Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C58DD0FA7B11EFBB61E344762E951A.roa
File: 51C58DD0FA7B11EFBB61E344762E951A.roa (raw, json)
Hash identifier: QTmNWY1BGfCohwaTjGf0kifIIZSZPMhGJXeKtQQzTFw=
Subject key identifier: 01:CC:C0:93:A7:0F:2E:70:2C:3A:21:58:84:8E:92:A6:D0:6E:57:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C58DD0FA7B11EFBB61E344762E951A.roa
Signing time: Thu 06 Mar 2025 11:08:23 +0000
ROA not before: Thu 06 Mar 2025 11:08:19 +0000
ROA not after: Tue 25 Mar 2025 11:08:19 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
156.235.80.0/21 maxlen: 24
156.238.136.0/21 maxlen: 24
156.252.8.0/24 maxlen: 24
156.252.9.0/24 maxlen: 24
156.252.13.0/24 maxlen: 24
156.252.14.0/24 maxlen: 24
156.252.15.0/24 maxlen: 24
156.255.81.0/24 maxlen: 24
156.255.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82867 (0x143b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 11:08:19 2025 GMT
Not After : Mar 25 11:08:19 2025 GMT
Subject: CN=67c98227-f2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:54:fc:51:35:ad:b1:e6:17:81:bd:b1:b4:
21:39:00:ca:87:11:31:1f:39:ea:22:12:a7:44:d5:
01:18:98:69:81:97:86:eb:eb:d1:f1:a3:d6:3a:7e:
3d:78:ba:c0:47:d8:e0:6f:a1:19:7b:44:3c:75:55:
d9:f7:31:48:05:7c:2d:6b:02:fd:3d:0b:dd:96:64:
dd:56:27:38:60:db:4c:5b:12:a3:4e:a1:49:ee:44:
88:be:7c:52:98:4c:54:42:22:14:7e:cc:2a:cb:32:
4b:7a:c2:28:0e:93:da:7d:0b:ce:59:79:09:42:2f:
7e:cc:eb:88:7e:9f:6a:c2:35:14:6c:65:81:43:cd:
e9:89:ee:e0:2c:09:04:03:98:20:aa:35:8a:b8:9b:
65:ca:94:c8:52:a1:1b:d3:ac:5a:e3:dd:7b:48:cb:
e1:15:3b:7c:4f:b8:f9:54:0c:d8:e1:b7:76:77:16:
af:f0:9a:04:ff:22:d7:59:25:7c:7c:c8:06:61:d1:
12:ea:fc:37:32:49:de:c5:6a:f8:18:0f:e3:09:ac:
c6:68:d2:5e:e5:17:cc:16:e6:98:0b:26:c5:ed:20:
ed:0f:7e:3f:77:7b:70:c2:1d:a6:f4:5f:8b:dc:3f:
33:7f:b7:0b:f7:c7:0b:8c:4e:c1:ab:d7:7a:3d:01:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CC:C0:93:A7:0F:2E:70:2C:3A:21:58:84:8E:92:A6:D0:6E:57:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C58DD0FA7B11EFBB61E344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
156.235.80.0/21
156.238.136.0/21
156.252.8.0/23
156.252.13.0-156.252.15.255
156.255.81.0-156.255.82.255
Signature Algorithm: sha256WithRSAEncryption
9e:fc:a4:8c:0d:c0:d6:b0:ec:97:81:72:54:29:90:69:ef:e5:
dd:e8:a3:c6:f0:6a:9f:cf:d7:13:76:fb:f1:57:61:ea:97:53:
1f:7e:ec:d2:98:55:84:5d:a3:d4:8e:69:f4:98:f9:c6:b7:5f:
ea:19:a8:51:fd:f4:dc:a4:16:38:31:b9:9b:e2:df:b4:2d:5f:
64:36:79:23:65:4c:8f:05:f8:33:61:bb:fc:16:57:85:4f:4a:
8a:05:56:22:a2:60:79:30:f7:03:2c:fc:5e:d7:d5:0c:b6:f3:
d0:b0:4d:5d:1e:ab:02:84:6e:4b:e2:9d:50:47:42:50:10:f1:
6b:43:51:fb:f8:ed:fc:11:7c:18:8d:0a:f8:f8:22:66:13:76:
18:85:62:3f:01:fb:56:48:e9:d5:43:1f:9e:44:0b:53:fd:1d:
88:ca:25:12:79:bf:92:65:34:f6:6d:3e:26:02:c7:f2:ef:20:
be:15:b2:dd:af:af:75:78:a6:70:0d:b1:ee:bb:c8:86:f2:e6:
38:90:69:85:d7:61:b0:98:d7:d7:38:0e:0b:b8:cd:9f:06:4b:
7e:b6:08:91:a2:d6:ba:54:39:3b:5f:2b:12:f1:eb:c8:d7:a5:
60:b0:6d:bd:09:cd:d5:32:27:8a:c9:ae:e5:40:54:4b:d7:35:
2d:7f:f2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:15:11 2025 by rpki-client