Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D8DDF32FB4811EF9F9846AA762E951A.roa
File: 5D8DDF32FB4811EF9F9846AA762E951A.roa (raw, json)
Hash identifier: sTxm99VUPzMZ8dD1g/9jA7PXKUYc44s6gBFSEPl78wQ=
Subject key identifier: 55:21:33:2B:F8:7D:B4:B0:15:F3:0D:C1:6C:F4:0D:0C:F5:B5:B9:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01442A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D8DDF32FB4811EF9F9846AA762E951A.roa
Signing time: Fri 07 Mar 2025 11:36:10 +0000
ROA not before: Fri 07 Mar 2025 11:36:05 +0000
ROA not after: Tue 25 Mar 2025 11:36:05 +0000
asID: 39600
IP address blocks: 156.255.83.0/24 maxlen: 24
156.255.85.0/24 maxlen: 24
156.255.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82986 (0x1442a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 11:36:05 2025 GMT
Not After : Mar 25 11:36:05 2025 GMT
Subject: CN=67cada2a-a338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:ea:59:5e:bd:8f:62:24:5d:c0:a9:03:46:
cf:9e:30:31:0d:f6:3f:d7:9d:6c:ef:90:84:46:93:
13:c3:07:7a:55:b4:62:bf:46:38:e0:c1:1c:9e:fd:
a6:22:17:e1:10:90:a6:cf:3c:30:39:b6:93:1e:bf:
cc:35:b7:4c:9e:78:91:1d:47:ce:aa:5a:1c:01:06:
a1:5b:8f:0e:6d:5d:a5:47:1d:1f:ba:ad:6e:3b:f4:
53:f9:61:d3:48:9b:21:a3:a8:90:21:e1:00:76:e4:
1d:5b:da:93:2f:d9:06:30:59:f9:d5:66:6b:73:6f:
20:6d:30:d6:4f:ad:2c:74:fd:2b:72:f2:75:60:b9:
2c:a2:95:49:3c:56:37:9b:84:65:45:1e:dc:4f:d4:
a5:5e:34:01:5c:14:14:a4:53:91:1c:8f:14:bd:f5:
f0:16:56:c3:ac:fe:a8:76:f4:e9:55:93:8e:33:fc:
61:1e:d2:44:38:8b:0f:50:98:1d:75:bc:49:c8:e3:
38:c9:7d:35:a0:24:cc:07:b0:2e:c0:81:96:64:36:
dd:f2:7c:0e:29:cb:55:a8:2f:e2:46:85:e4:0c:4b:
f0:5e:fb:9b:67:3d:12:f9:98:76:63:71:f9:75:48:
38:45:05:04:4b:0c:a9:63:7e:1e:38:e7:00:3f:bd:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:33:2B:F8:7D:B4:B0:15:F3:0D:C1:6C:F4:0D:0C:F5:B5:B9:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D8DDF32FB4811EF9F9846AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.83.0/24
156.255.85.0-156.255.86.255
Signature Algorithm: sha256WithRSAEncryption
0d:6b:96:d2:db:7a:6b:df:c5:6a:37:28:f8:b1:d0:35:ba:34:
b2:b5:0e:75:74:60:f1:0d:b5:7f:55:b3:c1:dd:9b:13:46:fe:
d6:dd:62:5a:4f:51:9b:ea:7f:fa:48:ca:13:74:e8:09:3c:e9:
27:38:a8:b6:4c:4a:b2:70:2d:dd:1b:e8:db:3f:a6:70:25:f0:
d2:12:b3:b6:4a:d1:53:a5:65:ea:91:0b:6d:00:e8:ea:34:95:
9c:98:d8:df:cc:a1:57:39:02:69:26:c1:fb:bf:b8:a9:ca:97:
22:1b:15:55:71:99:8a:a2:ae:f3:00:6f:b1:79:bc:a2:01:08:
a4:8f:d1:9c:1f:94:8c:82:1c:f9:ae:6b:89:49:c9:c5:38:45:
19:64:6b:ba:4e:7c:8b:a0:94:fc:bc:0c:23:64:e5:f3:23:96:
40:d8:fe:e3:0c:e0:46:9c:44:fb:10:b9:18:a2:35:cb:69:6e:
42:f7:ec:3c:5d:a1:66:96:29:66:dc:41:c0:d2:c3:af:de:cd:
46:e4:2d:4b:c2:88:85:cc:12:66:7e:da:61:89:a6:66:d2:98:
34:7e:e8:60:6a:72:02:f1:b0:37:b6:a3:f8:c6:63:04:c4:5b:
df:7a:32:1b:57:d1:b8:c2:5d:d1:4b:ac:cf:d6:1c:b3:fa:34:
0e:db:87:78
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAUQqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA3MTEzNjA1WhcNMjUwMzI1MTEzNjA1WjAYMRYw
FAYDVQQDEw02N2NhZGEyYS1hMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx1nqWV69j2IkXcCpA0bPnjAxDfY/151s75CERpMTwwd6VbRiv0Y44MEc
nv2mIhfhEJCmzzwwObaTHr/MNbdMnniRHUfOqlocAQahW48ObV2lRx0fuq1uO/RT
+WHTSJsho6iQIeEAduQdW9qTL9kGMFn51WZrc28gbTDWT60sdP0rcvJ1YLksopVJ
PFY3m4RlRR7cT9SlXjQBXBQUpFORHI8UvfXwFlbDrP6odvTpVZOOM/xhHtJEOIsP
UJgddbxJyOM4yX01oCTMB7AuwIGWZDbd8nwOKctVqC/iRoXkDEvwXvubZz0S+Zh2
Y3H5dUg4RQUESwypY34eOOcAP739QwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFUh
Myv4fbSwFfMNwWz0DQz1tbm1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RDhEREYzMkZCNDgxMUVGOUY5ODQ2QUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnP9TMAwDBACc/1UDBACc/1Yw
DQYJKoZIhvcNAQELBQADggEBAA1rltLbemvfxWo3KPix0DW6NLK1DnV0YPENtX9V
s8HdmxNG/tbdYlpPUZvqf/pIyhN06Ak86Sc4qLZMSrJwLd0b6Ns/pnAl8NISs7ZK
0VOlZeqRC20A6Oo0lZyY2N/MoVc5Amkmwfu/uKnKlyIbFVVxmYqirvMAb7F5vKIB
CKSP0ZwflIyCHPmua4lJycU4RRlka7pOfIuglPy8DCNk5fMjlkDY/uMM4EacRPsQ
uRiiNctpbkL37DxdoWaWKWbcQcDSw6/ezUbkLUvCiIXMEmZ+2mGJpmbSmDR+6GBq
cgLxsDe2o/jGYwTEW996MhtX0bjCXdFLrM/WHLP6NA7bh3g=
-----END CERTIFICATE-----
Generated at Sat May 10 04:38:03 2025 by rpki-client