Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FEC484490611F0A14109BDDAE4EC9C.roa
File: 94FEC484490611F0A14109BDDAE4EC9C.roa (raw, json)
Hash identifier: 7+pmg2MWDDFsAWsRRwFq1XZVTDGJbeCkeFKwGx9c/sg=
Subject key identifier: 5E:BC:E1:59:C4:32:F4:B1:2D:A8:DC:43:5C:3B:B0:DD:B4:C9:6C:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FEC484490611F0A14109BDDAE4EC9C.roa
Signing time: Sat 14 Jun 2025 10:01:47 +0000
ROA not before: Sat 14 Jun 2025 10:01:42 +0000
ROA not after: Sun 20 Jul 2025 10:01:42 +0000
asID: 42689
IP address blocks: 156.251.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89081 (0x15bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 10:01:42 2025 GMT
Not After : Jul 20 10:01:42 2025 GMT
Subject: CN=684d488b-2248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:17:d2:9f:bc:e1:1d:e5:5a:65:a0:cc:21:
0f:33:35:a0:cf:cb:8e:61:e4:2a:7f:98:1d:5c:92:
4c:f4:aa:07:bb:7c:9d:b9:7d:61:99:d7:a7:80:d4:
16:3f:0f:ed:2f:ed:d7:13:c3:16:a1:a0:3e:a9:e1:
fe:3f:09:a4:6d:6b:10:d5:27:cb:3c:8c:5c:07:70:
c9:b2:08:76:17:51:48:e0:54:f0:c8:ad:f3:19:cf:
e8:80:d6:32:a1:d7:cd:c7:01:7c:7c:19:26:1a:b8:
bd:40:60:4f:46:9d:c4:9c:7b:9b:bf:00:91:37:2a:
bd:4a:a2:27:1b:12:a8:c3:54:a6:a1:28:cd:fb:03:
37:ee:3d:00:c4:39:e1:08:67:99:6c:04:88:f1:fb:
6c:c7:ca:02:50:f7:24:ad:bd:41:a2:ad:f7:40:41:
c7:a4:87:19:9f:ac:c9:6c:77:34:2c:ff:08:34:14:
e2:ee:bf:e0:a1:0d:e5:5f:96:6a:df:9f:b1:ed:28:
74:00:db:9b:42:0b:cf:e1:82:b4:13:9a:37:a6:22:
10:ea:a8:ed:ca:6b:e8:d2:dd:d0:ca:93:89:12:d6:
3a:6e:11:71:ae:c8:91:43:a3:88:95:d5:f9:8f:8d:
22:a4:ae:64:5c:d9:7d:65:50:1f:77:52:87:bc:9f:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BC:E1:59:C4:32:F4:B1:2D:A8:DC:43:5C:3B:B0:DD:B4:C9:6C:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FEC484490611F0A14109BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.80.0/20
Signature Algorithm: sha256WithRSAEncryption
52:f4:e6:82:b6:25:1c:5c:17:52:db:bc:67:e6:7d:b3:07:a7:
b9:70:6a:2e:e3:4a:23:cf:b7:d9:0f:5f:7a:82:31:c5:c8:0a:
9a:ab:70:66:9c:ee:3a:9e:58:f6:5a:0d:1d:77:84:01:88:73:
a5:6d:ae:44:77:14:ad:2a:7c:1a:30:83:1e:c3:26:f6:4f:76:
b3:70:f1:e0:24:f4:98:ee:7f:ec:72:47:e6:98:28:42:b6:f8:
3c:10:b9:aa:3c:1e:72:a7:43:d2:40:f1:88:4b:60:13:94:b3:
8a:54:1a:84:ff:28:a1:27:05:cd:39:9b:0e:c7:52:4e:62:05:
29:06:c3:0d:90:f7:e8:e5:d1:25:3e:5d:4b:1d:25:1a:d0:dc:
b5:7e:0a:d8:b6:75:13:0d:a9:ed:80:97:79:d0:a4:d9:68:51:
73:ca:ef:9e:01:af:79:da:d8:10:3d:24:be:06:61:3a:0d:bf:
19:73:34:a0:26:28:99:06:5c:66:bc:c5:d6:04:ee:18:c5:dc:
cf:b2:1a:ca:a5:1c:12:ae:a6:b0:f0:e2:8c:12:a8:7e:09:a2:
03:80:aa:06:e0:24:45:a7:a8:29:e3:97:78:26:85:8d:d8:85:
95:85:c3:40:0b:62:1b:08:e8:c0:81:f4:3c:a4:0c:fa:a1:fe:
bf:1c:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:01 2025 by rpki-client