Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8AC8336B36011EDB4714FAFF1222468.roa
File: C8AC8336B36011EDB4714FAFF1222468.roa (raw, json)
Hash identifier: g6Uchmw2o8IFAphQOdnabp9nclwkzk+mmshg0Tzie2c=
Subject key identifier: E9:21:27:4E:07:0D:42:62:B3:7E:48:9C:96:8F:23:33:A0:12:E1:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8AC8336B36011EDB4714FAFF1222468.roa
Signing time: Thu 23 Feb 2023 09:59:39 +0000
ROA not before: Thu 23 Feb 2023 09:59:35 +0000
ROA not after: Mon 23 Oct 2023 09:59:35 +0000
asID: 133199
IP address blocks: 156.247.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7215 (0x1c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:59:35 2023 GMT
Not After : Oct 23 09:59:35 2023 GMT
Subject: CN=63f7390b-6dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:e9:cd:90:db:80:06:25:f1:80:47:12:0b:
ed:74:13:3e:30:4b:09:48:b7:d6:26:c2:9e:b7:76:
32:9c:40:34:14:c0:70:d8:24:d0:22:29:d0:e7:b6:
05:8e:d2:70:79:b7:bc:d0:bc:f1:ec:2b:13:71:cf:
fd:9a:38:6d:11:70:35:d3:63:be:94:19:e6:aa:47:
d7:b4:a4:7e:69:19:7d:28:cc:e2:64:26:4b:bc:56:
81:1c:30:6a:18:80:c1:ad:29:db:44:0b:49:87:c1:
69:73:93:d1:0b:26:5e:04:f7:52:f1:a9:d5:79:c5:
3f:2c:64:db:89:e9:84:15:13:0e:68:9e:03:0d:3d:
d7:00:a9:b8:94:4e:dc:f6:bb:79:9a:22:60:8e:b7:
65:ba:61:a1:27:1d:a7:e4:7c:bf:2e:b5:30:08:27:
fb:b0:e8:8d:85:fa:6c:a7:b2:62:55:4e:a6:63:ef:
42:fb:9a:b2:3a:ca:71:eb:9e:34:94:aa:9a:3d:56:
43:3b:77:64:e4:68:9a:87:4b:20:32:eb:e7:c1:6d:
7c:75:45:f1:21:7a:5a:ad:6a:a7:1a:88:2c:11:e2:
49:19:35:e2:7e:e1:2a:01:62:19:d0:3e:b4:84:a4:
3f:05:2b:d0:08:6d:80:a8:f2:a4:ff:e9:a3:23:7d:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:27:4E:07:0D:42:62:B3:7E:48:9C:96:8F:23:33:A0:12:E1:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8AC8336B36011EDB4714FAFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b7:dd:6a:c6:61:36:3a:85:61:88:0b:8d:98:e4:4a:6c:ca:
b7:58:e7:9f:c9:b9:80:77:98:0a:c6:ab:d1:3a:24:e4:9a:06:
b2:04:a4:82:5c:d4:c3:c9:20:94:dc:f1:f3:1e:2e:9f:26:b8:
12:73:4c:b2:f2:ab:a0:ec:80:ee:c1:68:f8:b2:c0:45:86:1b:
5d:1c:2b:9a:b3:29:ee:9f:d3:92:62:0b:fd:c9:3e:fb:e5:d0:
41:f1:93:78:c5:ff:d9:f1:cf:99:cf:1d:ee:32:a3:21:6e:6f:
0f:98:ac:dc:6e:45:95:35:3f:0d:12:de:1a:98:5b:6b:2e:a3:
f2:5e:88:9c:11:d9:ed:31:e8:6d:9a:70:e8:dc:87:98:8d:df:
32:ae:dd:60:a3:de:ca:e0:73:cd:e9:57:d0:6c:e7:33:af:af:
07:2d:e4:49:14:f3:e5:d0:89:ff:37:4c:5a:38:e4:62:aa:06:
e0:0f:2a:d7:a4:6d:4c:e0:7c:85:fe:9e:24:8b:fb:d3:e5:66:
c0:4f:ef:c9:52:d9:70:c0:37:de:a6:1a:6d:5a:fc:9b:68:ce:
d8:0c:d5:a9:a6:d3:35:57:3b:c1:8d:0d:e4:e9:c7:f7:2c:c9:
a8:5d:89:f2:1d:e5:c2:e8:e8:7d:01:39:53:95:2a:6c:3d:26:
a0:9e:60:64
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHC8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzAyMjMwOTU5MzVaFw0yMzEwMjMwOTU5MzVaMBgxFjAU
BgNVBAMMDTYzZjczOTBiLTZkYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9AOnNkNuABiXxgEcSC+10Ez4wSwlIt9Ymwp63djKcQDQUwHDYJNAiKdDn
tgWO0nB5t7zQvPHsKxNxz/2aOG0RcDXTY76UGeaqR9e0pH5pGX0ozOJkJku8VoEc
MGoYgMGtKdtEC0mHwWlzk9ELJl4E91LxqdV5xT8sZNuJ6YQVEw5ongMNPdcAqbiU
Ttz2u3maImCOt2W6YaEnHafkfL8utTAIJ/uw6I2F+mynsmJVTqZj70L7mrI6ynHr
njSUqpo9VkM7d2TkaJqHSyAy6+fBbXx1RfEhelqtaqcaiCwR4kkZNeJ+4SoBYhnQ
PrSEpD8FK9AIbYCo8qT/6aMjfbuvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU6SEn
TgcNQmKzfkiclo8jM6AS4bgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M4QUM4MzM2QjM2MDExRURCNDcxNEZBRkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9wowDQYJKoZIhvcNAQELBQAD
ggEBAE633WrGYTY6hWGIC42Y5EpsyrdY55/JuYB3mArGq9E6JOSaBrIEpIJc1MPJ
IJTc8fMeLp8muBJzTLLyq6DsgO7BaPiywEWGG10cK5qzKe6f05JiC/3JPvvl0EHx
k3jF/9nxz5nPHe4yoyFubw+YrNxuRZU1Pw0S3hqYW2suo/JeiJwR2e0x6G2acOjc
h5iN3zKu3WCj3srgc83pV9Bs5zOvrwct5EkU8+XQif83TFo45GKqBuAPKtekbUzg
fIX+niSL+9PlZsBP78lS2XDAN96mGm1a/JtoztgM1amm0zVXO8GNDeTpx/csyahd
ifId5cLo6H0BOVOVKmw9JqCeYGQ=
-----END CERTIFICATE-----
Generated at Sun May 11 15:50:28 2025 by rpki-client