Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C11FC6A088011F095B9F2AE762E951A.roa
File: 6C11FC6A088011F095B9F2AE762E951A.roa (raw, json)
Hash identifier: MFemXr+L+9Aedktyh8te4e6HIrw7dLWVudYeo5fm3/M=
Subject key identifier: 1A:3D:C5:E5:B1:96:7F:A1:E9:F4:AB:6B:33:FC:09:60:62:D2:AB:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C11FC6A088011F095B9F2AE762E951A.roa
Signing time: Mon 24 Mar 2025 07:20:11 +0000
ROA not before: Mon 24 Mar 2025 07:20:07 +0000
ROA not after: Wed 02 Apr 2025 07:20:07 +0000
asID: 39600
IP address blocks: 156.237.111.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
156.237.122.0/24 maxlen: 24
156.237.123.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83907 (0x147c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 24 07:20:07 2025 GMT
Not After : Apr 2 07:20:07 2025 GMT
Subject: CN=67e107ab-3aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:6c:aa:47:a6:4f:56:82:ee:69:03:10:04:
22:9a:9f:8c:0b:17:b3:b4:11:32:d5:db:90:5d:7a:
9d:68:aa:e5:ef:58:0e:8b:32:fd:a5:d3:17:f5:5a:
f3:43:18:19:26:f2:6e:e6:9e:c8:77:3f:e8:65:e1:
e3:67:67:15:c3:82:52:f4:62:15:0a:b7:07:d5:60:
6f:a7:d8:e8:2f:de:36:01:3f:38:54:9b:71:82:89:
a6:5a:31:87:0e:b6:b1:0c:b5:fe:a2:75:9c:bf:15:
d1:fe:57:39:79:c1:ec:67:e7:18:1a:48:e8:bb:b0:
d4:d3:a1:29:1c:1e:34:31:fd:b3:40:3a:fa:43:42:
b4:1f:91:ea:0f:a8:d2:47:99:97:6e:e2:f2:61:e3:
6d:de:2a:a8:aa:79:81:57:93:d5:74:f2:e0:cb:c0:
88:ed:30:a4:7b:c6:4b:31:8a:f0:1f:98:3a:1d:c6:
80:53:02:b6:c4:19:b0:cd:d4:11:ab:5e:f5:88:3f:
08:3c:56:2d:1d:a9:16:48:9a:af:b2:b1:57:b7:aa:
c0:7c:ed:2a:2a:e5:33:83:30:e0:b6:b3:8b:a7:4b:
43:80:3f:3c:1b:da:22:a5:59:9a:f9:2b:e4:b6:a1:
06:11:7f:9c:83:e5:dd:74:d0:02:71:20:10:75:91:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:C5:E5:B1:96:7F:A1:E9:F4:AB:6B:33:FC:09:60:62:D2:AB:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C11FC6A088011F095B9F2AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.111.0/24
156.237.117.0-156.237.125.255
Signature Algorithm: sha256WithRSAEncryption
72:c5:40:05:eb:70:d3:17:6c:05:91:27:c3:0a:1a:99:2e:73:
34:29:a0:cd:93:57:57:8b:60:6b:5e:1f:3e:67:3c:cf:2b:3f:
00:82:27:88:39:38:42:64:39:e5:93:a4:3c:39:5f:f2:54:6a:
57:10:a5:fb:9f:dc:9f:ce:df:a9:c8:7e:2c:65:56:bb:c4:55:
79:7a:ae:ba:35:03:d0:18:e6:4a:4b:d2:12:89:ff:39:68:5c:
3d:cc:34:2e:ea:68:5c:db:65:fd:0d:b7:e2:64:d3:b6:c5:ac:
e2:20:18:02:06:15:8d:f7:3c:05:27:fa:f2:03:f3:f8:fb:86:
d6:5f:d0:37:27:36:04:13:2b:0c:ff:14:30:8d:2f:e6:f1:e1:
e5:2a:97:a0:15:8b:3f:86:89:db:f6:c1:95:74:94:87:71:5e:
63:76:ce:e9:c0:88:66:16:4d:94:7e:7c:7c:45:68:2a:44:23:
5c:e7:c8:c4:13:53:aa:e2:06:b8:d1:2b:20:68:36:d3:8f:4c:
c8:f8:2f:47:6e:e0:04:36:cd:2c:7f:d9:db:c5:03:62:53:e3:
97:21:cb:6a:83:f6:15:83:4b:f4:5b:d9:f1:2f:20:c5:17:1f:
4a:a9:08:0a:69:6a:d9:99:d1:41:53:2d:a9:8c:0c:b8:ca:0e:
07:9e:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:03:59 2025 by rpki-client