Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/626DC1DEDB1111ECB55EB290F1222468.roa
File: 626DC1DEDB1111ECB55EB290F1222468.roa (raw, json)
Hash identifier: 3KWZ1llzZFO7uxqcYB1OH+cZ3fjB9HzuLUJof+wx8oU=
Subject key identifier: 50:1A:BC:74:13:01:20:DE:E0:A2:17:F0:B9:4C:79:45:B4:BC:85:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/626DC1DEDB1111ECB55EB290F1222468.roa
Signing time: Tue 24 May 2022 03:27:05 +0000
ROA not before: Tue 24 May 2022 03:27:02 +0000
ROA not after: Fri 30 Jun 2023 03:27:02 +0000
asID: 140403
IP address blocks: 156.240.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5112 (0x13f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 03:27:02 2022 GMT
Not After : Jun 30 03:27:02 2023 GMT
Subject: CN=628c5089-1906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:0b:79:4f:2d:8b:0c:d6:17:7c:3e:84:ed:
21:a2:54:76:21:f9:54:ec:e1:46:f1:7e:62:f0:14:
e4:15:5a:d8:61:e4:06:ce:2e:74:c3:a7:db:e9:06:
1d:40:1d:37:1d:31:03:da:be:e2:4a:1f:d8:3f:b5:
59:67:a9:67:24:40:7c:99:06:8e:cb:0a:ee:f9:e2:
e7:7c:9e:d6:83:1e:f5:b4:41:49:7b:dc:5d:44:aa:
f7:2c:53:19:40:29:de:21:37:d0:c3:21:56:69:f5:
f7:fb:1b:d8:6d:0d:33:72:f8:dd:a3:75:89:2c:10:
51:1d:4d:69:fe:98:21:18:0c:94:08:3b:af:5f:c0:
e1:b7:c4:f2:4c:16:b4:39:38:20:a0:55:55:0e:88:
d9:4b:c2:48:8b:06:35:72:fd:ff:c1:ff:d3:17:1a:
97:f3:40:c5:cd:2e:63:e8:ce:02:93:1d:43:fc:85:
62:82:ba:13:75:c7:15:8d:06:46:97:be:e5:57:e7:
d6:fb:11:80:fb:94:75:dc:d4:e4:0e:23:73:87:01:
dc:6d:63:e7:f4:99:ee:52:86:04:6d:b6:41:2d:2b:
71:5e:2c:2e:2d:55:e3:79:43:4f:89:d5:c0:3d:34:
66:a4:6d:37:55:c7:21:9e:f4:03:1e:ae:cd:e6:42:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:BC:74:13:01:20:DE:E0:A2:17:F0:B9:4C:79:45:B4:BC:85:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/626DC1DEDB1111ECB55EB290F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:55:d7:34:d0:89:92:15:79:d6:a4:7a:74:d4:bb:8a:00:71:
57:c1:bd:d4:71:65:3e:47:ab:28:3b:08:72:bc:0d:f6:61:9b:
2d:83:05:f7:68:90:4f:8e:d8:ed:61:46:b6:1b:24:74:95:b1:
d0:16:6a:e8:d6:bd:53:3d:bd:7f:25:79:c5:8d:b6:01:b7:ab:
c0:20:04:9a:08:fb:b8:c4:63:9c:ff:30:a8:03:e7:7c:ff:21:
3c:5d:3b:7b:66:e2:80:c5:52:70:0d:07:b3:c1:58:36:bc:f4:
f1:da:d9:4d:56:aa:99:60:07:86:0a:ed:a0:92:5d:d6:2b:23:
55:1c:16:ba:2c:80:9b:10:07:8c:5b:9d:29:95:66:77:52:be:
0e:64:45:1b:f7:e5:95:83:85:0a:09:5c:4d:a5:38:39:5b:1b:
47:e9:8d:bf:fc:80:97:b4:48:c9:ee:e2:69:75:f7:c6:07:94:
ad:7f:4d:1c:6a:77:45:1f:f4:0a:f9:77:a3:82:35:cd:e1:61:
cb:c8:f0:59:58:87:5c:f5:cc:36:2e:00:cc:34:78:21:87:c8:
50:84:bf:cb:b6:f2:be:22:f0:7e:1c:ed:82:3c:aa:8f:df:34:
17:6a:cb:3a:2b:51:73:42:c7:8d:6c:7d:a3:68:4b:72:5c:8a:
1d:ba:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:48:47 2025 by rpki-client