Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C40BF87AB36011ED89DA3EAFF1222468.roa
File: C40BF87AB36011ED89DA3EAFF1222468.roa (raw, json)
Hash identifier: SIWHJxh6Gg/M+zl0G1JlPjt5LT7aB2eBYf4qdds6Dr4=
Subject key identifier: 73:80:9E:AB:56:D1:65:A3:54:74:70:66:2D:94:47:46:23:BA:4E:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C40BF87AB36011ED89DA3EAFF1222468.roa
Signing time: Thu 23 Feb 2023 09:59:31 +0000
ROA not before: Thu 23 Feb 2023 09:59:27 +0000
ROA not after: Mon 23 Oct 2023 09:59:27 +0000
asID: 133199
IP address blocks: 156.247.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7213 (0x1c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:59:27 2023 GMT
Not After : Oct 23 09:59:27 2023 GMT
Subject: CN=63f73902-78db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:ee:62:fb:c1:d0:f8:15:f1:8e:fd:74:70:
54:62:af:39:45:34:63:90:7f:1d:2a:f9:b6:1a:68:
2d:43:a8:3d:35:69:bb:c9:5a:8e:45:37:5b:62:69:
4b:60:08:6d:8e:2c:50:09:66:b8:44:62:48:33:74:
59:7c:9d:ad:c3:db:41:b0:8d:8b:98:3c:8e:ae:c9:
03:84:91:4a:82:9a:fd:9f:12:0d:12:06:5e:7c:ca:
59:83:f3:46:8b:cb:d4:33:f0:6d:70:72:0f:9e:bc:
cc:29:c4:20:ea:55:8c:2d:42:6a:af:44:1d:51:5b:
58:9c:43:94:06:08:0d:7a:b8:93:7e:2e:3a:97:37:
c3:39:69:53:3c:73:07:4b:f2:82:b4:5a:5b:e1:fd:
a6:71:60:d2:ca:54:52:4d:51:ef:30:b0:aa:ca:b5:
c7:79:88:c5:20:bb:26:da:b0:a3:f8:4a:b8:36:a7:
17:4a:04:eb:19:28:ed:20:38:83:19:a3:14:96:8a:
09:7c:c8:b7:97:f2:9f:97:15:04:2a:0a:06:66:0c:
d7:19:0f:09:8f:f7:e1:e5:b3:dc:b4:46:b8:96:82:
17:cc:29:fb:1a:2e:89:a3:de:00:59:16:6c:2a:88:
d7:24:6b:42:7d:a7:78:c3:73:83:70:16:a3:2d:38:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:80:9E:AB:56:D1:65:A3:54:74:70:66:2D:94:47:46:23:BA:4E:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C40BF87AB36011ED89DA3EAFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:69:06:6f:2d:36:6d:e3:f7:f3:bb:30:f3:d5:d9:37:91:89:
b7:80:c0:17:91:ec:d6:e2:a7:b4:aa:69:a9:49:94:bf:6b:31:
b7:52:b3:2c:01:03:09:f3:65:b7:4b:5c:f9:86:00:63:1a:9c:
62:9c:cb:1b:83:a8:3d:6a:21:8e:06:15:b1:b6:a7:28:27:e5:
d2:42:98:8f:cc:76:d4:b1:b0:37:41:75:88:17:76:04:50:f0:
f6:b1:1b:60:85:ef:df:ea:7d:9c:18:95:f5:b6:ad:c2:99:a6:
f0:ad:ab:71:c4:07:6d:82:ef:eb:47:5e:7f:40:f2:91:ad:ab:
12:91:b9:29:74:45:3d:9d:f8:63:68:da:c2:d0:0d:05:5b:7f:
bc:87:a1:3f:cb:94:e3:6c:e5:25:a6:1f:0e:42:36:d6:6f:dd:
c7:d9:3c:fb:cf:21:6d:11:31:76:6a:3f:52:27:61:85:25:bf:
eb:53:5f:1d:76:a9:35:5c:12:07:6e:f7:05:35:0c:ba:4f:c4:
b7:eb:0a:24:83:9e:86:77:1c:b4:da:96:db:a5:62:a0:af:ca:
60:a2:bd:d7:7f:5e:67:b4:aa:bf:80:e4:88:83:b7:92:51:90:
1e:84:cb:69:69:c1:ba:8d:60:36:b1:67:a2:e7:5d:0f:1a:db:
f9:db:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:10 2025 by rpki-client