Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA063A96B35F11EDACB097ACF1222468.roa
File: EA063A96B35F11EDACB097ACF1222468.roa (raw, json)
Hash identifier: WxO+7GxAYShOC1WPEmKl4eDKiqlNOXDW2AYQGBcxj4A=
Subject key identifier: 56:DA:9A:E6:EF:BF:E3:7D:5F:4E:77:1D:8F:B5:03:4A:82:3C:D9:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA063A96B35F11EDACB097ACF1222468.roa
Signing time: Thu 23 Feb 2023 09:53:25 +0000
ROA not before: Thu 23 Feb 2023 09:53:21 +0000
ROA not after: Mon 23 Oct 2023 09:53:21 +0000
asID: 133199
IP address blocks: 156.245.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7193 (0x1c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:53:21 2023 GMT
Not After : Oct 23 09:53:21 2023 GMT
Subject: CN=63f73795-7a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:81:10:5b:fa:4f:ad:d5:68:1e:6e:e6:c2:
39:d4:d6:ec:8d:a4:70:00:7f:aa:40:83:86:12:e6:
7f:e7:fb:83:7e:16:0f:1d:6f:a3:43:ab:da:38:d4:
65:db:55:a9:ae:a7:98:fd:fc:11:87:71:b7:e9:d4:
c8:0d:55:9e:c1:88:da:8c:3b:71:e2:ef:db:7c:a4:
bf:7c:1b:aa:f8:8f:99:27:8b:ab:67:4a:ed:dc:20:
21:41:e2:da:a7:9d:63:50:35:1a:de:f0:cb:14:7c:
06:36:56:82:f9:15:92:f9:44:f3:bf:49:bd:44:07:
5a:fc:5c:6b:f4:9c:20:7d:44:fc:2c:cc:da:fd:3d:
2e:1a:28:5e:21:15:8e:27:0c:b1:5d:2c:69:94:e5:
be:3a:7e:49:1d:ef:43:78:6a:e7:c4:32:5a:b4:69:
52:c9:b5:81:a6:9a:c6:16:23:f5:0d:dc:5e:0a:12:
3f:98:4c:5f:eb:3c:76:ea:02:fe:0d:4e:aa:56:f5:
f6:4d:9a:d3:bb:48:5d:0a:e5:2d:81:6c:45:19:46:
b6:b7:20:55:b4:72:3f:ad:53:83:98:c1:da:61:b6:
5e:c4:85:36:04:b5:36:8c:f3:0f:0d:54:d7:9c:13:
8b:25:fa:31:e3:53:7e:0e:c6:b4:a4:a7:1b:0e:4c:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:9A:E6:EF:BF:E3:7D:5F:4E:77:1D:8F:B5:03:4A:82:3C:D9:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA063A96B35F11EDACB097ACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5f:64:9d:f1:93:b2:9e:7a:81:4e:2d:e2:4a:aa:8a:83:31:
6b:40:93:8d:07:f8:81:89:7b:fd:53:f7:0e:b3:d4:36:df:31:
78:61:53:fa:df:16:7c:1f:11:ca:b2:c8:08:c1:6b:0d:bb:47:
a5:3f:ff:36:aa:f3:25:d7:ed:7c:1c:82:ac:fc:0b:bb:d5:47:
81:e1:c2:e8:cc:4a:d4:40:bc:85:2d:87:2c:da:2a:09:e2:5a:
70:3e:5e:4c:a2:2e:32:b4:7d:86:bc:6e:a8:80:60:66:f7:3b:
8d:1e:52:0f:d8:13:04:e8:74:31:ef:af:e4:38:47:02:4e:81:
e9:06:af:cd:68:26:6c:50:1f:1c:fe:e4:d1:6e:45:57:76:31:
99:c6:d4:98:b6:43:42:c2:c0:5d:ad:a1:d0:d0:51:2f:c9:79:
66:49:7e:3c:b6:ca:be:d6:9c:23:ee:1e:bd:92:7e:59:43:0b:
48:80:e7:f7:c6:23:1c:17:65:ac:e6:69:94:bf:9f:97:91:03:
b6:29:43:7b:14:bd:e3:5c:18:55:37:e3:95:7e:ec:91:01:f6:
ac:52:04:c5:e5:0e:b2:9d:de:c1:02:9c:bb:50:74:fb:15:9d:
2d:1c:82:65:30:de:58:8c:08:6f:ec:53:72:f1:c3:72:e6:54:
22:6f:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:58 2025 by rpki-client