Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB429DEA7E0411EEBFB9991A4AD9E6FC.roa
File: DB429DEA7E0411EEBFB9991A4AD9E6FC.roa (raw, json)
Hash identifier: ZMNQGlFs2AxBdi80YzHTvZQIBdDY9bCyz+NUiDCj60A=
Subject key identifier: EB:8B:3C:39:21:A5:A6:E5:20:B4:09:65:9B:03:4C:31:AB:0B:E2:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB429DEA7E0411EEBFB9991A4AD9E6FC.roa
Signing time: Wed 08 Nov 2023 07:03:02 +0000
ROA not before: Wed 08 Nov 2023 07:02:59 +0000
ROA not after: Tue 19 Dec 2023 07:02:59 +0000
asID: 211826
IP address blocks: 156.235.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17588 (0x44b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 8 07:02:59 2023 GMT
Not After : Dec 19 07:02:59 2023 GMT
Subject: CN=654b32a6-eb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:07:67:32:cd:3b:3e:11:8a:6a:19:29:47:
a0:47:8e:bb:10:09:20:f8:c1:65:01:8d:16:68:a8:
12:17:5c:fb:02:8c:9a:be:51:af:94:48:0e:78:a8:
79:45:91:a9:5a:d5:b7:b9:df:bb:62:fb:03:88:78:
16:30:21:09:42:dc:4b:60:fa:1e:8e:44:2f:a8:e6:
f7:29:3d:9a:7a:e8:1a:39:1c:46:23:01:e4:3a:bd:
fc:d0:89:df:65:bd:fa:4b:13:5e:2a:00:86:5b:78:
0e:7c:02:c9:58:87:47:17:da:b0:7e:32:5b:f1:26:
20:bf:9f:3c:cd:5e:b9:b9:ae:aa:c5:bf:f6:9b:09:
d8:cc:51:9e:4c:d5:f6:25:c8:da:f8:2b:ac:6e:80:
b8:ba:1d:39:2a:82:61:d5:d0:d5:56:0a:74:6c:f8:
94:75:a6:a0:e9:33:36:cd:a9:95:22:82:d8:24:e6:
cb:84:be:f0:e5:fb:eb:6f:06:f0:85:52:c9:8d:b1:
bb:b7:2a:2a:90:8a:22:18:d1:9b:cc:71:0d:71:ed:
22:61:bb:e9:1a:78:3a:a5:e6:2b:dc:e0:b9:13:a0:
22:ee:d3:84:26:9d:97:0b:8e:9c:05:e0:7c:21:fc:
05:b3:7e:b0:41:28:fd:dc:1a:11:8f:ad:38:68:b8:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:3C:39:21:A5:A6:E5:20:B4:09:65:9B:03:4C:31:AB:0B:E2:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB429DEA7E0411EEBFB9991A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.92.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c5:05:07:37:25:17:3f:bf:c8:c3:d8:c7:fd:33:34:63:19:
f8:c6:ab:d6:1b:da:b0:d7:ce:b5:13:ff:e7:36:b1:15:5d:49:
0f:8c:9a:6b:bf:3b:00:58:9c:55:bb:c3:2c:72:16:f2:ed:a2:
9b:9f:c0:be:0c:76:fd:33:00:62:00:4e:ed:7e:e4:0a:1c:be:
45:ed:b5:c1:77:ac:1f:c8:e8:37:55:3a:85:cd:b9:20:68:46:
50:e8:14:92:a6:44:4f:2d:10:37:50:fa:ee:c3:2d:66:ef:53:
66:a3:09:7a:91:80:8b:c2:57:25:d0:45:83:33:63:e0:f2:22:
55:45:96:27:9d:65:02:00:14:73:cc:70:47:41:5a:e1:ec:0d:
d5:ec:91:d0:68:ca:6f:15:d7:76:b5:96:4a:a7:89:e7:1e:67:
08:23:d2:74:fb:5f:31:3c:7a:08:5c:50:08:bc:db:d0:62:bb:
a5:58:aa:b7:08:2a:55:39:38:c2:a3:9e:be:63:91:5d:86:95:
dc:0c:08:14:a6:b4:71:5d:15:a7:8c:4d:0f:1e:0d:16:83:92:
9e:42:e9:47:90:01:99:6e:64:88:23:eb:26:9e:32:c8:c7:db:
89:0f:fc:23:8e:64:75:c7:4e:96:96:02:e6:e5:95:65:35:50:
66:3a:a5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:40:11 2025 by rpki-client