Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93084892259F11F0B43946B0DAE4EC9C.roa
File: 93084892259F11F0B43946B0DAE4EC9C.roa (raw, json)
Hash identifier: YKz0Ro/8nyP/2kSVeDTMTT+ee+vVnmMfRrxKmgokx7o=
Subject key identifier: 6C:F7:40:42:1D:D5:8A:6F:D1:A5:65:C1:DA:BC:F2:92:53:0D:58:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015073
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93084892259F11F0B43946B0DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 08:46:15 +0000
ROA not before: Wed 30 Apr 2025 08:46:10 +0000
ROA not after: Fri 09 May 2025 08:46:10 +0000
asID: 21859
IP address blocks: 156.231.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86131 (0x15073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 08:46:10 2025 GMT
Not After : May 9 08:46:10 2025 GMT
Subject: CN=6811e357-d1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:d2:e9:45:21:d8:04:6d:52:f8:67:d8:10:
1c:f6:9c:8f:a9:d5:11:a5:eb:c1:9b:5a:19:29:c9:
5d:16:ca:09:8e:e3:cd:66:4f:f8:07:1f:12:23:11:
55:cd:29:aa:6c:c0:e1:b3:dc:41:26:53:f4:58:5f:
cf:f8:aa:76:b9:03:59:15:67:b8:01:fc:f2:e8:4a:
10:b9:3d:7a:69:79:8d:8e:a8:95:5d:70:d2:ef:25:
0d:f0:b7:e8:c0:a5:a8:84:8f:9f:5d:83:63:9d:28:
f0:14:5c:d9:91:03:81:68:ff:3b:0c:64:23:0a:b4:
18:0c:3d:09:84:c4:4b:53:df:bc:48:5c:3f:45:4b:
62:7b:b1:3f:26:7d:7c:7b:5d:11:39:bd:ad:8c:7e:
6d:b4:ad:b3:ab:c6:e1:b4:b5:61:a9:f0:d1:8f:0f:
b0:64:42:29:60:4b:df:06:cd:77:8e:d1:55:43:6a:
83:82:05:a7:81:3f:13:27:7c:b9:8f:60:46:a7:3d:
7e:82:2c:82:bb:33:f3:40:82:65:1b:72:c8:f5:0b:
f3:e1:0b:4a:5f:21:e2:17:a8:a7:5a:3f:7c:70:d6:
9c:4f:ef:c5:9b:05:bf:47:65:70:60:56:24:4c:d5:
83:6e:da:db:45:64:58:55:f3:79:22:f7:dd:55:5c:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:40:42:1D:D5:8A:6F:D1:A5:65:C1:DA:BC:F2:92:53:0D:58:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93084892259F11F0B43946B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:82:a8:c4:e1:af:28:e7:c2:04:10:96:02:04:a4:4e:93:32:
a9:fa:ac:17:ec:28:07:a8:b1:d3:30:ba:78:c9:8c:9b:50:df:
b9:db:76:55:4c:b6:09:b8:a9:11:c5:0a:58:42:7e:a4:a3:7a:
ba:0d:60:ef:fc:33:aa:34:22:c3:7d:ee:2c:81:d9:8d:f3:6e:
f3:1b:65:42:8f:0d:cb:7a:ad:a6:50:7b:9e:2a:05:87:c4:4e:
14:1f:ac:a4:0d:2b:ea:15:a1:a6:ae:6c:93:ab:c0:25:fd:48:
cc:60:e9:69:d1:4c:de:ba:c7:f6:5d:be:7f:66:2d:12:13:4b:
6a:61:af:bd:54:62:3c:92:74:a8:7e:60:ef:a1:65:ec:bb:60:
29:a5:b7:fb:e6:35:7d:10:ab:e1:26:9f:46:69:de:de:8d:9d:
24:b6:26:96:99:19:ba:7b:8e:46:45:ed:56:03:8e:bf:75:36:
a6:82:79:4b:d4:e8:42:72:25:7c:0d:8f:fd:7d:1a:22:ee:7f:
bd:b1:ad:da:a2:30:84:60:ae:c3:54:24:c9:97:eb:ce:f2:ca:
93:42:1e:68:21:28:8c:d7:07:72:3b:ab:24:42:db:a9:95:ec:
05:bc:c9:2b:5e:6e:d6:dc:40:6d:cd:e0:04:bd:d9:41:58:2c:
77:20:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:18:56 2025 by rpki-client