df:99:
8c:39:89:eb:e1:12:49:1d:df:61:32:bb:91:7e:e1:0a:67:e5:
bb:23:b7:a4:f1:4c:fd:1f:6f:ea:9f:8b:8e:35:00:d3:bb:f9:
cf:e4:ed:93:71:32:81:27:89:cb:8f:a0:aa:8c:3c:a0:7e:b4:
38:4a:11:0d:cc:7f:04:cf:3e:13:db:5c:65:ed:d4:f4:99:63:
14:c0:0e:42:77:35:de:d2:02:c2:fe:89:f4:a2:af:71:6a:19:
1e:b8:6b:65:09:e8:82:05:f3:0d:c1:97:ee:eb:1a:67:84:a5:
cd:0c:79:ab:1e:6a:29:d6:8f:43:63:ed:fa:4b:1b:c9:1f:1a:
78:9f:22:a0:65:b1:b9:f1:c0:d8:70:c7:80:e9:f8:c5:81:b5:
e3:13:50:8a:04:ce:21:e7:9c:73:3e:d4:98:10:a2:6c:07:89:
99:6a:30:79:81:38:1d:c0:9d:fe:88:55:bb:5d:82:eb:46:e3:
ee:19:35:9f:a2:c0:32:69:ad:cc:05:39:f8:73:76:b1:da:1b:
f5:b5:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:50:26 2025 by rpki-client