Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C968318483CC11EEAC4622154AD9E6FC.roa
File: C968318483CC11EEAC4622154AD9E6FC.roa (raw, json)
Hash identifier: Qu1P3iMn8J7tDcNmC5gYxfeSOZTUy0ERiAc/uKzDGQU=
Subject key identifier: 65:26:C0:F0:0A:90:BD:42:FA:C4:1F:65:CB:66:9E:4D:EF:7C:69:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 493D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C968318483CC11EEAC4622154AD9E6FC.roa
Signing time: Wed 15 Nov 2023 15:36:47 +0000
ROA not before: Wed 15 Nov 2023 15:36:44 +0000
ROA not after: Tue 12 Nov 2024 15:36:44 +0000
asID: 64267
IP address blocks: 156.227.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18749 (0x493d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 15:36:44 2023 GMT
Not After : Nov 12 15:36:44 2024 GMT
Subject: CN=6554e58f-ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:79:f3:0a:5d:4d:49:6f:3b:2e:fb:e1:e1:
ea:cf:ff:69:4d:79:7f:2e:c5:02:c9:4b:69:60:57:
15:2e:c9:51:03:73:b4:fc:53:c6:c4:3b:a5:12:f5:
18:56:b8:24:98:70:9a:e4:e4:c3:70:cd:9d:72:1b:
44:d6:7d:e6:5e:19:f6:fe:74:03:56:5a:ed:14:1b:
b7:9f:8b:1c:09:b8:a6:57:40:1a:e6:02:69:4b:19:
a2:8e:b6:c7:a8:45:bf:6d:d1:e0:01:d7:5a:e6:93:
eb:cf:92:d4:11:4f:a7:87:df:00:4f:43:e5:7d:02:
97:8c:61:e5:12:52:cb:d2:1c:eb:84:27:d2:2e:96:
85:20:d3:4e:08:bd:c9:e3:34:6b:e3:14:02:e3:07:
89:73:86:f3:3b:3c:d9:56:8a:35:8a:b6:e8:5c:6c:
8b:f3:9b:4a:83:ba:7e:34:d7:f7:08:46:37:fe:22:
58:1d:06:db:26:fb:41:74:0e:29:38:ff:14:8c:77:
d0:36:47:e6:87:16:51:7d:d0:e7:f1:64:1d:6b:5a:
36:8e:e5:b7:2d:c7:ae:32:3c:c5:3a:a9:ea:f8:1c:
e2:40:ad:41:13:ca:ef:da:d7:3b:e2:f3:b9:99:e5:
44:72:e2:7a:b8:7f:09:e1:33:8b:75:ed:c7:2d:31:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:C0:F0:0A:90:BD:42:FA:C4:1F:65:CB:66:9E:4D:EF:7C:69:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C968318483CC11EEAC4622154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.11.0/24
Signature Algorithm: sha256WithRSAEncryption
27:82:53:41:ff:52:94:e3:3c:a6:94:d6:b0:78:8e:ab:0d:5c:
01:97:4d:d5:ae:d1:f9:29:80:b6:fe:b2:56:3f:ef:f4:bf:82:
05:c8:45:07:f1:5c:71:4d:79:d2:20:c9:8f:26:fa:c5:60:21:
d8:d7:29:cd:a6:41:b0:de:57:d3:de:ec:ac:d0:12:78:d1:31:
93:34:88:fc:95:7e:61:68:51:48:0c:73:e4:7b:f2:34:3f:46:
2f:56:ab:7a:a9:7b:15:97:36:d6:d1:9a:d6:ef:92:49:eb:bd:
e5:d1:3a:52:a3:18:19:64:39:f6:a9:00:f3:dc:08:05:4f:69:
d5:04:86:2a:f1:85:07:3f:02:d5:4c:a6:c7:1e:9a:5a:c4:25:
38:d9:8d:47:f8:33:d0:ec:a0:7b:d3:67:55:28:86:e8:58:2f:
09:6f:2c:7d:04:50:6a:a2:eb:28:34:03:2e:bf:ab:6b:8f:5b:
85:fe:78:20:88:1c:ee:8d:2c:82:2a:0e:8e:53:51:b1:a6:71:
e4:63:77:1d:3d:ca:c0:19:d5:55:5d:1b:f9:0b:6e:e2:c4:72:
8d:32:ac:88:41:d5:27:ef:2e:e4:7e:c3:d8:a9:1c:34:e4:9f:
de:6c:30:bf:83:bd:8d:06:b2:93:53:a5:e7:22:c0:9b:b7:05:
95:98:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:24:51 2025 by rpki-client