Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FED02F60012811EE94829D274AD9E6FC.roa
File: FED02F60012811EE94829D274AD9E6FC.roa (raw, json)
Hash identifier: wGzRO14uwZNc6zvoxRF9KC0evfAOFvwNXfNJcTrpFJw=
Subject key identifier: CD:B3:1B:4F:C4:54:2B:4C:1C:C0:0C:9C:6A:D3:9B:82:50:49:8B:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 293D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FED02F60012811EE94829D274AD9E6FC.roa
Signing time: Fri 02 Jun 2023 09:36:48 +0000
ROA not before: Fri 02 Jun 2023 09:36:42 +0000
ROA not after: Mon 15 Apr 2024 09:36:42 +0000
asID: 64267
IP address blocks: 156.248.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10557 (0x293d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 09:36:42 2023 GMT
Not After : Apr 15 09:36:42 2024 GMT
Subject: CN=6479b830-6cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:90:dc:a0:32:8e:c5:25:b9:22:69:a1:ad:
0b:eb:b7:86:a5:36:9b:fe:cc:af:05:b9:ab:9f:aa:
77:db:c4:c8:0b:33:01:07:a9:c7:37:2f:73:f8:88:
66:d9:9c:95:9c:c2:67:51:82:ba:e3:aa:73:df:3e:
fa:26:14:ae:8a:8d:84:3f:a9:ef:1b:63:ce:d9:28:
4b:d9:5d:e9:76:3c:27:47:bd:23:ae:b0:02:8a:e1:
e6:75:65:99:b1:da:20:78:3d:9d:09:77:33:a6:8c:
09:01:29:92:c6:65:76:d4:ba:7c:7b:c4:88:c4:b0:
21:4f:21:3d:82:e5:84:80:06:73:56:fd:66:7a:68:
23:98:3c:be:b4:a5:d8:47:f6:98:1b:6f:26:a8:64:
c6:a3:f9:63:34:a4:8c:4b:dc:0a:33:bd:c9:39:12:
5a:8e:0f:7b:78:b4:e6:14:f4:f0:03:e4:c5:5b:27:
ba:76:64:fa:1d:df:d6:3f:d0:44:77:44:0d:ee:16:
78:a5:47:c0:a9:59:7b:be:14:11:a9:68:a4:b6:f8:
73:4f:f8:c1:89:ca:dc:9b:99:a7:a7:15:d0:65:d4:
71:1f:5d:40:1a:30:64:76:36:80:f2:3f:06:50:53:
41:7a:32:0f:e6:f5:71:80:0b:69:37:33:e3:1a:03:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:1B:4F:C4:54:2B:4C:1C:C0:0C:9C:6A:D3:9B:82:50:49:8B:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FED02F60012811EE94829D274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.101.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ec:e1:e1:7a:f1:2d:33:0b:bd:80:b1:b5:09:e8:90:7a:da:
d9:fb:f9:2f:cb:7b:02:6e:92:ac:8f:99:f7:09:25:12:7d:5b:
a2:3a:43:15:d2:75:af:4a:75:ba:8d:fb:14:57:fd:78:ad:e2:
e1:5b:d0:bd:9f:05:36:be:cd:37:6e:b8:2b:cd:66:09:b7:1e:
33:e1:7e:9d:63:42:6f:22:83:c6:20:53:9d:44:b4:73:82:1c:
dc:2e:15:f5:92:a3:ad:c7:f9:92:5a:1d:fb:f0:31:6f:46:ff:
81:c6:2b:a1:0d:eb:27:e7:15:c7:ea:05:6a:17:ef:53:28:77:
f6:6f:84:5f:fa:09:9d:50:0f:e9:77:4e:e4:33:0a:47:3a:16:
61:94:7f:5b:49:38:2e:ae:19:82:c4:99:b4:08:21:4c:c1:aa:
b3:a1:5b:09:ee:41:74:0a:dc:de:a3:a4:1e:75:86:c2:65:1b:
9b:e4:1e:18:3c:ee:86:bd:5e:45:4c:41:6a:78:70:48:20:d0:
19:c1:2a:a7:a9:94:81:26:3e:38:27:e6:23:c8:29:77:bc:28:
1b:fd:bf:28:d7:2b:56:b0:99:97:03:e7:bf:47:d4:c9:7f:d1:
71:96:5e:97:9e:b0:3a:f1:94:71:6b:b5:30:68:b6:f3:5a:94:
0f:e7:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:49 2025 by rpki-client