Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93CBE28405E11ED8D388AF9F1222468.roa
File: F93CBE28405E11ED8D388AF9F1222468.roa (raw, json)
Hash identifier: 4pG7MT/TqpthscT0/3vxNSgG8cxP/wjOpT0AQWpRrcA=
Subject key identifier: 24:95:5E:E7:38:85:E6:64:25:91:B2:A5:2C:7C:E0:C4:3A:CB:2D:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 18B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93CBE28405E11ED8D388AF9F1222468.roa
Signing time: Fri 30 Sep 2022 01:26:57 +0000
ROA not before: Fri 30 Sep 2022 01:26:54 +0000
ROA not after: Thu 05 Oct 2023 01:26:54 +0000
asID: 1239
IP address blocks: 156.255.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6324 (0x18b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 01:26:54 2022 GMT
Not After : Oct 5 01:26:54 2023 GMT
Subject: CN=633645e1-ed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:f5:58:cf:9c:71:39:16:81:9b:51:b8:cc:
aa:a2:03:7d:71:29:cf:71:7a:b9:f8:92:39:33:53:
ce:7a:ec:61:0b:f9:fa:78:c7:d1:29:32:2e:55:0e:
80:63:df:74:6b:98:89:57:a9:81:39:d3:06:f9:a4:
2c:7a:b4:50:26:f4:b6:29:9c:5b:dc:d2:89:20:a3:
a1:41:6b:da:b7:da:4f:63:da:c6:71:cf:d4:8a:e4:
fb:5a:09:66:b0:72:bb:d9:a4:5c:dc:98:b1:66:4b:
39:c9:e1:1b:88:7b:ac:97:33:2b:0f:76:c4:5a:93:
84:31:7f:10:72:17:a8:83:4e:4e:fd:13:9e:5c:1c:
71:a4:1e:a7:c8:87:33:5b:94:38:52:c3:ab:fc:d8:
67:6b:10:33:91:56:f9:e8:6d:83:42:5a:8e:4d:44:
97:bd:49:81:d0:64:f0:d3:d1:c1:74:6c:79:35:28:
29:c8:01:50:bf:c4:c1:02:80:65:06:26:5f:b8:af:
71:1a:07:93:c9:1a:99:05:ee:7c:cc:f1:e9:66:3e:
13:5d:cb:5a:a9:b9:8c:03:2f:f0:e8:52:ce:fc:17:
bc:01:43:50:89:f5:72:32:51:12:f3:6f:18:93:b6:
d7:4e:6e:81:f7:48:1a:0a:c1:4e:69:56:27:88:7f:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:5E:E7:38:85:E6:64:25:91:B2:A5:2C:7C:E0:C4:3A:CB:2D:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93CBE28405E11ED8D388AF9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:ee:40:16:bd:02:9e:a8:ac:27:b7:87:c5:18:92:23:78:4c:
c4:1c:5f:b2:6a:90:3e:08:43:71:43:22:db:65:73:06:53:84:
69:5d:39:f3:4f:e0:c5:cf:eb:36:52:76:3f:7b:67:3b:09:f6:
bb:53:26:13:96:fd:b7:be:ab:23:83:0d:19:18:a2:a4:fb:84:
db:bb:a2:2d:8f:6f:b2:46:4d:4a:cc:9b:22:7f:5e:47:85:0b:
55:53:28:1b:1d:c9:61:06:e4:2c:b7:f3:1a:99:50:c8:50:a7:
b1:3a:30:22:ca:bd:83:82:dc:a9:89:46:6e:be:92:4c:ed:33:
8f:cd:5a:11:b3:45:ec:00:bb:65:28:d1:8a:a4:3b:f7:16:8e:
de:4f:b1:ce:da:51:7d:e6:47:50:49:15:1e:06:ba:64:09:8c:
d6:be:25:aa:50:5d:b1:3e:3d:4c:1e:0f:9f:a3:5b:b1:c2:d1:
79:1b:46:2a:c6:fb:17:dd:1a:14:79:c8:e1:7b:e2:2f:93:7a:
ac:ab:e5:a0:d4:5d:1d:d2:18:8c:c4:32:6a:fa:8a:65:16:a9:
e2:1b:21:03:df:be:b1:f0:46:4a:00:46:a2:1e:00:f1:fd:4e:
10:24:6f:82:f1:30:1e:31:45:ee:cf:33:79:a8:f1:c6:9a:e9:
43:d2:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:34:02 2025 by rpki-client