Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C22A444FB4D11EF9BD2DE4B762E951A.roa
File: 4C22A444FB4D11EF9BD2DE4B762E951A.roa (raw, json)
Hash identifier: cBiOgkS+GdR7oAEpN1yQxwJCZGuhK0YjOmYX+Hne6lM=
Subject key identifier: B2:10:45:77:40:D5:B7:C3:24:72:65:5E:58:EC:F8:C2:0F:29:93:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01442C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C22A444FB4D11EF9BD2DE4B762E951A.roa
Signing time: Fri 07 Mar 2025 12:11:29 +0000
ROA not before: Fri 07 Mar 2025 12:11:13 +0000
ROA not after: Tue 25 Mar 2025 12:11:13 +0000
asID: 39600
IP address blocks: 156.255.83.0/24 maxlen: 24
156.255.85.0/24 maxlen: 24
156.255.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82988 (0x1442c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 12:11:13 2025 GMT
Not After : Mar 25 12:11:13 2025 GMT
Subject: CN=67cae270-0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:8c:e1:ba:71:78:a6:97:30:f4:8b:da:f7:
98:86:ab:b7:a2:5c:56:5b:57:60:ae:fe:84:2f:09:
8a:69:83:da:bb:03:8c:de:66:56:2d:54:2e:b0:66:
e3:94:42:15:ff:20:61:f7:df:c3:41:3c:27:dd:9a:
19:c9:66:07:5f:a7:01:ac:20:b1:3c:82:4f:12:4c:
ca:e1:66:32:cf:89:6b:8e:5d:80:68:fa:2c:14:67:
88:45:32:70:58:eb:01:6b:68:0c:6d:48:d7:33:bb:
0f:19:3f:b6:34:4b:96:14:f4:80:5f:e4:2e:63:1d:
cf:05:47:1e:d5:fc:b2:fe:4b:13:ee:f0:db:ab:00:
55:ae:e8:5e:35:8b:3d:34:eb:55:68:bf:4d:d0:45:
6d:28:98:2b:6d:1d:c9:cc:02:18:99:32:3e:44:2f:
99:19:fa:e0:cf:73:57:ec:55:3c:f3:fa:53:cd:04:
1f:6e:76:d9:25:f0:7a:92:2b:c5:d7:f5:ca:5f:34:
fd:02:47:23:84:39:6d:26:52:8c:47:da:28:29:c7:
55:aa:15:fc:16:82:9e:48:6b:88:cb:1c:dc:71:7c:
79:82:09:17:36:d8:86:60:dc:56:32:1f:0e:48:87:
c1:f9:08:12:2d:72:cf:bc:29:6f:3c:80:90:e8:1a:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:10:45:77:40:D5:B7:C3:24:72:65:5E:58:EC:F8:C2:0F:29:93:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C22A444FB4D11EF9BD2DE4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.83.0/24
156.255.85.0-156.255.86.255
Signature Algorithm: sha256WithRSAEncryption
46:0e:6a:c7:0c:f0:5a:74:53:89:b7:61:40:0d:60:3f:ad:68:
96:11:ab:a4:8a:81:bd:f1:8e:e4:94:02:84:bd:59:03:fa:1d:
3a:36:9f:20:8d:fb:8e:bd:55:e2:22:df:2a:be:c8:63:ba:61:
98:f0:d1:bd:1e:1c:f8:12:ed:ea:27:99:42:98:12:69:53:ac:
90:ba:57:c5:62:6e:dd:dc:1e:b2:92:1c:63:bc:73:1b:5e:5c:
ac:b8:41:12:ef:f2:71:8a:23:bc:01:71:4e:6d:11:15:58:f9:
a8:b3:be:92:23:29:bf:36:25:0f:1d:e8:21:d1:24:a9:30:87:
62:99:b4:ce:4c:b5:34:e0:7a:4a:7d:19:ac:b7:87:7a:a5:6b:
a0:d9:62:b1:46:43:26:b2:0e:5e:57:26:ad:77:3d:d1:dc:85:
28:24:1e:89:e8:a0:fb:c7:9b:fa:68:20:77:50:c3:89:5e:a4:
c8:ad:63:c4:bc:3e:78:09:8c:a7:12:fb:db:c9:f7:20:0e:ad:
cd:c3:8a:db:60:bf:a5:5e:f0:8b:3d:d6:10:7a:d8:9f:06:c4:
f7:6e:f6:83:0e:f9:91:67:19:15:e3:91:f8:c3:30:0c:ec:8b:
2f:0f:cb:c6:66:f9:7b:07:ca:4d:67:99:4d:b1:c1:0a:7d:92:
d7:3a:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:08:09 2025 by rpki-client