Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA190E4B35F11EDAE6F45ACF1222468.roa
File: CDA190E4B35F11EDAE6F45ACF1222468.roa (raw, json)
Hash identifier: DTc2oB3V1OGc+5nfkrxcqlxQc/4fLjFSGbewnSTCW0k=
Subject key identifier: DF:F9:AE:9E:F1:51:31:78:2E:32:32:6B:BB:7C:D6:3B:F6:03:C6:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA190E4B35F11EDAE6F45ACF1222468.roa
Signing time: Thu 23 Feb 2023 09:52:37 +0000
ROA not before: Thu 23 Feb 2023 09:52:34 +0000
ROA not after: Mon 23 Oct 2023 09:52:34 +0000
asID: 133199
IP address blocks: 156.245.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7187 (0x1c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:52:34 2023 GMT
Not After : Oct 23 09:52:34 2023 GMT
Subject: CN=63f73765-14cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:d8:cc:90:b5:48:c8:b7:36:fd:9e:93:3d:
4e:10:6e:72:9e:e9:9f:8d:b4:ca:41:b8:06:72:13:
6c:aa:71:c2:fa:0e:0a:f0:6d:99:ff:ca:2a:4d:a0:
b3:b8:97:23:90:1a:f2:8e:d8:c9:80:48:cd:81:d3:
d0:b8:56:e2:87:9a:aa:24:50:90:77:88:62:ed:b8:
d3:6c:67:14:01:d8:87:0a:80:c8:b0:ec:b1:8b:1c:
08:21:29:af:45:ff:47:a4:37:95:bc:bd:44:f2:2f:
ce:01:d0:77:42:e3:4d:33:69:27:2f:db:4b:81:34:
d5:f6:31:a8:20:81:5b:2f:22:0e:34:48:e1:68:26:
9d:d6:4c:ac:71:e4:e5:ca:04:56:ec:da:89:37:f8:
5b:a1:0a:30:6a:05:45:46:41:4e:78:0f:08:3a:db:
df:40:c5:61:c8:40:ee:4e:f8:85:2b:4c:06:7b:89:
fa:97:96:cf:5b:79:04:72:d5:72:db:31:b0:2f:4e:
57:3b:d9:12:2e:85:09:4c:1a:e8:ce:97:6b:af:e6:
3c:10:e7:cc:71:b2:12:6b:04:7f:7f:33:fe:43:9c:
7f:63:f5:42:a0:1e:fe:d8:e3:da:53:46:a7:d4:ed:
e0:e9:bd:4d:1b:57:09:bf:92:11:df:27:3e:63:04:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F9:AE:9E:F1:51:31:78:2E:32:32:6B:BB:7C:D6:3B:F6:03:C6:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA190E4B35F11EDAE6F45ACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bb:4c:09:60:ba:95:be:aa:47:9c:43:f6:88:60:2c:58:b2:
f8:0c:d3:3c:9c:2a:23:68:ea:d4:7d:01:11:71:1f:83:eb:ad:
12:cc:0c:35:98:dd:02:d5:ca:f1:5b:1a:20:01:d9:58:f8:ce:
59:0e:34:da:7f:94:aa:2f:2d:5b:6a:df:81:6d:5e:9d:3b:14:
6b:36:36:b4:35:3e:d3:81:0c:46:75:67:7e:4d:21:eb:6a:f2:
8c:b2:ce:47:34:d3:a2:8f:03:ee:65:f6:cb:00:7a:13:af:78:
3f:cf:7c:f1:54:e7:06:7d:59:26:e3:8e:65:bb:2a:2a:0f:a8:
f4:80:1e:ad:0a:ea:b5:ff:63:f1:f3:6c:ac:30:b9:4e:35:aa:
c6:f1:6c:2b:e1:7e:fc:87:63:4f:41:99:b1:ad:53:e7:99:08:
5d:66:ca:d9:af:60:d5:7d:ce:ab:7f:87:92:79:8f:87:b0:9e:
43:b8:cf:ea:6a:26:c0:d1:01:df:1c:4d:b8:ae:0a:4a:ee:b7:
b7:d9:4c:a3:b5:f5:d0:24:0a:f2:41:a8:bb:43:db:f2:55:48:
ec:07:0d:60:20:f7:73:86:ae:8a:15:0d:42:a5:01:76:9e:83:
3d:6a:2d:4c:52:f4:f4:b4:e7:ca:24:15:e8:99:d2:51:2d:16:
9f:c0:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:58:47 2025 by rpki-client