Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0001AD8F91011ED9DBF70834AD9E6FC.roa
File: F0001AD8F91011ED9DBF70834AD9E6FC.roa (raw, json)
Hash identifier: 5u0HrmZrPvKbU6CmFVUsKM2jtzT6vCzeBDoutN4Jm+c=
Subject key identifier: 57:9C:98:B6:29:FB:9A:3C:DA:89:CA:FA:90:E3:DF:DF:B4:B4:89:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2686
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0001AD8F91011ED9DBF70834AD9E6FC.roa
Signing time: Tue 23 May 2023 02:24:26 +0000
ROA not before: Tue 23 May 2023 02:24:22 +0000
ROA not after: Wed 10 Jan 2024 02:24:22 +0000
asID: 64267
IP address blocks: 156.248.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9862 (0x2686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:24:22 2023 GMT
Not After : Jan 10 02:24:22 2024 GMT
Subject: CN=646c23da-4d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:a7:e6:31:be:76:88:66:84:ba:c9:ea:3c:
50:f3:77:1d:15:f0:10:bc:b0:c7:7e:f2:30:f1:e3:
66:0e:a0:55:3e:e7:1c:46:bf:b8:08:b9:61:1c:fa:
18:06:f6:0b:b8:87:6c:be:1f:11:26:7b:9b:8d:d1:
9a:0e:46:e7:04:e0:f4:8b:84:12:3d:64:b7:1e:aa:
1b:00:34:85:a0:29:5d:b3:68:39:eb:5a:a9:26:3f:
1b:1c:72:ac:45:a9:29:fe:3c:75:9e:27:c6:ee:28:
75:99:8e:2d:0c:3d:3a:2c:1c:31:68:53:df:58:2f:
f9:25:3c:03:8a:1f:d8:fc:74:c8:81:f5:f2:e8:e4:
47:66:d1:80:ae:62:a7:38:61:69:2e:c9:83:42:93:
ff:3a:e7:44:8e:57:93:00:a1:ec:58:09:c5:f9:cf:
7a:e7:04:9f:c2:06:8c:1c:9a:ec:41:bd:79:d8:e6:
3c:46:ed:3d:d8:a5:e2:4e:65:1d:f3:1d:2f:00:9a:
e5:24:1e:e5:97:96:e8:a1:df:1e:cc:1b:59:ee:b7:
4a:0b:51:6e:74:ae:a1:72:63:4c:f6:4d:53:ba:08:
5e:a8:1c:a5:69:f1:bc:14:6b:4b:28:a7:37:fc:38:
a0:07:61:67:1a:0c:55:c6:7e:78:55:71:0f:c3:6a:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:98:B6:29:FB:9A:3C:DA:89:CA:FA:90:E3:DF:DF:B4:B4:89:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0001AD8F91011ED9DBF70834AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.70.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c0:4f:e9:4f:01:7e:c2:b6:66:c8:7c:9b:8b:16:1d:bb:fc:
cd:d8:21:08:e9:9c:08:33:40:7f:19:d8:e2:93:1e:0a:67:b0:
68:43:e1:94:3e:39:9d:5d:bf:49:98:53:a1:e1:c5:99:bb:1c:
58:25:42:e4:c8:bd:c4:6f:a7:8c:a5:4a:82:1d:c2:67:39:78:
21:c3:a2:b8:67:6d:d4:39:e3:86:57:9a:55:9a:24:31:3b:a9:
3e:b8:84:fc:c7:97:ca:57:26:bc:c2:29:a7:0d:9b:b0:1b:9d:
e2:49:c0:f8:87:b0:85:b4:3d:a8:39:ca:0f:13:67:d6:6e:2d:
cb:36:ca:39:c2:9d:e8:29:11:9b:53:0e:87:01:42:bb:c5:c9:
a7:29:f7:1e:f1:8b:79:03:00:1c:4c:57:c4:21:f2:cf:20:01:
b2:6a:41:1a:73:4b:60:7f:45:6e:67:0c:91:b8:2b:4c:59:21:
ac:6b:6b:68:26:f9:7a:54:72:9e:39:8c:3b:d1:42:bd:f7:4c:
e3:8e:8e:68:fd:8c:ab:b8:b6:79:36:c7:92:8b:55:0f:4e:00:
52:57:5c:95:68:55:ab:05:e1:c2:6b:d6:74:00:f3:70:7c:6a:
e9:c2:83:84:aa:a2:9d:cb:c8:7f:66:10:97:e6:73:83:11:d8:
de:b2:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:39:16 2025 by rpki-client