Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3169FE96062811F09CE6CA5C762E951A.roa
File: 3169FE96062811F09CE6CA5C762E951A.roa (raw, json)
Hash identifier: lYUngf7Khr3Ajr5HMH2jqQIwL8QKRNN//6lcIxeuqUU=
Subject key identifier: 5C:72:FF:40:47:B9:E2:75:5D:7F:90:D3:15:71:60:3A:28:91:D9:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014764
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3169FE96062811F09CE6CA5C762E951A.roa
Signing time: Fri 21 Mar 2025 07:43:35 +0000
ROA not before: Fri 21 Mar 2025 07:43:30 +0000
ROA not after: Wed 02 Apr 2025 07:43:30 +0000
asID: 39600
IP address blocks: 156.237.106.0/24 maxlen: 24
156.237.107.0/24 maxlen: 24
156.237.112.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83812 (0x14764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 21 07:43:30 2025 GMT
Not After : Apr 2 07:43:30 2025 GMT
Subject: CN=67dd18a6-f928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:47:2b:29:d7:f3:42:c2:32:32:aa:83:23:
05:ec:c9:34:7e:3a:7f:bd:cd:d6:dc:bc:88:49:a4:
a6:7d:a7:d7:ac:6b:61:aa:f2:61:77:d4:f6:55:4c:
1f:40:a1:d5:84:72:d8:d4:8b:a2:fe:4a:02:20:9e:
60:c0:a8:34:ff:dd:bf:33:06:bd:6c:6c:8f:b4:fd:
f6:b0:39:6e:a8:70:e8:01:7a:79:ba:11:35:01:b4:
a2:f5:ff:6e:4f:84:69:f1:dd:89:1e:d6:76:03:6c:
2b:21:fb:df:4f:44:bf:15:86:56:99:02:a6:52:15:
73:f8:5d:d0:a6:11:64:48:cc:80:81:81:08:74:53:
76:85:69:0b:2b:f0:ea:95:e7:d3:a5:f6:da:02:f4:
9f:f9:ab:13:06:33:82:5f:cd:63:b6:b5:67:23:53:
f6:d1:68:81:85:a1:19:5e:d3:be:25:17:b2:24:24:
32:8e:63:00:0f:c0:1f:35:2f:8c:39:da:c5:78:a7:
50:3f:e6:b2:60:c6:77:a1:82:b7:57:09:ec:58:84:
26:d1:c5:d3:cd:9f:5a:e2:c9:a1:62:38:80:b0:05:
75:43:a6:93:94:6d:ed:28:e6:e3:51:bf:38:68:b5:
9d:e2:25:df:94:7f:7f:80:ca:1d:a3:b5:92:46:6c:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:FF:40:47:B9:E2:75:5D:7F:90:D3:15:71:60:3A:28:91:D9:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3169FE96062811F09CE6CA5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0/23
156.237.112.0/21
Signature Algorithm: sha256WithRSAEncryption
32:94:2a:4d:4a:59:c0:b0:11:28:e0:f5:0e:65:4c:a0:c8:3e:
87:bd:2d:48:de:ed:e0:a6:9d:11:93:e1:d0:ef:90:ca:2e:cc:
10:db:c7:9b:40:b2:f8:e7:ee:b2:f0:a0:b8:c0:f9:f1:f0:a5:
6a:cf:4c:fd:7f:05:ce:29:f2:6a:84:c5:7d:8c:67:0f:a4:06:
8a:06:80:9e:45:0f:11:92:3e:c8:ed:e6:53:47:d3:c6:27:cb:
db:d3:9f:fe:ec:77:67:ad:69:c7:69:b4:ca:44:0f:82:c6:86:
80:24:95:82:9b:87:e0:51:e4:41:5e:03:94:4f:70:76:24:a5:
62:d6:06:f2:7b:05:35:f0:40:b3:49:a1:14:5d:f0:f7:e8:bf:
5c:88:2c:33:7b:ac:75:fd:ac:7c:02:94:40:7b:04:be:ae:bd:
9e:26:5a:16:5d:13:54:da:f1:70:ce:dd:16:19:c8:d7:5f:87:
d8:a4:a6:b5:f9:35:24:e4:dd:1b:4a:4c:98:19:59:32:3c:c3:
e6:fe:d5:1c:65:0d:c0:c5:51:61:85:78:1e:b5:3b:2c:32:27:
28:0b:6b:3e:1b:8f:52:13:b7:89:7e:d3:3f:a9:37:ff:04:88:
6c:5f:3e:f4:9e:00:6a:b5:77:fa:e7:56:e2:0d:96:1e:f3:ed:
48:c7:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:41 2025 by rpki-client