Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D8681A41A9611F0A6F67C046EB8BCC6.roa
File: 3D8681A41A9611F0A6F67C046EB8BCC6.roa (raw, json)
Hash identifier: T+MJdsVx41g3kwGor51mxTrRtsXO4w0wlW4nADl73yU=
Subject key identifier: B8:4F:AE:A8:51:CF:58:5D:86:1A:EA:CC:2E:1D:B9:06:D8:44:44:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014CA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D8681A41A9611F0A6F67C046EB8BCC6.roa
Signing time: Wed 16 Apr 2025 07:41:43 +0000
ROA not before: Wed 16 Apr 2025 07:41:37 +0000
ROA not after: Fri 25 Apr 2025 07:41:37 +0000
asID: 38193
IP address blocks: 156.238.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85157 (0x14ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 07:41:37 2025 GMT
Not After : Apr 25 07:41:37 2025 GMT
Subject: CN=67ff5f37-d9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:21:30:f9:52:eb:b8:3a:28:d5:96:96:15:
cd:67:67:28:c6:8a:d5:da:6a:9c:44:c2:df:43:1e:
c0:69:83:aa:ea:7e:d2:63:8c:64:2d:d2:38:d3:3c:
2b:57:a3:81:21:c3:64:d1:34:2b:b5:39:e6:94:3e:
11:2e:cc:16:32:f5:8f:5a:9e:6d:30:f1:89:70:14:
4e:35:79:1f:12:31:cf:33:5c:30:09:36:8c:ab:90:
fe:85:0f:77:3b:39:fb:79:d0:6e:de:9c:ec:dc:de:
a0:12:0b:c6:da:3f:ae:ac:1e:25:9f:89:94:cd:b5:
e7:df:6b:40:61:81:ec:73:e5:b6:65:e2:42:aa:c8:
77:f9:de:34:3a:f2:c2:a5:fd:6b:ff:56:12:a1:73:
d5:cf:ae:82:e8:e1:cd:3a:11:13:e5:fa:ca:f6:7a:
64:51:34:8b:8d:1a:dd:10:45:14:2b:0e:65:7a:22:
cb:7f:cd:87:52:98:09:ad:09:6b:b4:54:d9:32:3e:
62:20:af:8b:0c:f8:1e:81:96:a6:4f:77:75:11:bd:
d1:cc:2f:c9:f1:76:fe:97:74:bc:d3:97:18:39:a0:
d5:77:64:73:76:2f:9f:3e:60:e0:a3:b0:fb:c8:db:
f8:30:6e:be:ad:1c:d9:9d:aa:9b:d6:5b:0f:d1:d5:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:AE:A8:51:CF:58:5D:86:1A:EA:CC:2E:1D:B9:06:D8:44:44:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D8681A41A9611F0A6F67C046EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9b:55:0f:f5:32:9f:a3:38:f7:70:8b:d5:ac:19:3a:c7:2e:
bb:d0:16:9e:b3:b5:eb:fc:60:70:2d:40:10:5a:57:e9:7d:60:
64:13:af:64:ba:7f:aa:6f:ea:88:8a:0e:32:87:ac:83:cc:a1:
98:4d:27:2a:85:a7:a2:3f:c8:0a:2d:39:c2:33:86:98:fe:37:
a3:e9:e8:26:6b:1c:aa:d1:f2:02:b8:5d:21:7d:99:07:ba:be:
b2:fa:8c:40:ba:c3:36:ac:0e:cc:5e:aa:29:82:da:53:40:58:
73:7d:4b:a0:9d:29:88:50:83:0c:22:6b:6f:6e:22:4e:b4:fe:
ec:ab:5d:a9:1f:3f:7e:c8:c4:c5:4a:9e:03:f4:6c:7e:fb:34:
9a:92:f2:ad:82:d5:d9:54:14:1d:62:a8:a2:3a:72:e8:63:38:
22:45:d9:dd:9b:09:44:b4:37:0f:cf:4d:ef:19:c4:fa:36:17:
51:56:c4:bc:ec:38:7c:e2:6f:e4:b2:1b:7c:ab:3b:c0:a3:0c:
04:fb:eb:cc:71:b9:1b:d5:21:8f:fe:17:23:bd:95:38:87:62:
3f:7a:90:1b:02:b5:13:63:b9:44:45:f5:ef:ba:d9:5b:4d:18:
ec:f0:9b:7a:3f:4e:8a:1e:bc:7e:5e:51:24:cf:27:46:ec:72:
f1:4e:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:50 2025 by rpki-client on console.sobornost.net