Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4E5BB4370E11F09D4701CBDAE4EC9C.roa
File: 6A4E5BB4370E11F09D4701CBDAE4EC9C.roa (raw, json)
Hash identifier: 0Qcib8oDprHfdPWRl7Iq3OJKQDlbQMv0XJkfdL9YWhk=
Subject key identifier: 38:84:64:DD:12:4F:6E:82:7D:0E:98:A2:20:09:9D:56:43:7A:66:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4E5BB4370E11F09D4701CBDAE4EC9C.roa
Signing time: Thu 22 May 2025 13:12:30 +0000
ROA not before: Thu 22 May 2025 13:12:26 +0000
ROA not after: Sun 01 Jun 2025 13:12:26 +0000
asID: 399077
IP address blocks: 156.240.215.0/24 maxlen: 24
156.240.216.0/24 maxlen: 24
156.240.217.0/24 maxlen: 24
156.240.218.0/24 maxlen: 24
156.240.219.0/24 maxlen: 24
156.240.220.0/24 maxlen: 24
156.240.221.0/24 maxlen: 24
156.240.222.0/24 maxlen: 24
156.240.223.0/24 maxlen: 24
156.240.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87729 (0x156b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 13:12:26 2025 GMT
Not After : Jun 1 13:12:26 2025 GMT
Subject: CN=682f22be-ba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:f0:a7:94:c0:0b:fa:27:d4:97:38:21:2a:
7f:4a:2a:67:71:6c:c8:84:c4:e1:6d:ea:89:27:53:
50:37:68:71:fd:d4:c8:65:2a:37:20:4f:60:40:0e:
4f:bf:7a:0f:b4:bb:fe:c6:88:f8:61:c7:c1:1f:36:
8c:59:9a:90:0f:28:8d:9f:79:0d:cc:30:0c:e0:59:
ad:cc:25:d8:38:f7:f7:77:13:87:02:19:8c:bc:15:
a3:2d:df:81:f8:93:f6:6c:a4:5a:47:ee:6d:f6:c7:
a4:43:7a:0e:50:5d:7f:93:8b:2a:db:37:45:15:7b:
3c:e7:2a:6b:41:6c:38:02:10:f3:bc:9f:50:eb:89:
bf:9a:51:99:e0:17:f7:04:dc:80:98:d9:44:e8:af:
0e:0b:a6:de:95:a3:23:c6:59:ec:46:76:35:e9:e9:
c4:5a:97:19:27:4c:24:e8:96:2b:aa:2a:68:0f:8f:
92:c7:36:85:5d:12:08:16:46:42:59:5b:da:41:23:
f0:42:4f:34:cc:29:88:27:54:4e:c0:71:09:44:0f:
73:c2:36:7d:b4:29:1b:17:a7:5e:2c:ac:59:17:f9:
d5:db:98:6a:eb:26:69:8c:c4:2d:1b:e0:c8:a5:cb:
43:bb:fd:59:b4:50:31:02:3e:dc:95:e9:06:50:c1:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:64:DD:12:4F:6E:82:7D:0E:98:A2:20:09:9D:56:43:7A:66:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4E5BB4370E11F09D4701CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.215.0-156.240.224.255
Signature Algorithm: sha256WithRSAEncryption
75:da:82:e1:aa:0e:aa:42:9a:43:d0:c0:4e:58:36:06:95:2a:
39:68:7f:57:44:b6:5e:06:b7:1b:8f:a1:64:5a:5d:be:33:89:
10:97:ae:47:e9:02:0c:ba:6a:99:2d:ec:d6:70:b0:02:57:ba:
d4:a4:56:bf:0a:73:f0:b0:0f:7f:c8:08:02:a0:23:18:9b:35:
5f:69:c3:9b:13:77:cb:95:b4:c5:9c:c4:eb:84:84:0e:cb:df:
cc:2b:d6:40:3a:34:49:98:df:e3:20:18:76:ac:6e:d5:ab:df:
86:dd:a8:6a:1a:38:b2:25:a5:2b:fd:0b:1c:46:8b:6b:0d:df:
40:b1:d7:77:86:04:ee:f6:c3:8c:b7:57:a1:86:41:66:dc:37:
3c:46:cb:22:3a:91:04:a4:43:99:b1:99:50:0a:8d:ec:7a:1f:
37:f2:fe:64:01:4e:dc:97:65:5c:fd:03:4f:ab:be:7e:7b:99:
8d:f5:f1:61:96:c2:51:9d:42:ec:26:0e:9d:72:83:bc:04:89:
e7:cd:3d:ef:d3:13:78:e6:f9:56:6d:a4:be:a2:64:44:43:1b:
7c:70:3e:6c:4c:f2:0b:18:01:02:d3:de:13:12:00:ad:3f:29:
7c:db:e7:55:4d:32:6c:ca:4f:d3:b1:39:a5:4f:a5:b2:bb:44:
8a:1d:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:01:35 2025 by rpki-client