Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC113588F2C311EF83424E9D762E951A.roa
File: FC113588F2C311EF83424E9D762E951A.roa (raw, json)
Hash identifier: OYyHaTiurcypSE82TSVR3c+bi5ronlJACZ+dCdItBac=
Subject key identifier: 94:32:B7:2A:41:73:3C:36:92:1D:F6:C8:F4:59:4A:59:E0:90:DF:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC113588F2C311EF83424E9D762E951A.roa
Signing time: Mon 24 Feb 2025 15:28:23 +0000
ROA not before: Mon 24 Feb 2025 15:28:19 +0000
ROA not after: Sat 29 Mar 2025 15:28:19 +0000
asID: 203020
IP address blocks: 156.235.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76803 (0x12c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:28:19 2025 GMT
Not After : Mar 29 15:28:19 2025 GMT
Subject: CN=67bc9017-95eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:bc:4f:69:44:da:8f:8d:e0:03:77:9f:d9:
b6:78:f5:8e:81:16:32:e0:11:4c:21:b3:96:81:c5:
c2:18:39:e4:61:97:63:4b:ef:27:d2:4c:39:69:2b:
c3:74:66:52:bc:7a:d9:84:22:81:d7:4b:4d:db:fb:
5c:b4:b2:40:4e:b7:b5:6a:d0:d2:20:9d:80:ab:75:
c8:3a:49:16:1d:76:a1:90:8f:03:21:74:38:2b:f3:
45:52:5d:f7:c0:a1:e3:a3:dc:96:84:5f:92:33:db:
f0:c1:3a:f0:f9:ed:82:a8:13:7a:ff:63:6c:90:3f:
e7:a8:11:47:f1:02:0c:48:49:ff:ff:db:65:39:8f:
4b:89:39:07:57:c8:77:58:d4:1b:41:c3:de:78:a0:
f6:ff:db:c8:a1:66:73:b3:f9:05:8c:82:0f:4b:6e:
27:93:99:ae:83:0f:06:be:75:8a:8c:4d:6a:37:8a:
2b:42:24:f6:7e:21:7a:f3:4d:64:df:aa:44:83:52:
f2:45:5b:02:db:a6:4d:a6:38:c5:a6:62:dd:b1:0a:
25:3b:30:17:e3:61:f4:bb:5e:84:9e:2d:2e:05:1c:
2b:7c:26:fa:1c:52:f4:e5:96:50:1d:16:30:84:fe:
58:c2:9d:35:7d:d9:63:f1:a6:08:7d:7a:ce:a9:6c:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:B7:2A:41:73:3C:36:92:1D:F6:C8:F4:59:4A:59:E0:90:DF:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC113588F2C311EF83424E9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.32.0/20
Signature Algorithm: sha256WithRSAEncryption
53:eb:66:1b:df:d8:8f:3c:b2:db:c0:a6:d4:68:ee:02:5d:f7:
4c:9f:66:d1:39:d0:16:c1:87:2a:4b:71:ab:c4:5a:a8:60:46:
ca:79:24:b7:c3:f3:99:5e:91:01:23:a5:e9:2c:08:a3:bd:99:
4f:ca:b1:71:1d:f5:22:58:8a:51:e8:0c:58:72:ba:c4:ae:32:
c7:8e:05:47:27:36:d9:2f:70:fa:91:f9:97:0f:68:7b:b8:b9:
36:83:ce:73:61:04:ac:a8:b7:b4:79:37:60:dc:cf:57:81:45:
2d:f9:ec:cd:9b:ae:18:71:62:c9:62:2f:5f:76:76:8a:02:fb:
ff:4c:c6:74:a4:d1:e4:a9:2d:41:16:20:47:f1:75:b5:41:97:
b5:a1:83:47:8c:28:1b:11:2c:b2:a1:17:9f:b9:3a:45:8d:1f:
6e:03:c1:54:71:01:83:a7:d3:99:3c:05:06:b7:c9:b5:de:37:
c5:4d:96:09:c8:24:85:7f:b2:73:1d:20:e3:e0:28:3b:d2:72:
67:6d:eb:ac:ab:b5:68:55:68:7f:7a:22:1a:1f:a5:91:a2:1b:
67:a9:14:5e:ec:7d:c6:12:76:23:de:44:7f:df:89:a4:44:ec:
16:6e:81:3f:0f:f0:dd:c4:11:61:56:2b:b3:45:29:62:27:d0:
bb:42:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:14 2025 by rpki-client