Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A122059427F711F0BBE53DE0DAE4EC9C.roa
File: A122059427F711F0BBE53DE0DAE4EC9C.roa (raw, json)
Hash identifier: w7P75DFnB82YwUXJutZoH2oMln2WnbaIAZ6Nb1iS/N0=
Subject key identifier: 27:B9:74:25:FB:9B:34:67:17:F2:CD:81:E7:1A:92:4A:7F:E5:09:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A122059427F711F0BBE53DE0DAE4EC9C.roa
Signing time: Sat 03 May 2025 08:21:37 +0000
ROA not before: Sat 03 May 2025 08:21:32 +0000
ROA not after: Sat 10 May 2025 08:21:32 +0000
asID: 54801
IP address blocks: 156.233.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86436 (0x151a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 08:21:32 2025 GMT
Not After : May 10 08:21:32 2025 GMT
Subject: CN=6815d210-d852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:49:3e:23:46:f8:7e:55:e6:4b:e0:f8:ad:
60:77:73:05:a0:2a:e3:af:e4:14:57:ea:a6:7f:d5:
a5:e0:71:0c:6e:3d:9a:f0:5d:22:43:92:41:18:b3:
3c:f5:86:4a:33:7b:e7:20:8f:c0:31:df:cf:1f:9e:
61:5f:31:a1:f9:ba:33:9c:a9:bc:40:c7:a8:45:42:
2d:9a:d8:98:6b:31:8b:35:ef:63:f8:ea:32:f9:b1:
96:96:c7:bd:d2:a4:14:a5:5d:84:a8:ca:5e:fb:24:
b2:e9:bc:9a:bd:e9:90:01:e1:07:c9:72:51:6c:f9:
7b:75:39:af:67:f7:5d:27:e5:d9:b7:e6:58:13:d6:
bd:e2:d3:b4:0b:c4:52:df:29:c4:f3:d0:4b:3b:de:
4f:60:72:77:02:6a:28:32:dc:70:0f:81:db:f9:59:
02:fb:84:f6:cc:64:d7:ad:84:ad:66:e6:6d:16:6b:
c4:bd:b6:8d:94:d4:39:ca:16:7c:2b:62:1c:18:91:
db:f4:09:2b:cd:e5:ee:dc:0e:f4:86:ff:3e:8f:37:
53:34:f7:4b:7b:65:29:ad:d4:63:00:f7:10:26:d0:
b8:39:1c:0e:4b:1d:93:a9:fc:94:0d:71:9f:2c:97:
cd:bc:0f:d3:af:e4:09:94:fa:b3:73:d6:69:e4:59:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B9:74:25:FB:9B:34:67:17:F2:CD:81:E7:1A:92:4A:7F:E5:09:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A122059427F711F0BBE53DE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.205.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e6:fb:1d:d6:79:81:d6:9c:90:de:e4:0c:68:8f:f0:89:f6:
cd:00:a9:3f:39:c6:68:66:27:8a:85:de:c2:8e:8c:13:e4:08:
cb:a5:3b:2e:bd:08:b0:be:ec:e8:91:9d:2d:6c:78:c7:6a:eb:
bd:9b:dc:48:39:46:cc:f3:25:a2:c9:e0:50:7e:92:23:c8:83:
bb:f1:56:cf:6e:bf:bf:41:b9:6b:c9:cd:2a:eb:28:bb:0c:b9:
f5:1d:28:a3:0a:87:9b:a1:90:37:07:77:18:55:cc:1c:5e:aa:
32:cc:ff:3f:71:92:7b:ab:5b:6f:3e:4f:e7:0b:a3:3e:1d:37:
a0:b7:4c:77:91:53:f8:48:4d:91:d2:e8:8a:5a:87:6c:28:d1:
3d:a9:c4:df:d7:5f:13:cd:41:33:7d:86:a6:72:03:6a:ea:45:
cb:9d:1a:85:09:ee:82:30:a8:9c:0b:6c:34:b5:4b:de:16:5a:
7c:fd:9a:9f:76:04:0a:a7:0a:c4:a9:18:3b:a2:ca:59:95:3d:
c1:44:bf:7a:65:6d:be:a8:25:b0:11:38:2e:0d:89:b2:95:45:
ef:2b:ab:cf:ea:39:d0:36:e8:da:19:4a:2d:bc:3c:ff:31:a4:
eb:c2:43:66:53:66:33:85:62:04:1a:bf:e0:15:bf:e8:2a:77:
c0:80:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:06:26 2025 by rpki-client