Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2B36D424F011F0BA66F49CDAE4EC9C.roa
File: EA2B36D424F011F0BA66F49CDAE4EC9C.roa (raw, json)
Hash identifier: hEpr5pbrRUMrcgrNmgb62H8X6fx/TR05bSSZHz6Jhv0=
Subject key identifier: 9D:0E:4A:1C:9E:5F:FB:0F:7B:D7:91:84:82:28:30:2C:FF:E8:93:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015051
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2B36D424F011F0BA66F49CDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 11:55:59 +0000
ROA not before: Tue 29 Apr 2025 11:55:54 +0000
ROA not after: Mon 05 May 2025 11:55:54 +0000
asID: 214143
IP address blocks: 156.231.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86097 (0x15051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 11:55:54 2025 GMT
Not After : May 5 11:55:54 2025 GMT
Subject: CN=6810be4f-ed60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:21:f3:8c:44:d5:7f:a1:f6:e4:08:41:3a:bd:
3c:de:8a:b6:d8:d2:b7:fe:ac:99:86:0e:90:c2:5d:
62:4f:52:43:80:f9:ec:89:90:be:a1:a4:d6:33:f4:
59:75:ea:36:b4:19:3a:c0:19:a0:d9:77:9c:d0:5a:
b5:09:8b:14:b7:df:e2:67:c3:24:7c:ad:0f:43:10:
44:0c:89:ed:d5:e5:a0:a5:52:a3:9d:ca:ea:bd:0f:
8f:e9:69:2b:50:b7:c6:84:24:b1:2d:ef:4a:f3:bd:
73:a6:a9:c8:f2:63:ca:e6:c8:b8:9e:91:d7:ba:e6:
02:d1:61:6f:21:8e:5c:da:0a:63:14:69:e4:be:fc:
38:ed:58:86:7c:c9:f2:4c:8f:3f:04:0d:d7:84:fb:
fa:c5:aa:96:6d:39:73:23:66:f1:b5:ac:f9:35:05:
9d:7f:be:d1:36:7d:57:2e:be:8c:e2:0d:d8:73:bb:
15:8c:3e:a2:0d:2a:36:99:6f:7e:25:d0:0f:ae:69:
87:df:af:0c:e5:94:e4:74:3e:23:ac:00:c9:55:2b:
a7:06:de:50:7d:40:46:68:54:b6:54:3f:b0:7b:0c:
da:72:d1:18:f6:e6:c8:b7:88:14:80:da:60:57:ae:
b4:96:95:ac:4d:40:0b:37:4b:68:3f:87:19:2b:87:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:4A:1C:9E:5F:FB:0F:7B:D7:91:84:82:28:30:2C:FF:E8:93:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2B36D424F011F0BA66F49CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.108.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:26:4e:74:c1:2e:6b:91:cd:36:c3:fc:2e:fb:51:75:a9:a0:
15:5a:d3:46:fd:2d:78:4d:4f:72:db:cb:e5:82:83:7d:64:a4:
fe:b7:84:ff:07:4d:c9:89:66:4c:09:11:f7:f2:ae:6b:fd:01:
c6:e1:0d:c6:65:04:d5:d3:99:ad:96:48:c2:fa:77:da:b5:c9:
22:54:9c:f1:1b:95:f0:9a:43:15:45:b3:5b:df:a4:1f:1e:b7:
d5:e3:d6:8b:f5:9b:7b:16:6d:c1:ba:7d:fc:52:36:f9:8d:f7:
a8:8e:ba:4b:e8:7a:58:f4:f5:f4:3b:7a:31:0d:ce:3f:a4:f6:
87:1e:4d:b2:9e:ed:e4:83:41:d0:55:70:5d:69:94:d8:b0:7d:
a3:33:8b:3b:c0:f4:11:43:e3:fc:4a:f1:f0:b0:cd:4e:ea:87:
09:ef:b6:a0:ea:98:fb:04:84:02:6a:0a:4f:48:6d:8f:11:3e:
c3:b6:d1:6f:f3:96:43:96:2a:0b:28:bb:d8:12:d4:5f:6c:15:
af:c2:f4:b6:9c:15:7b:5e:e3:d0:9d:f6:27:bd:e1:b9:85:da:
0a:15:62:4b:c3:ec:4b:6c:4e:d3:17:aa:fe:bf:e1:1e:01:f7:
cf:d1:d2:05:c5:ca:5a:d7:07:d9:4e:0f:f8:24:7b:26:71:89:
f1:7f:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:22:23 2025 by rpki-client