Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D812D67C2FC511EEB248EA314AD9E6FC.roa
File: D812D67C2FC511EEB248EA314AD9E6FC.roa (raw, json)
Hash identifier: 9EF1eYpKMP3+wqyFQMttfVn3NBepwX4Lmca5r+MdqU0=
Subject key identifier: B4:16:A7:6F:6E:2D:38:17:3D:05:76:4E:2F:DF:22:B8:AB:18:66:37
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B80
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D812D67C2FC511EEB248EA314AD9E6FC.roa
Signing time: Mon 31 Jul 2023 17:15:27 +0000
ROA not before: Mon 31 Jul 2023 17:15:22 +0000
ROA not after: Wed 31 Jul 2024 17:15:22 +0000
asID: 212738
IP address blocks: 161.123.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2944 (0xb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 31 17:15:22 2023 GMT
Not After : Jul 31 17:15:22 2024 GMT
Subject: CN=64c7ec2f-d592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:f5:64:34:dd:5b:ec:34:4e:29:34:93:41:
7d:a0:01:fc:f8:d6:10:97:48:be:0c:a7:ba:38:2c:
5f:7f:97:b0:ee:14:05:ec:5e:3e:7a:b7:e8:5e:13:
e5:a5:8b:55:d3:43:9c:9c:d1:f4:61:2e:c3:78:6a:
e4:69:16:97:32:f3:98:8c:81:7a:d6:14:a9:96:d9:
a0:37:2a:d5:8c:1a:90:fe:3e:78:94:df:ba:d2:9e:
c8:28:8b:f0:95:fc:82:e5:25:7b:6f:f8:49:e8:64:
0f:03:0e:fe:0a:fa:49:72:e1:6b:57:fb:09:d9:ea:
68:8f:db:5a:81:9a:e2:5c:65:08:2c:e3:21:89:4f:
8d:d0:cb:5f:2e:8a:d7:39:2a:6b:32:87:90:6b:66:
7a:07:76:2f:e1:ef:7b:ea:f6:10:64:99:df:73:a3:
38:c9:14:4c:8f:f8:b9:d6:96:dd:02:53:6d:94:b9:
6f:66:fa:fe:83:a5:ee:cc:f5:19:3c:3f:6c:fe:01:
57:d8:5c:3b:19:12:c5:37:90:a8:b6:31:94:db:db:
1f:3a:19:88:2f:40:c2:13:5e:5d:1b:e0:3e:0d:46:
db:6a:4a:1b:9f:c6:4f:77:82:13:7e:7c:de:0b:80:
03:94:5f:04:3a:c6:ca:19:ee:29:cf:b5:94:b4:63:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:A7:6F:6E:2D:38:17:3D:05:76:4E:2F:DF:22:B8:AB:18:66:37
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D812D67C2FC511EEB248EA314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.223.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c7:a3:76:c1:07:84:ab:93:b2:3a:a6:60:49:9d:a5:ab:f4:
b0:66:10:02:ac:a0:b7:f6:6c:a5:5a:20:04:26:de:0c:df:84:
e5:ac:e7:cd:97:e6:0a:14:88:38:6e:d2:27:88:ac:4c:55:ef:
68:cc:e1:81:81:75:15:0c:fe:6b:7a:17:59:be:2e:d0:27:dd:
63:55:7a:c3:bf:1d:29:58:5f:41:63:0e:69:af:77:50:71:29:
8f:71:96:fc:30:aa:af:f6:5f:c1:97:81:2f:43:8c:2b:86:71:
b4:cc:a8:ee:a9:b5:7f:34:fa:94:be:e5:4d:b0:70:ba:bc:d8:
15:8f:e2:a2:40:c8:fd:7e:54:5b:01:b1:ce:a2:21:9e:a4:b5:
ee:3b:40:01:c0:8f:9b:79:a4:ab:95:25:9a:b1:9b:4b:68:33:
bf:48:f8:ec:18:16:a8:18:cc:4d:ab:09:6c:f5:6c:86:b6:86:
7c:40:be:97:48:ce:31:75:f4:59:b6:7c:f4:b5:a1:40:b3:0b:
09:6c:d8:d4:d4:eb:2c:5b:19:ee:8b:72:6f:f4:17:57:ea:b6:
2a:7d:70:99:71:b9:46:6d:e1:fb:15:e9:2d:31:9c:e5:2a:f9:
ac:8c:bf:ba:2d:84:3a:5b:a4:81:fb:2a:9d:c8:60:46:51:0a:
9d:60:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:19:58 2025 by rpki-client