Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB115B0B36011EDA79EC1AFF1222468.roa
File: EEB115B0B36011EDA79EC1AFF1222468.roa (raw, json)
Hash identifier: BmKcPoaIyj9y6DEwUvwW6QY5wFTKUBdAxZvCwqiPqQM=
Subject key identifier: E1:E5:54:75:6D:A2:AB:E6:69:B4:BA:77:45:29:34:13:A0:09:70:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1C33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB115B0B36011EDA79EC1AFF1222468.roa
Signing time: Thu 23 Feb 2023 10:00:42 +0000
ROA not before: Thu 23 Feb 2023 10:00:38 +0000
ROA not after: Mon 23 Oct 2023 10:00:38 +0000
asID: 133199
IP address blocks: 156.247.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7219 (0x1c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 10:00:38 2023 GMT
Not After : Oct 23 10:00:38 2023 GMT
Subject: CN=63f7394a-abb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:11:1f:d3:da:e7:e6:23:d8:c5:ce:9b:40:
81:b9:60:e7:06:c3:b8:b4:f3:79:71:34:ef:03:e0:
3e:03:89:e4:1e:c1:08:17:1e:32:05:2e:b3:86:8d:
b7:40:ed:e5:b5:74:f5:da:83:03:f9:d9:47:b1:5d:
f0:0e:c9:7c:06:93:ec:2f:1b:da:e0:11:4a:e0:d6:
2d:c5:5d:c2:dd:01:44:48:6a:29:97:6f:08:d7:f0:
50:6f:d9:58:ce:5c:08:5b:59:d3:42:06:55:38:18:
1c:97:41:e3:4f:e9:03:6e:ef:f5:f0:68:55:dc:b7:
75:19:ff:70:0c:f3:e1:cc:35:cf:ae:16:03:50:82:
1f:64:70:43:72:84:37:da:5f:66:13:7d:70:fb:94:
b8:e3:ef:94:0d:38:fd:11:67:48:95:d7:c9:97:7f:
44:c1:6c:ea:3d:64:24:a1:41:0f:d0:e8:14:32:d3:
9b:00:29:54:77:c7:5b:5d:6b:72:4a:45:2f:2f:ad:
20:1e:a8:bd:ec:bf:2a:13:7c:2d:97:1c:26:82:15:
1d:9a:7a:55:d7:64:79:e9:9c:f2:54:8e:01:47:f0:
52:fe:05:3d:32:e7:a6:13:f9:31:ef:7b:85:f3:ec:
d3:8e:f0:d5:78:84:0c:46:6a:ad:d5:66:56:cb:bd:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E5:54:75:6D:A2:AB:E6:69:B4:BA:77:45:29:34:13:A0:09:70:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB115B0B36011EDA79EC1AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.9.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7c:15:54:f0:cc:9d:39:95:0d:12:f3:68:d8:14:2e:02:c1:
c8:41:83:41:14:e3:8b:c0:70:95:81:96:d8:86:ac:f7:4f:29:
23:86:1f:31:1f:56:88:63:07:35:46:d8:40:8f:20:aa:10:d4:
eb:1f:6f:31:1a:41:26:49:9a:78:1c:bb:8f:1d:68:93:75:b1:
dc:47:ca:c2:dc:82:b9:c8:d6:af:48:d1:39:11:f8:8f:04:a2:
67:8f:97:a4:84:85:cc:9f:72:9f:e1:d8:26:8b:75:5a:29:06:
6d:51:04:24:76:89:f3:d4:02:55:86:0a:7d:96:b8:13:6a:49:
71:c8:96:f0:29:62:ba:13:90:02:71:17:d1:1b:30:c2:d9:17:
d1:b6:be:88:fc:87:85:6f:4b:db:ad:28:d8:8d:eb:ac:a3:e9:
f8:b7:61:7c:9c:2c:9f:48:2b:b8:ea:07:33:ff:a8:7d:c8:62:
a3:ce:1e:4a:17:82:61:c0:56:36:62:b7:1c:71:d5:aa:ae:3a:
69:61:4d:94:d8:09:65:20:d5:ed:9e:b8:8f:3d:26:c6:99:fc:
7e:a3:a4:eb:77:02:51:75:ea:8c:12:c3:bb:c7:a1:bf:11:04:
53:e3:38:13:d0:23:b9:c2:b3:b5:58:6a:8b:b5:01:4d:61:09:
cc:6d:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:50:28 2025 by rpki-client