Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA9BFF28F5DE11EFB3F33B75762E951A.roa
File: DA9BFF28F5DE11EFB3F33B75762E951A.roa (raw, json)
Hash identifier: 8S/Q5czuAKURuev4Vax4NI0es/rzfvt0zPEoMP4GObM=
Subject key identifier: 1D:07:AB:E8:59:B2:3E:A3:5D:F6:84:DF:01:50:2E:99:1B:40:5C:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA9BFF28F5DE11EFB3F33B75762E951A.roa
Signing time: Fri 28 Feb 2025 14:18:17 +0000
ROA not before: Fri 28 Feb 2025 14:18:13 +0000
ROA not after: Fri 04 Apr 2025 14:18:13 +0000
asID: 200019
IP address blocks: 156.229.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81464 (0x13e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:18:13 2025 GMT
Not After : Apr 4 14:18:13 2025 GMT
Subject: CN=67c1c5a9-dd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:61:cf:f5:5e:9b:35:f3:73:2b:66:76:e2:
04:2f:04:e0:2a:24:31:d2:fa:90:7c:e8:9d:6c:cc:
2f:a9:78:8d:0e:f3:b8:c2:b7:83:9d:12:9f:b6:cb:
72:0d:34:aa:9d:34:1d:70:28:ee:af:4c:c9:ff:c5:
2e:f2:b3:ee:9f:e8:5b:bd:df:f6:3f:be:6b:08:83:
1d:eb:6f:92:45:ba:21:99:14:48:36:40:0d:72:d0:
17:67:5a:65:5e:4f:02:7a:a9:cb:29:ab:52:c6:a7:
81:b0:d2:0e:97:54:b6:d0:aa:df:34:47:15:89:b7:
2e:f9:85:ee:ac:6d:aa:df:ec:a0:41:fb:3b:a5:39:
86:f0:f0:12:62:a4:f7:38:78:20:ea:fb:49:e9:e7:
96:06:fa:c7:52:1f:f6:49:e5:98:a1:25:8d:7f:ab:
a7:df:73:f2:cb:88:ca:2e:60:f5:37:d0:09:e6:78:
3c:09:f5:a9:a6:43:37:38:ad:46:af:74:34:d8:5d:
9a:2e:25:e9:cd:c7:61:98:fc:00:e6:03:88:dd:15:
a0:2b:93:f7:73:c6:a2:4f:9d:9a:4a:c2:3d:41:ff:
43:e5:bb:69:48:01:64:af:a6:5b:cd:25:3e:94:8f:
a3:f4:2b:da:b0:6a:37:7e:b9:b9:00:f3:03:c7:ec:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:AB:E8:59:B2:3E:A3:5D:F6:84:DF:01:50:2E:99:1B:40:5C:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA9BFF28F5DE11EFB3F33B75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.229.0/24
Signature Algorithm: sha256WithRSAEncryption
94:49:1f:3c:1c:c9:bd:5e:2f:94:fd:93:1e:db:77:a2:4a:f2:
7e:3b:98:28:92:b4:f9:ac:0d:04:10:2c:66:31:b1:85:3f:30:
86:61:30:e6:d8:10:b2:e6:88:a1:39:be:3e:f5:ba:25:dc:d4:
8d:56:85:82:4a:e0:72:ca:d9:30:c3:65:5a:4a:24:db:a7:97:
39:e6:cc:9f:70:6f:83:20:40:85:ae:7b:77:7c:ec:c6:5e:1d:
3e:1a:2c:fe:ce:95:2c:de:c8:a4:be:04:61:80:cc:0e:b2:28:
70:07:68:55:1a:c4:3e:1e:a4:44:da:6a:59:e5:17:79:c7:f9:
37:bf:86:fd:1c:f3:d2:9d:cc:34:c8:bf:ac:0e:64:49:0f:a7:
ec:15:09:71:b0:ed:37:a0:e1:8e:96:6c:ca:ee:74:10:0e:9f:
a6:30:65:27:03:ba:12:b1:99:72:ab:46:99:d2:03:e6:d4:28:
8b:53:b6:22:b6:2f:a5:77:a7:31:29:1e:97:9f:5f:70:6e:25:
57:97:0b:89:f2:95:72:3d:0f:86:47:78:d7:6a:e4:fa:ed:cd:
0d:5f:7a:49:9c:31:d4:f4:e5:42:4d:fd:82:ef:9d:ab:d7:54:
fe:09:7e:46:70:2b:35:0f:e9:03:9c:18:c0:3b:8b:08:ce:8f:
59:04:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:57 2025 by rpki-client