Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B1B68C543311EE8426F2374AD9E6FC.roa
File: F2B1B68C543311EE8426F2374AD9E6FC.roa (raw, json)
Hash identifier: L0Y6vqt+xeXknQ00fJYLPQ3+RiFjLjjlfOk7EPbGLFc=
Subject key identifier: 11:C8:91:8F:DF:F2:C6:2A:2A:66:D2:1C:45:D3:F9:F5:C9:D1:36:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 39C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B1B68C543311EE8426F2374AD9E6FC.roa
Signing time: Sat 16 Sep 2023 01:54:19 +0000
ROA not before: Sat 16 Sep 2023 01:54:16 +0000
ROA not after: Wed 18 Oct 2023 01:54:16 +0000
asID: 174
IP address blocks: 156.243.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14793 (0x39c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 01:54:16 2023 GMT
Not After : Oct 18 01:54:16 2023 GMT
Subject: CN=65050acb-e192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:f5:18:06:ce:2b:97:ea:c7:73:cc:0c:aa:
a0:18:fc:56:61:f3:7f:c4:de:9f:f5:12:89:3b:c2:
3a:1f:88:2e:95:51:a4:6c:a0:9b:17:0f:f1:ca:56:
f4:ff:35:e2:4b:1e:78:5e:a2:f5:c2:d2:0b:df:61:
9b:19:1d:15:b7:48:5c:ec:ee:5a:58:aa:2c:c6:86:
d4:0c:4d:c7:11:a9:18:02:52:d5:f7:de:94:ba:8c:
0d:6d:fa:01:7f:76:81:fb:62:58:04:1a:cb:14:c6:
ac:35:b0:05:e2:dd:31:9c:64:53:25:9c:a2:68:d9:
f0:41:f6:1c:b8:73:ad:5c:29:e0:f1:66:50:c9:fa:
67:e4:cb:ca:9f:05:76:0c:24:5f:30:a7:9e:e7:41:
a5:b3:0f:35:73:1f:e5:f2:19:97:94:c3:c2:d2:36:
7e:61:13:63:87:d7:1e:a4:2c:53:61:1d:98:10:75:
f7:a6:d1:2e:66:28:da:21:d2:fc:45:5b:b9:48:c4:
4e:2c:40:8c:6e:99:fc:6e:93:a9:83:ec:fc:fe:1b:
2b:71:ad:a4:33:ea:d1:62:ca:1a:38:10:a2:cc:d2:
e5:88:fb:6a:44:aa:7e:f5:a0:11:fd:30:70:5b:88:
4f:f5:4a:35:70:c4:89:e9:3c:29:43:43:d0:6b:ba:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C8:91:8F:DF:F2:C6:2A:2A:66:D2:1C:45:D3:F9:F5:C9:D1:36:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B1B68C543311EE8426F2374AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:bd:c9:f2:1d:9a:98:e0:9d:c8:45:e8:59:5d:35:93:4f:e8:
e0:f4:10:4a:6f:c0:fd:1a:f1:2d:85:62:78:44:03:41:9b:42:
78:00:f2:cd:75:86:cd:42:3d:8e:24:a8:2f:c2:f7:c9:6b:49:
83:e8:59:c1:19:4b:9c:24:aa:f0:0e:48:91:1e:e4:74:90:3f:
90:67:ad:75:af:1e:f5:25:1b:06:45:78:54:3c:0b:26:18:b4:
26:2a:7f:25:44:11:75:7b:d7:94:74:c1:f1:75:b8:0c:88:e3:
73:3f:b3:6a:ec:9c:29:88:5b:49:ba:a5:f8:68:26:35:65:e7:
90:1a:f9:58:31:21:3c:57:37:f3:37:c1:d4:82:b7:e8:49:4a:
78:e5:1b:84:9a:39:39:d0:8a:70:ab:46:3d:aa:6d:99:ca:ab:
79:79:ff:9c:b3:24:04:53:2f:fa:bd:32:f6:b0:66:70:24:28:
b3:59:50:fe:80:63:f2:06:11:cd:a9:18:c1:ba:99:15:5f:ab:
19:6c:b0:8b:27:23:df:4c:5c:5f:03:9e:6f:43:f5:93:48:af:
fc:33:81:c2:e0:6c:f6:50:10:f1:a3:5a:e8:18:2f:55:56:0b:
94:b9:b2:00:62:94:a6:53:e1:b0:db:5a:4c:6a:da:00:78:fe:
e5:38:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:53:18 2025 by rpki-client