Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50DE44EF2C711EF858D64B6762E951A.roa
File: F50DE44EF2C711EF858D64B6762E951A.roa (raw, json)
Hash identifier: v/4/nUQdVwf76eeMZ4nI8AtplaewBDMDkAkJsz80hlQ=
Subject key identifier: 42:41:84:7A:DE:42:5B:21:08:72:0E:57:18:DD:20:C5:1E:06:D6:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50DE44EF2C711EF858D64B6762E951A.roa
Signing time: Mon 24 Feb 2025 15:56:50 +0000
ROA not before: Mon 24 Feb 2025 15:56:46 +0000
ROA not after: Sat 29 Mar 2025 15:56:46 +0000
asID: 203020
IP address blocks: 156.232.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76823 (0x12c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:56:46 2025 GMT
Not After : Mar 29 15:56:46 2025 GMT
Subject: CN=67bc96c1-ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:e3:4c:48:bf:91:b6:6a:07:54:60:91:27:
34:53:7d:70:71:59:53:80:83:17:c2:04:d4:d7:02:
80:8e:99:b5:24:12:97:89:2a:9b:a3:d5:66:81:91:
06:60:53:e2:f6:c1:7b:2a:7d:9a:8e:bb:40:67:25:
b5:a8:fa:99:65:cc:c3:4e:9b:83:a5:13:f0:33:36:
f7:a9:a8:ef:66:9b:85:62:52:c4:b0:4e:cd:e6:f1:
3d:fa:03:71:d2:01:14:f3:1c:3e:d3:2b:e5:e3:36:
28:63:b0:82:a6:3a:88:2a:fb:90:d2:bb:db:06:99:
21:59:d1:ad:83:7b:c9:b9:4b:32:00:e9:68:82:ff:
ea:bf:43:68:8a:c9:b2:90:ba:74:d5:1b:df:4c:82:
fb:a5:18:be:ee:45:a8:5a:af:4d:28:95:e8:9f:c9:
7e:26:05:98:be:4e:a3:c7:87:08:68:f6:7d:bd:e4:
f4:ce:aa:42:35:5a:27:9a:cd:d3:40:a8:85:e2:e4:
40:69:b8:ca:cc:2c:69:fd:d2:cf:88:d4:1a:80:64:
a6:50:4b:98:99:19:b3:af:59:3b:2c:29:71:fe:54:
66:61:35:b9:3e:dc:6d:4d:7a:f9:ea:1a:a8:3d:68:
88:d9:b8:de:8b:78:b2:08:16:3d:f1:5a:a6:76:76:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:41:84:7A:DE:42:5B:21:08:72:0E:57:18:DD:20:C5:1E:06:D6:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50DE44EF2C711EF858D64B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.108.0/22
Signature Algorithm: sha256WithRSAEncryption
64:9b:2d:aa:29:a7:28:ca:87:d1:5c:7d:64:55:28:5c:4b:7a:
fe:71:ee:77:88:0e:13:50:c3:9c:03:06:28:69:41:d4:f9:32:
67:cf:d8:75:73:40:73:ae:d0:aa:e8:83:60:23:8c:94:2a:08:
22:23:62:80:47:3e:b2:5c:dc:2e:40:2f:02:4b:cd:c3:a6:f8:
8e:a3:18:ed:c6:d9:c2:a2:cf:c8:18:d8:1a:f2:eb:de:78:a9:
f2:ea:9b:64:34:cd:f5:dd:04:c6:82:a3:55:f8:ca:c3:33:51:
5d:91:74:0d:0e:e4:fb:be:29:a0:74:7a:7e:b4:19:82:db:69:
82:5e:f8:22:ff:d0:45:86:6a:cf:ea:32:e5:d2:ff:07:fb:e2:
1d:51:43:b5:8c:75:90:f5:12:89:92:f5:7e:4c:81:d2:87:4a:
07:27:71:88:a2:e1:65:94:08:a8:b3:77:01:19:f6:67:5a:48:
41:9b:96:b2:c7:43:ed:45:90:8e:4a:06:b5:f6:01:1f:45:a7:
05:1f:43:14:20:26:b0:00:cd:9f:17:9a:77:ea:c6:b2:1a:4d:
e7:cb:ec:f4:e7:df:94:eb:76:7c:40:74:ba:a5:1c:b9:af:aa:
4e:07:e1:ee:ff:fe:3a:c6:d7:8b:46:d0:34:93:2a:54:25:c0:
76:a8:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:15 2025 by rpki-client