Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AE80F36370B11F0BD336BB7DAE4EC9C.roa
File: 7AE80F36370B11F0BD336BB7DAE4EC9C.roa (raw, json)
Hash identifier: BvZKp/qF/FpyFlWqEETWuHNAKgfuP04FQqhk/UGxbkM=
Subject key identifier: C4:31:A7:13:45:B5:B9:37:C5:01:A5:A5:90:D7:D0:00:8C:1B:C9:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AE80F36370B11F0BD336BB7DAE4EC9C.roa
Signing time: Thu 22 May 2025 12:51:30 +0000
ROA not before: Thu 22 May 2025 12:51:25 +0000
ROA not after: Sun 01 Jun 2025 12:51:25 +0000
asID: 399077
IP address blocks: 156.240.246.0/24 maxlen: 24
156.240.247.0/24 maxlen: 24
156.240.248.0/24 maxlen: 24
156.240.249.0/24 maxlen: 24
156.240.250.0/24 maxlen: 24
156.240.251.0/24 maxlen: 24
156.240.252.0/24 maxlen: 24
156.240.253.0/24 maxlen: 24
156.240.254.0/24 maxlen: 24
156.240.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87723 (0x156ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 12:51:25 2025 GMT
Not After : Jun 1 12:51:25 2025 GMT
Subject: CN=682f1dd2-bb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:9b:3b:f7:2f:08:63:98:1a:fc:3c:a5:bf:
5a:03:f4:23:f6:29:9d:0d:7c:d1:82:4a:29:87:ee:
c7:92:94:0b:ff:1d:af:e0:9e:f0:92:cb:2d:87:b8:
2b:52:fa:a5:23:2f:76:4e:cb:65:f3:38:72:8b:82:
47:c1:47:63:39:89:fc:82:49:d6:c5:f9:f0:0f:4e:
82:f1:ec:e4:42:0f:de:bd:f3:22:4b:a6:21:a5:1f:
38:c7:94:41:51:67:2e:f1:6f:c6:2e:2e:b4:3e:fa:
06:f6:c4:60:49:8d:9e:1e:db:c1:01:f2:6a:0e:2c:
a3:c7:9b:9c:e8:a0:6d:e8:53:2c:d8:e7:d1:a6:c5:
c6:8e:83:af:bf:be:11:cd:8d:71:02:2c:f5:52:21:
79:96:96:52:47:2f:ee:cd:35:5d:ed:4a:47:00:3e:
e4:a0:7c:39:d3:f8:d3:fa:5f:c3:9f:2a:c4:57:14:
59:ec:92:7e:af:f0:4b:2b:66:3a:0a:99:a5:c3:49:
d4:b9:40:72:da:48:bf:63:d8:1b:1f:41:6a:bf:b8:
50:a3:2d:f0:0c:9d:10:de:33:5b:5e:be:11:ff:d5:
ab:06:c7:94:6e:45:0a:b3:0e:ff:da:d0:f9:b5:d6:
7e:55:72:b7:a7:25:09:28:f1:2f:c5:f7:e7:b4:c8:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:A7:13:45:B5:B9:37:C5:01:A5:A5:90:D7:D0:00:8C:1B:C9:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AE80F36370B11F0BD336BB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.246.0-156.240.255.255
Signature Algorithm: sha256WithRSAEncryption
a4:ac:be:22:39:9c:ad:4e:ce:29:20:bf:4f:26:e0:13:a1:14:
f9:5c:1f:35:65:da:69:bd:c4:72:9d:ca:65:f8:bc:33:a8:48:
12:5a:3a:2b:bc:19:7e:05:69:5d:d5:74:23:34:a6:25:40:99:
ee:de:6c:96:d2:c7:75:8a:dd:af:9f:9d:45:f7:f6:ff:c9:e7:
f6:18:9b:3d:9d:be:dc:2a:9b:f4:c5:8b:30:c6:23:34:50:ec:
27:63:e6:ec:13:c3:77:04:cf:d6:45:88:12:8c:ec:4d:71:14:
e2:3c:61:65:50:bc:0f:62:50:a2:7b:6f:bb:de:83:9e:48:67:
6f:73:dd:14:05:39:45:16:f0:6d:d8:3d:90:75:19:aa:81:2a:
4c:6f:53:b8:05:37:59:31:00:5b:68:ba:03:e0:8f:48:50:af:
5c:40:e4:d4:b9:05:f2:75:99:e9:e0:85:c3:62:7b:01:69:5f:
f4:93:c1:4d:2b:91:44:0c:46:c7:23:a3:82:b3:83:50:f1:ef:
b4:76:b3:93:0b:08:03:ea:cf:9d:54:40:1e:ad:87:d9:ed:5d:
f6:b2:79:37:92:50:63:b9:d0:64:b6:1a:06:ee:e7:35:a0:af:
61:36:1b:ab:5d:ac:fc:3f:c6:26:11:95:12:1e:66:ac:39:f0:
b4:86:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:42:20 2025 by rpki-client