Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDF84B437CB11F0A6B19899DAE4EC9C.roa
File: 6FDF84B437CB11F0A6B19899DAE4EC9C.roa (raw, json)
Hash identifier: gJHyXqZ0h5tR1apH+QKfPNGD9b/YB6eDzkC+H32BTJI=
Subject key identifier: E8:1E:30:1D:D1:56:A9:86:A5:61:A4:D1:00:37:22:FA:3D:84:2C:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDF84B437CB11F0A6B19899DAE4EC9C.roa
Signing time: Fri 23 May 2025 11:45:35 +0000
ROA not before: Fri 23 May 2025 11:45:30 +0000
ROA not after: Mon 02 Jun 2025 11:45:30 +0000
asID: 138456
IP address blocks: 45.202.194.0/23 maxlen: 24
45.202.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87748 (0x156c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 11:45:30 2025 GMT
Not After : Jun 2 11:45:30 2025 GMT
Subject: CN=68305fdf-af1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:57:37:2e:fd:70:06:f5:21:00:22:73:09:
94:1e:03:ac:84:de:5f:42:52:1c:f4:b7:fb:0f:9f:
b4:5e:dd:ed:6b:ac:56:b5:99:5b:4e:d8:ff:55:60:
a6:48:7f:9e:2c:13:80:90:13:f4:8d:98:de:aa:78:
cf:1a:43:36:0e:30:78:a9:2e:e8:15:99:cf:c7:6d:
24:30:2c:52:39:0d:18:aa:c3:2d:7e:a9:24:38:d2:
2d:0b:44:36:62:37:de:1d:96:ff:04:92:82:51:ba:
09:45:16:24:a3:d6:39:5e:5a:55:94:94:37:f4:86:
e5:88:d6:80:3e:3d:8e:29:c8:1c:4d:4f:d8:c6:ed:
d6:9d:30:53:53:a2:38:48:29:1c:3c:bd:9a:6a:be:
79:ec:b1:67:af:4f:8c:68:ca:44:73:82:be:a5:2e:
b5:af:5c:93:70:52:63:72:70:cb:ed:b4:81:11:8a:
6e:dc:46:24:41:da:cf:ab:ec:c4:2a:8f:33:c8:44:
64:49:1e:7c:0b:33:f2:7e:ca:be:07:a6:63:12:e9:
65:67:c3:cb:72:89:13:5f:c4:87:36:47:5c:f0:40:
51:ce:1c:c1:5b:ba:2e:30:5b:b4:f9:a6:3d:48:dc:
77:ec:f5:b1:d2:2b:24:93:73:92:ba:11:0c:27:c6:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:30:1D:D1:56:A9:86:A5:61:A4:D1:00:37:22:FA:3D:84:2C:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDF84B437CB11F0A6B19899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.194.0-45.202.196.255
Signature Algorithm: sha256WithRSAEncryption
03:48:d2:6e:4c:c4:ec:dc:fb:31:dc:29:50:13:2c:65:72:a1:
8b:96:94:8f:f2:1f:db:c4:a0:88:3c:3d:84:8e:53:4e:f4:be:
66:c0:1b:ad:18:1e:67:8d:04:78:db:fa:04:11:cf:2b:4f:04:
b2:70:64:7d:dc:db:be:e7:51:ec:a8:c0:99:9c:f6:b9:66:96:
95:c0:ef:57:d7:20:dc:7f:c4:48:5e:64:dd:4a:d8:0c:fb:4c:
a8:9e:b9:79:44:ae:0e:55:aa:08:01:a0:e3:7d:4a:c9:1f:f9:
1e:9f:78:5f:ea:a6:54:cc:ca:9d:18:00:09:b8:46:9c:4f:89:
a2:27:13:34:7e:37:ef:ff:20:25:d4:62:ac:3b:79:e2:a1:32:
36:0a:23:e8:9d:e0:9e:34:c1:a3:87:93:4c:7b:22:e5:c7:a1:
ed:a7:25:ee:a5:82:46:89:39:2f:e1:71:3a:0d:06:04:7d:75:
9e:04:94:b1:6a:95:79:97:26:1f:fb:af:8e:fa:05:de:37:00:
2b:cd:c7:83:59:dc:df:55:d7:a7:b1:da:0d:83:d9:1e:40:54:
57:ec:21:8a:f9:cd:10:d5:94:94:0a:a1:e9:ce:bf:45:8e:01:
1a:75:b2:87:97:f2:87:55:3f:75:68:1a:4b:8b:f2:63:88:57:
b0:c7:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:22 2025 by rpki-client