Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B2A736F5CE11EFAC8B0A87762E951A.roa
File: E1B2A736F5CE11EFAC8B0A87762E951A.roa (raw, json)
Hash identifier: ELvBPfvE5UpLnayXGHiNaxCQJblKxCh+wLW6CQKn3UM=
Subject key identifier: 84:4B:06:5D:DE:D3:77:BB:FE:BE:76:2B:3F:C8:B9:FE:60:3A:88:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B2A736F5CE11EFAC8B0A87762E951A.roa
Signing time: Fri 28 Feb 2025 12:23:57 +0000
ROA not before: Fri 28 Feb 2025 12:23:53 +0000
ROA not after: Sun 30 Mar 2025 12:23:53 +0000
asID: 203020
IP address blocks: 156.253.200.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81284 (0x13d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:23:53 2025 GMT
Not After : Mar 30 12:23:53 2025 GMT
Subject: CN=67c1aadd-64ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:2b:d9:d4:bf:74:3c:7b:f4:d2:cb:33:0d:
d1:da:2b:b1:a7:01:b3:94:a0:25:3e:62:f2:1e:1e:
6a:f9:c1:19:d6:6c:72:34:a2:42:4a:ae:00:3b:bf:
ba:b9:60:72:35:c6:cb:78:14:20:6b:ca:15:6a:2d:
cb:63:4d:14:3b:6f:2b:e7:98:2a:0a:0a:75:53:0a:
8a:0f:3a:9b:97:1b:3f:a0:96:e5:c8:95:bf:80:ee:
4d:10:c0:72:ff:39:04:b2:9b:7e:08:fd:ab:45:fe:
64:ab:d5:a1:38:fe:5f:51:b7:45:2d:67:c4:88:6e:
0a:11:dd:f0:07:f3:eb:fb:ef:8a:c9:83:ef:cf:13:
c4:04:44:49:36:1c:02:dc:0e:41:27:d8:ef:91:31:
03:74:1f:f6:75:4a:36:86:9f:cd:26:c3:1c:71:2e:
4c:aa:cd:85:46:bf:3e:19:33:b6:a8:c8:f6:8c:ab:
f8:18:0e:73:f0:12:41:a0:b0:6c:a2:ce:b1:2e:4d:
0c:5a:29:fc:02:14:ce:e4:1e:bf:cd:69:cf:7e:4e:
8f:1b:0f:c7:88:b7:ea:59:d6:b6:3a:27:0b:03:a9:
01:24:bc:08:03:15:de:13:14:0c:12:c5:ca:29:e1:
b0:aa:0a:44:29:84:0d:3a:d3:48:91:ba:5c:08:e0:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:06:5D:DE:D3:77:BB:FE:BE:76:2B:3F:C8:B9:FE:60:3A:88:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B2A736F5CE11EFAC8B0A87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.200.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:fc:89:cd:c1:10:49:e6:0d:d2:66:0f:42:83:cd:80:bf:41:
10:41:26:cd:5c:08:18:e8:35:d9:b6:6d:28:d4:b8:95:6b:c5:
fb:e7:77:a4:4d:26:eb:8a:21:b8:69:cf:24:af:11:2a:ba:a3:
ab:b2:08:ed:17:35:d6:88:d8:68:97:20:10:ba:cb:55:2e:63:
9c:db:59:d6:4a:af:bb:de:66:ca:61:9a:08:be:06:e5:98:30:
86:fe:be:e5:65:d9:12:b8:e7:97:29:4f:48:c9:17:74:e0:65:
27:96:d8:07:a6:66:b0:c9:72:d2:d4:22:d4:3f:88:30:16:af:
f2:5f:c4:81:df:33:3f:f0:13:84:5a:49:a1:9a:a0:81:56:0c:
72:8a:0c:5b:42:da:7b:7b:e9:f1:6b:cb:8d:61:d9:26:2d:c0:
f1:be:50:b9:ab:5b:ff:2a:d3:2f:ef:01:24:62:cd:66:90:5a:
c7:3c:4c:71:6d:c9:29:b3:f1:6e:61:3b:d3:1d:c9:4c:f1:a5:
6d:af:e4:ce:41:7d:6d:72:02:0e:57:fd:51:48:65:42:1e:db:
d1:57:6e:fd:97:43:ca:70:93:fa:ce:f4:62:7e:7b:f3:85:21:
64:2a:c5:48:b1:3d:cf:4a:e8:a9:99:52:33:a1:f5:fe:09:75:
5f:2e:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:12 2025 by rpki-client