Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6716D1E2FA7D11EF8193BD53762E951A.roa
File: 6716D1E2FA7D11EF8193BD53762E951A.roa (raw, json)
Hash identifier: wTfCE28+JNbqimym4yR3qDZ7UWfFnoYT1L6+ZCPEClM=
Subject key identifier: 86:6F:30:72:8A:09:4B:0C:E3:53:A8:71:C5:76:A4:48:C3:CC:02:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6716D1E2FA7D11EF8193BD53762E951A.roa
Signing time: Thu 06 Mar 2025 11:23:18 +0000
ROA not before: Thu 06 Mar 2025 11:23:14 +0000
ROA not after: Wed 19 Mar 2025 11:23:14 +0000
asID: 39600
IP address blocks: 156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82871 (0x143b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 11:23:14 2025 GMT
Not After : Mar 19 11:23:14 2025 GMT
Subject: CN=67c985a6-26f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:3c:2f:45:81:c8:3b:b4:1c:4e:9a:26:12:
17:77:08:6c:89:54:15:2e:2b:63:8d:24:e3:7e:6d:
67:a9:b3:e4:c0:4c:08:b7:98:18:99:ed:ed:60:bf:
c6:77:11:9a:2a:1b:fd:f6:e1:f4:30:ac:f1:f6:f1:
2e:e6:b4:08:70:12:9d:29:82:7f:e5:9e:c2:48:46:
d0:6a:34:4c:bd:d9:ca:cc:ee:28:f0:56:17:dd:d8:
6e:10:a2:72:7d:a3:4c:0e:e2:8d:6a:be:a2:1f:ec:
39:bf:bb:fa:90:b2:32:f3:5f:8c:aa:06:82:48:19:
b6:d1:c7:fc:7e:70:81:94:a8:38:41:6d:55:4d:99:
64:f1:4d:6e:62:13:73:12:0d:e2:d6:41:5e:aa:51:
ba:2b:ad:d1:e5:63:de:68:f0:85:57:5d:80:42:78:
8b:af:4e:4f:c1:57:40:37:55:71:e0:d4:81:c4:eb:
10:35:04:8c:39:b3:45:c7:38:13:66:5d:c1:e7:82:
02:3a:11:87:7e:15:e3:63:1e:a6:e8:36:fa:c8:17:
ce:04:95:e6:66:30:69:c0:2c:4c:66:4d:76:21:74:
2b:f3:bc:5a:a0:b5:a2:41:c3:81:b2:c0:2e:f4:96:
30:8a:1a:9d:7c:df:11:31:ae:82:ce:d6:bd:7e:e4:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:30:72:8A:09:4B:0C:E3:53:A8:71:C5:76:A4:48:C3:CC:02:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6716D1E2FA7D11EF8193BD53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.108.0/22
156.237.117.0-156.237.120.255
156.237.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:09:6b:74:37:0c:9b:af:ba:35:1b:46:af:e7:12:ea:e3:f2:
39:ed:df:2a:88:b6:20:57:c1:37:f5:1f:5b:79:7d:02:56:d3:
d1:ee:b9:35:e9:18:a5:6a:42:09:cc:c3:82:61:ed:b1:a7:5f:
d9:c5:4b:2e:c3:4b:f4:64:2b:99:e1:ac:c2:70:b8:7d:60:65:
5d:2a:4f:a8:01:23:17:e9:7d:d6:5f:58:6e:26:08:5d:1a:99:
6a:88:77:79:50:8f:fe:1c:92:99:d5:3d:b7:5a:9a:61:8b:6f:
b5:13:19:1a:1a:df:25:27:fe:dc:96:62:97:64:72:95:9c:8e:
50:8b:27:0b:fa:ca:e3:76:33:da:b5:fd:cf:42:fa:88:e6:64:
6b:8f:83:19:a9:96:89:bf:b9:ee:5e:b0:ec:c8:a8:4f:30:e1:
e3:4c:2f:1d:b7:ad:b0:db:e4:01:3a:d6:76:47:25:e7:5a:d6:
66:6c:87:32:8f:a7:8d:c7:09:c9:c5:63:e4:49:d6:c1:5b:3f:
82:c0:b7:b7:01:d7:22:91:70:a9:df:4b:2c:d9:21:52:ba:06:
64:33:99:82:6a:b3:8d:26:cc:34:fe:a9:06:91:af:dc:50:98:
30:e0:b0:ff:a9:f7:e6:c8:82:79:01:d2:f1:f8:1b:18:93:bb:
1e:4b:68:f5
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAUO3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA2MTEyMzE0WhcNMjUwMzE5MTEyMzE0WjAYMRYw
FAYDVQQDEw02N2M5ODVhNi0yNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwl48L0WByDu0HE6aJhIXdwhsiVQVLitjjSTjfm1nqbPkwEwIt5gYme3t
YL/GdxGaKhv99uH0MKzx9vEu5rQIcBKdKYJ/5Z7CSEbQajRMvdnKzO4o8FYX3dhu
EKJyfaNMDuKNar6iH+w5v7v6kLIy81+MqgaCSBm20cf8fnCBlKg4QW1VTZlk8U1u
YhNzEg3i1kFeqlG6K63R5WPeaPCFV12AQniLr05PwVdAN1Vx4NSBxOsQNQSMObNF
xzgTZl3B54ICOhGHfhXjYx6m6Db6yBfOBJXmZjBpwCxMZk12IXQr87xaoLWiQcOB
ssAu9JYwihqdfN8RMa6Czta9fuQyfwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIZv
MHKKCUsM41OoccV2pEjDzALIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzE2RDFFMkZBN0QxMUVGODE5M0JENTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnO1sMAwDBACc7XUDBACc7XgD
BAGc7XwwDQYJKoZIhvcNAQELBQADggEBALMJa3Q3DJuvujUbRq/nEurj8jnt3yqI
tiBXwTf1H1t5fQJW09HuuTXpGKVqQgnMw4Jh7bGnX9nFSy7DS/RkK5nhrMJwuH1g
ZV0qT6gBIxfpfdZfWG4mCF0amWqId3lQj/4ckpnVPbdammGLb7UTGRoa3yUn/tyW
YpdkcpWcjlCLJwv6yuN2M9q1/c9C+ojmZGuPgxmplom/ue5esOzIqE8w4eNMLx23
rbDb5AE61nZHJeda1mZshzKPp43HCcnFY+RJ1sFbP4LAt7cB1yKRcKnfSyzZIVK6
BmQzmYJqs40mzDT+qQaRr9xQmDDgsP+p9+bIgnkB0vH4GxiTux5LaPU=
-----END CERTIFICATE-----
Generated at Sat May 10 05:09:17 2025 by rpki-client