Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/109FA348058111F0AAB2855D762E951A.roa
File: 109FA348058111F0AAB2855D762E951A.roa (raw, json)
Hash identifier: qz3MidXg4fvSyI7HiF4gwC77HIkF43uv0rl8nAvHXFM=
Subject key identifier: 49:6B:55:CA:1E:5D:CA:8A:C7:4E:6F:55:91:BA:26:21:F8:F7:29:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01473E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/109FA348058111F0AAB2855D762E951A.roa
Signing time: Thu 20 Mar 2025 11:47:14 +0000
ROA not before: Thu 20 Mar 2025 11:47:10 +0000
ROA not after: Wed 02 Apr 2025 11:47:10 +0000
asID: 39600
IP address blocks: 156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
156.237.122.0/24 maxlen: 24
156.237.123.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83774 (0x1473e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:47:10 2025 GMT
Not After : Apr 2 11:47:10 2025 GMT
Subject: CN=67dc0042-d6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:f7:d1:40:a9:00:9f:ed:cf:3b:a7:72:96:
cb:b1:92:bc:de:12:27:e8:16:8b:d7:b9:b8:90:93:
1c:ba:87:df:f6:c9:5d:e7:b5:c7:25:e9:e9:c2:f9:
d1:ea:98:ed:34:93:d9:97:11:42:c2:3c:7e:15:db:
4d:9c:b4:4f:ba:e1:11:a3:c2:c7:b5:ab:59:7e:89:
12:82:92:b8:92:63:bd:85:f8:00:31:81:12:c5:aa:
2d:ee:90:4d:ea:24:f8:6f:ad:e4:e8:18:5f:9f:cb:
c5:75:4f:8a:27:7c:36:12:23:a8:9e:4b:87:18:8d:
b3:55:43:ce:16:80:57:16:8a:82:9d:17:8e:95:33:
83:e3:23:33:af:a1:e2:7a:fd:88:b2:e1:bb:97:b0:
e0:17:7f:58:cd:e7:da:20:fb:d3:c5:36:8b:e8:9c:
81:b8:44:4a:be:91:d4:33:42:86:f2:8c:ac:b9:95:
1b:5f:2c:6c:8f:0b:25:9a:c6:bd:43:0f:fa:5c:fa:
64:81:a2:01:0f:33:26:29:82:33:de:90:05:ec:22:
42:d4:9f:aa:5a:58:17:7f:f4:1f:67:ee:79:60:06:
48:44:61:5b:71:37:b6:3a:f8:55:86:b9:ad:22:e3:
53:ab:b3:c0:d3:13:5a:f7:71:0e:c9:49:32:50:ec:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6B:55:CA:1E:5D:CA:8A:C7:4E:6F:55:91:BA:26:21:F8:F7:29:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/109FA348058111F0AAB2855D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.108.0/23
156.237.117.0-156.237.119.255
156.237.121.0-156.237.125.255
Signature Algorithm: sha256WithRSAEncryption
43:85:5b:1d:fa:6b:d5:46:d7:9c:76:65:6d:1f:c3:8d:21:8d:
08:58:17:45:5d:ed:d5:73:41:f9:57:9d:03:fa:11:af:54:e4:
2b:5f:a2:27:a8:f7:1c:95:90:5a:7e:c2:1d:c7:47:cb:3e:f2:
6f:a5:66:32:86:ec:5d:75:57:14:cc:60:b3:ee:c2:57:d1:04:
39:78:5d:51:1c:1b:63:d6:45:04:2f:fe:d3:cd:58:14:ff:fe:
d8:b1:f8:1c:60:1b:db:4d:4d:15:c7:8e:e0:e9:28:a0:1f:70:
b2:2d:69:c4:67:c9:d5:47:0a:2b:f9:a9:be:67:98:ad:7d:76:
f1:37:2c:f6:b1:84:c4:2f:8d:64:70:ed:2f:1c:8a:0a:d1:65:
6f:f6:8f:6d:62:a3:9b:4b:92:57:c2:92:bd:71:74:dd:ae:1c:
e1:60:75:ca:8c:29:80:d5:eb:d0:7a:38:f0:6d:47:3f:1e:fc:
79:cb:b7:11:3d:9d:c3:24:a7:bf:de:0a:9c:9a:3c:58:f0:f8:
04:b2:fa:26:54:76:48:54:03:13:63:bd:b4:0f:4f:a7:2d:6e:
d5:41:d9:fc:da:0d:3f:bd:07:cf:68:e8:58:8a:60:f0:8f:48:
d1:5a:87:c7:2b:50:e3:fc:96:ed:78:ab:dc:c3:74:03:05:de:
8a:f2:57:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:45 2025 by rpki-client