Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C446219EEFA411EFB6A47B48762E951A.roa
File: C446219EEFA411EFB6A47B48762E951A.roa (raw, json)
Hash identifier: 2DQJFR6lZYzyBsqm3XXy+Zb3iLqJBt8SASCAnBK0wwk=
Subject key identifier: 16:49:1F:5B:3A:2E:47:C8:DA:06:4B:95:30:8D:EB:71:65:68:9E:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012695
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C446219EEFA411EFB6A47B48762E951A.roa
Signing time: Thu 20 Feb 2025 16:07:22 +0000
ROA not before: Thu 20 Feb 2025 16:07:17 +0000
ROA not after: Thu 27 Mar 2025 16:07:17 +0000
asID: 54600
IP address blocks: 156.229.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75413 (0x12695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 16:07:17 2025 GMT
Not After : Mar 27 16:07:17 2025 GMT
Subject: CN=67b7533a-0b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:d5:72:aa:8e:30:35:31:ea:19:26:01:d4:
fd:b1:79:78:f1:47:08:d4:2c:e9:03:6e:3f:17:cb:
fd:61:90:0d:ed:8e:39:5f:2d:d9:c6:2a:2e:2a:27:
c3:a6:2f:0b:20:db:b7:1f:51:ec:72:3b:37:17:18:
ab:62:9d:c0:e0:5c:c7:f2:00:d1:3b:e1:84:9d:f2:
41:6a:6b:40:fd:c7:1f:3e:18:9f:17:3c:f2:a4:5a:
af:42:8f:0c:00:ed:34:eb:52:f7:a3:26:dc:8b:20:
6f:b4:96:0d:f4:5e:76:2b:ad:d0:cb:8c:44:07:d2:
82:1f:09:41:0f:5b:a8:59:84:47:9b:ad:0f:6d:74:
82:1c:4b:a9:85:7f:cb:2b:5d:7e:95:55:18:f1:ce:
ff:32:90:f5:2c:8a:53:a5:89:23:2d:b5:58:3b:5b:
f2:88:c9:b7:dd:21:ec:f1:81:54:2d:d9:fe:76:e3:
23:23:f9:eb:55:bf:af:4b:a6:e4:8d:74:e2:b2:37:
f6:4a:49:13:56:c0:fe:60:c1:fb:26:0d:2a:07:48:
14:91:2e:ce:b6:35:dc:a4:21:fa:5d:62:60:39:12:
f3:45:a3:a6:d6:50:36:b8:e6:7d:dd:ad:2d:47:0e:
28:e3:f9:e8:fe:55:32:65:2b:c2:a6:9f:74:6f:77:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:1F:5B:3A:2E:47:C8:DA:06:4B:95:30:8D:EB:71:65:68:9E:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C446219EEFA411EFB6A47B48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.192.0/19
Signature Algorithm: sha256WithRSAEncryption
09:eb:9b:7c:de:a5:6f:27:e1:7b:d1:62:9a:4e:6c:70:e6:e6:
38:ac:29:cc:21:d1:3f:4e:1d:05:14:86:77:83:b0:ac:dd:18:
8e:97:6e:2d:ca:7d:41:ac:eb:38:67:25:0a:5f:88:58:fa:e0:
4b:39:20:fb:f0:8f:7b:59:00:b2:c2:94:05:f6:5b:cc:9b:1e:
1d:b4:6e:f9:0d:e5:09:46:2f:f0:52:2e:05:14:b0:ed:a3:14:
5b:79:13:44:24:da:0a:dd:3f:58:69:09:39:db:5b:13:aa:37:
16:de:a5:3d:2b:eb:3e:75:0c:8b:87:c2:58:20:16:87:4c:5a:
a5:d8:67:d5:41:07:fd:2d:a7:f3:eb:83:ae:87:c3:da:5d:06:
bd:75:d0:53:2e:e6:7f:31:ae:f8:55:60:67:16:fa:25:c4:93:
56:cb:05:06:b2:b1:08:ae:23:26:02:5c:32:67:0f:16:d3:7b:
27:62:a7:a3:24:8a:ac:75:24:6e:22:71:e7:f3:ea:c0:d4:43:
1d:ca:df:e0:31:5c:8e:c0:f6:39:45:72:b1:62:3a:1f:02:f1:
e3:8e:93:29:e2:f9:d4:3d:c5:8d:3c:d2:28:eb:97:87:5b:dd:
9b:c4:5c:c3:a2:b2:c5:ca:a0:40:96:c5:09:e7:fe:a1:a1:e1:
cb:bf:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:56:34 2025 by rpki-client