Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5EEEBA4BCCD11EDBF32F88AF1222468.roa
File: C5EEEBA4BCCD11EDBF32F88AF1222468.roa (raw, json)
Hash identifier: te0myS40G8Y0td/mg8r9cGjap+xp042wgdbWia0tCs8=
Subject key identifier: 17:59:6F:C3:77:36:0A:1B:32:5B:C9:90:5E:AA:91:B6:AC:5C:3C:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1D09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5EEEBA4BCCD11EDBF32F88AF1222468.roa
Signing time: Tue 07 Mar 2023 09:52:29 +0000
ROA not before: Tue 07 Mar 2023 09:52:24 +0000
ROA not after: Mon 23 Oct 2023 09:52:24 +0000
asID: 133199
IP address blocks: 156.247.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7433 (0x1d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 09:52:24 2023 GMT
Not After : Oct 23 09:52:24 2023 GMT
Subject: CN=6407095d-b889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:72:f9:8d:5c:0a:b3:d0:4b:7b:0b:a6:61:
3f:1f:1d:3d:a6:c5:67:a4:03:24:af:c4:47:2c:f4:
0b:e9:e4:48:10:3c:2a:f3:3c:ab:e1:a4:8d:81:e9:
56:95:57:9c:40:47:4c:26:68:cd:e3:64:ea:2d:43:
21:7c:8c:42:a8:83:ea:d8:32:9d:b8:c6:6f:cc:02:
57:34:23:38:83:f8:f6:a8:12:ce:bc:28:9f:60:57:
92:b0:87:4e:c8:7d:00:e2:0b:64:02:56:14:5d:29:
bf:47:85:18:cd:3c:d6:81:a9:65:c7:68:73:df:cb:
68:fb:ae:95:cc:e7:54:48:02:b4:3a:78:14:6c:f6:
20:bd:c2:4d:69:33:95:f4:64:00:1a:b2:94:6d:03:
bb:66:c8:62:99:32:44:5a:9b:c3:ff:04:b5:d6:92:
cf:fa:aa:30:ec:c0:6c:9f:8f:cf:85:c5:d4:1d:2f:
2a:d9:af:fd:8b:8e:c2:c8:93:59:96:9b:69:a2:f2:
b2:28:c5:4f:c7:37:4f:6d:58:f5:5a:ec:85:c7:03:
4b:bb:82:db:07:4b:ce:c8:d9:59:50:f6:47:97:cb:
ec:6d:fc:b7:9c:6a:d4:16:19:26:e6:d7:f8:17:3d:
d8:41:bd:d8:a1:67:84:4b:5c:9a:e0:f2:82:24:48:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:6F:C3:77:36:0A:1B:32:5B:C9:90:5E:AA:91:B6:AC:5C:3C:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5EEEBA4BCCD11EDBF32F88AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.13.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6e:c8:e9:c9:ef:cc:86:4a:cf:84:a6:e7:e4:7e:9f:4b:86:
21:fe:3a:e0:29:13:c0:31:5f:64:68:cb:d9:98:26:45:f8:f9:
07:bf:ed:f8:50:c2:b3:27:78:23:0f:2c:f7:9d:e3:c1:c7:40:
28:8e:3c:21:b2:e8:d6:6e:5a:e2:71:9a:c5:a1:1c:e8:ab:e2:
23:6c:ed:b8:05:af:2a:aa:30:ad:23:b9:13:d0:73:0f:aa:44:
b6:37:ef:da:0c:a3:95:56:ad:4f:f6:76:37:40:6a:b5:63:41:
ad:9a:0b:dd:60:5e:f2:46:97:4d:88:84:2d:c0:75:fe:8e:10:
e6:0f:0c:3b:5c:66:ed:f2:93:a2:75:2f:dc:42:b9:f9:a6:0d:
74:11:f1:1a:a0:81:ec:e2:cf:21:a9:fc:f4:75:a3:97:db:f6:
8f:f6:30:e2:9f:47:37:fa:c9:60:60:89:16:51:3e:f2:3d:51:
14:79:ae:d0:25:4d:fc:8e:d6:c9:5c:4c:aa:40:45:5c:7f:08:
6c:da:65:59:9d:30:f6:3d:46:10:49:53:5f:d4:ce:04:06:a4:
0c:b4:fd:9b:1a:df:0f:22:7c:b1:b7:5d:56:32:93:71:cf:66:
f7:14:f8:68:2d:67:4b:fa:f4:b8:fd:e0:7b:55:82:4f:ba:fe:
31:c3:24:3a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHQkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzAzMDcwOTUyMjRaFw0yMzEwMjMwOTUyMjRaMBgxFjAU
BgNVBAMMDTY0MDcwOTVkLWI4ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC33HL5jVwKs9BLewumYT8fHT2mxWekAySvxEcs9Avp5EgQPCrzPKvhpI2B
6VaVV5xAR0wmaM3jZOotQyF8jEKog+rYMp24xm/MAlc0IziD+PaoEs68KJ9gV5Kw
h07IfQDiC2QCVhRdKb9HhRjNPNaBqWXHaHPfy2j7rpXM51RIArQ6eBRs9iC9wk1p
M5X0ZAAaspRtA7tmyGKZMkRam8P/BLXWks/6qjDswGyfj8+FxdQdLyrZr/2LjsLI
k1mWm2mi8rIoxU/HN09tWPVa7IXHA0u7gtsHS87I2VlQ9keXy+xt/LecatQWGSbm
1/gXPdhBvdihZ4RLXJrg8oIkSFoXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUF1lv
w3c2ChsyW8mQXqqRtqxcPIEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M1RUVFQkE0QkNDRDExRURCRjMyRjg4QUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9w0wDQYJKoZIhvcNAQELBQAD
ggEBAAhuyOnJ78yGSs+Epufkfp9LhiH+OuApE8AxX2Roy9mYJkX4+Qe/7fhQwrMn
eCMPLPed48HHQCiOPCGy6NZuWuJxmsWhHOir4iNs7bgFryqqMK0juRPQcw+qRLY3
79oMo5VWrU/2djdAarVjQa2aC91gXvJGl02IhC3Adf6OEOYPDDtcZu3yk6J1L9xC
ufmmDXQR8RqggezizyGp/PR1o5fb9o/2MOKfRzf6yWBgiRZRPvI9URR5rtAlTfyO
1slcTKpARVx/CGzaZVmdMPY9RhBJU1/UzgQGpAy0/Zsa3w8ifLG3XVYyk3HPZvcU
+GgtZ0v69Lj94HtVgk+6/jHDJDo=
-----END CERTIFICATE-----
Generated at Sun May 11 14:25:04 2025 by rpki-client