Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E952291A544B11EE94B20F8B4AD9E6FC.roa
File: E952291A544B11EE94B20F8B4AD9E6FC.roa (raw, json)
Hash identifier: ATeqV0yvszgywMTbxXLG+T5nN6SftsTQjDb0eq8+Mgw=
Subject key identifier: F1:06:26:17:29:02:28:35:80:55:16:56:F5:F1:E0:C1:91:2E:EC:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E952291A544B11EE94B20F8B4AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:45:51 +0000
ROA not before: Sun 01 Oct 2023 04:45:48 +0000
ROA not after: Thu 08 Aug 2024 04:45:48 +0000
asID: 133199
IP address blocks: 156.245.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14957 (0x3a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:45:48 2023 GMT
Not After : Aug 8 04:45:48 2024 GMT
Subject: CN=650532ff-4b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:b6:46:35:5a:28:bf:27:78:e0:10:94:4a:
98:f3:95:c2:8e:47:5a:30:82:c7:b4:f6:47:df:29:
27:51:72:66:8a:8e:80:18:e4:39:cc:af:e0:1d:2d:
c4:55:1f:be:30:ca:23:4b:f0:30:51:fe:de:66:0b:
53:30:55:34:a2:b3:c6:a6:56:db:8f:a3:c2:8d:ff:
7b:66:bd:27:aa:7d:29:07:c7:e5:14:dc:1b:be:47:
69:f6:75:d7:38:02:9e:89:5b:3e:d1:d2:e2:2f:e4:
30:4d:7a:23:5a:b4:b0:14:3c:17:c7:80:da:45:8b:
2f:86:87:89:60:60:d5:f7:1d:44:21:e1:15:af:3a:
d7:26:39:48:e5:a2:01:7b:10:69:81:9d:5f:77:85:
27:31:cd:19:e1:0e:39:68:23:71:ce:fd:51:f8:f0:
ba:4a:9b:f8:eb:7d:e3:b9:20:ef:29:60:5b:e4:e1:
33:c0:1d:0d:01:ad:17:2d:08:67:44:9a:7c:7f:11:
0e:8a:77:dd:c6:fe:9b:1f:39:17:77:2c:6a:87:8d:
99:91:1b:4e:65:20:49:75:35:9d:7f:be:57:58:a3:
10:af:67:c1:34:84:2c:80:94:77:1b:6a:0b:c2:e7:
a0:d9:4e:25:96:81:f8:7d:05:5b:a8:1a:b3:5a:3d:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:26:17:29:02:28:35:80:55:16:56:F5:F1:E0:C1:91:2E:EC:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E952291A544B11EE94B20F8B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.31.0/24
Signature Algorithm: sha256WithRSAEncryption
65:19:45:fc:38:9b:d9:a0:a4:22:c1:6d:5e:e4:7f:f1:c2:63:
f6:34:f2:0d:07:fb:5d:db:79:5f:d5:49:08:3e:30:2a:3a:5d:
84:3b:70:46:d4:6f:92:d6:bb:17:f6:83:88:18:fc:16:a4:07:
b6:55:f6:15:c8:ba:73:b9:4e:c7:bb:ee:65:2d:07:38:2d:82:
bc:58:e4:fa:8c:7b:4a:a7:4d:eb:55:b3:27:89:e6:6b:b2:f8:
d7:99:a2:a4:5c:fc:02:f9:d3:12:d9:51:62:bc:ac:85:77:06:
0c:fb:5f:33:1e:7d:3a:35:35:a5:3f:d3:a9:b5:a1:af:91:05:
be:52:37:b7:ea:23:6f:c9:91:c4:15:99:9e:0d:92:8a:6e:ca:
2c:b3:1c:c7:e4:67:39:59:2c:6b:4f:3c:f9:51:2b:20:19:65:
21:01:3c:9b:4d:26:f9:83:ae:96:a7:7c:21:07:7a:97:90:00:
c5:66:1d:1e:36:da:c5:7c:60:28:04:34:75:cd:14:ab:23:1a:
8c:b9:c1:19:d8:ce:23:35:82:24:b8:fb:10:a1:c5:34:ac:79:
8a:44:a1:04:d4:80:a1:56:99:43:af:46:62:44:6c:b2:16:54:
ef:61:51:0f:28:50:e4:68:0d:53:50:6e:85:be:6e:2f:03:6a:
a0:49:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:13:33 2025 by rpki-client