Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FD08E6A273111F09807AAB1DAE4EC9C.roa
File: 5FD08E6A273111F09807AAB1DAE4EC9C.roa (raw, json)
Hash identifier: Pk8dPrXu9yUt0Ngxe7mEzw0SbDdnTWrAmPpEylWieOg=
Subject key identifier: 37:11:60:E4:00:C5:99:2E:5D:DC:69:5D:75:7A:02:ED:45:B6:A3:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015158
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FD08E6A273111F09807AAB1DAE4EC9C.roa
Signing time: Fri 02 May 2025 08:42:27 +0000
ROA not before: Fri 02 May 2025 08:42:22 +0000
ROA not after: Sun 11 May 2025 08:42:22 +0000
asID: 134489
IP address blocks: 156.238.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86360 (0x15158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:42:22 2025 GMT
Not After : May 11 08:42:22 2025 GMT
Subject: CN=68148573-751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:d4:10:26:b1:22:fa:60:16:47:8c:62:15:
09:74:f8:8e:27:90:d2:65:64:94:e4:32:5d:ee:3f:
a5:14:88:70:23:a3:23:e0:48:4f:c4:c7:af:95:18:
0b:24:a0:b2:a1:68:df:4c:c2:3f:e8:31:0f:16:cd:
31:93:84:1f:24:39:52:01:15:ef:d8:d8:f4:40:ac:
24:54:cd:44:ad:ba:56:22:a7:9e:56:b8:e3:95:01:
63:a5:7c:61:db:ca:a3:85:4b:2c:a9:cc:96:4b:88:
c5:b6:81:62:cd:f0:6c:a8:7c:c8:9f:8e:a3:e7:e2:
76:de:ed:24:97:07:b3:79:16:e2:67:d4:c7:63:04:
0f:1d:b1:b9:8e:20:d1:cc:bc:0a:1d:8d:ca:9a:ca:
d4:fc:75:de:9c:e4:26:d6:e2:e7:11:2c:37:f1:1c:
93:e7:4f:0c:49:bc:bf:81:13:da:78:19:67:6a:d1:
ca:99:25:84:6c:6e:4d:16:97:db:50:26:f8:cc:f1:
9a:6f:2d:ff:b9:ab:03:0a:80:85:38:f4:8f:b6:7d:
97:9c:94:f9:eb:fb:06:5c:08:ca:59:b6:d9:de:85:
59:57:e1:91:fd:d1:83:27:56:dd:9b:46:36:36:8d:
97:72:21:bd:a7:5e:1c:d4:b7:31:d7:9d:af:e6:99:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:60:E4:00:C5:99:2E:5D:DC:69:5D:75:7A:02:ED:45:B6:A3:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FD08E6A273111F09807AAB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3b:af:0e:2e:c8:a1:d4:4e:f3:6e:91:c3:d1:22:30:e3:07:
03:e6:d3:73:73:a1:c9:85:2c:5d:10:7e:16:a6:81:cb:68:5a:
ec:76:32:51:b6:56:cb:e8:f4:17:21:e8:39:ac:34:6c:1e:dc:
e8:cd:90:b8:15:04:1a:06:d7:46:c6:eb:8b:2b:21:14:3d:b7:
b3:6d:34:e1:76:f3:66:13:ed:89:4d:27:f8:2b:3f:bd:e7:8f:
29:b5:3a:48:ec:4c:98:40:56:81:0a:ab:51:e4:02:f6:d7:ad:
25:e2:58:01:42:b8:61:5e:53:cc:d1:cf:6b:36:89:8f:af:cd:
76:4f:c8:f4:75:0d:17:3a:61:07:37:97:15:f2:ca:2f:f8:44:
ef:4b:7e:85:32:8a:c3:bb:d1:47:08:34:06:d5:99:07:72:23:
53:88:3d:06:db:23:8f:0b:c4:a6:49:84:46:ba:8f:59:69:46:
3f:d3:90:5d:15:98:3c:4d:77:47:cf:b3:ef:8f:e8:fe:04:74:
58:4a:bf:5e:4a:47:74:45:68:4f:76:e9:70:38:58:b9:10:19:
05:48:f3:fd:28:e2:f6:b5:86:ef:3c:9b:32:4d:ff:54:de:6a:
b1:08:c4:c3:c4:fc:65:c0:17:d5:9a:46:d4:0e:68:96:ad:3c:
61:fe:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:53:04 2025 by rpki-client