Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E8A32D8F8D911EFA99156BD762E951A.roa
File: 7E8A32D8F8D911EFA99156BD762E951A.roa (raw, json)
Hash identifier: qjr7iXEoMUEoGTEFy+hgsWJJ4ghNJLPtbdUGa5bh6WM=
Subject key identifier: 9E:91:15:50:CB:49:2D:FF:21:04:A6:D1:84:40:1B:61:02:C6:3B:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E8A32D8F8D911EFA99156BD762E951A.roa
Signing time: Tue 04 Mar 2025 09:17:29 +0000
ROA not before: Tue 04 Mar 2025 09:17:24 +0000
ROA not after: Fri 04 Apr 2025 09:17:24 +0000
asID: 200373
IP address blocks: 156.228.96.0/24 maxlen: 24
156.228.97.0/24 maxlen: 24
156.228.98.0/24 maxlen: 24
156.228.99.0/24 maxlen: 24
156.228.101.0/24 maxlen: 24
156.228.102.0/24 maxlen: 24
156.228.103.0/24 maxlen: 24
156.228.104.0/24 maxlen: 24
156.228.105.0/24 maxlen: 24
156.228.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82667 (0x142eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 09:17:24 2025 GMT
Not After : Apr 4 09:17:24 2025 GMT
Subject: CN=67c6c528-2c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:ec:80:08:ca:ba:09:98:5f:13:fa:37:f0:
f0:57:1c:71:2b:56:90:53:b7:0a:28:3b:a5:68:4c:
7d:05:3e:f2:d8:5a:14:fc:e8:c7:6f:6f:23:50:ce:
3d:b2:81:63:9b:49:77:56:ef:f9:f3:17:85:e9:94:
46:7a:2d:2d:30:c7:62:5a:c4:27:a5:97:51:8b:22:
d9:f0:53:cf:28:6c:53:c5:59:b0:b7:33:da:3d:ed:
47:be:0f:17:7b:93:c7:a8:fb:4f:f8:19:c3:c3:73:
5c:b4:03:af:5d:7f:55:5d:3c:02:83:b4:82:63:78:
b4:a6:26:b2:01:53:c0:bb:01:19:a5:04:9a:97:eb:
10:2b:74:97:a1:0d:39:b8:9c:5e:f0:fd:e4:8a:8d:
9d:b0:b0:b8:36:65:24:45:7e:13:55:ed:a4:10:f5:
65:28:92:b4:a3:41:37:71:a1:49:23:d1:af:68:47:
ad:44:8f:ea:64:55:ef:70:96:f0:75:b4:65:b3:13:
80:0f:5f:62:95:a3:1b:58:4e:8a:4c:80:0b:12:f1:
4b:b2:a6:df:5d:89:7d:b3:a6:aa:09:cd:2b:4f:d4:
9e:74:d4:8f:2b:ea:b2:05:f7:56:c5:34:2c:c5:4e:
88:2f:40:f5:19:5c:bf:a4:91:13:ad:de:70:39:33:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:15:50:CB:49:2D:FF:21:04:A6:D1:84:40:1B:61:02:C6:3B:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E8A32D8F8D911EFA99156BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.96.0/22
156.228.101.0-156.228.105.255
156.228.119.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e3:dc:a3:17:d3:e8:fa:07:93:4f:8d:16:ea:9b:28:ad:46:
0a:de:14:53:d2:ab:e0:ce:d8:ef:91:2b:d6:81:5d:34:84:ba:
23:d7:19:94:c8:c8:ad:a7:58:de:d4:d0:97:38:aa:2f:55:5e:
88:2a:09:38:3d:76:58:0b:e7:2d:35:85:0b:8d:f2:b3:11:f2:
94:d6:ce:8c:a2:de:d5:a3:72:8d:c8:c7:89:1d:e1:c1:a9:91:
e8:f1:d3:ab:da:f9:43:75:c9:2d:13:e6:8d:55:cf:24:5b:40:
2a:43:f1:a7:ed:d5:ac:1a:3f:3b:4a:a5:6b:c5:e3:3c:c2:72:
ff:47:8d:cf:d7:16:99:85:fb:17:83:85:25:d0:a3:68:d4:81:
b2:6f:eb:f0:b9:fc:03:7e:b5:d5:8d:d5:b1:e1:aa:ac:a5:cb:
37:65:8d:8a:79:a3:a9:27:d1:9b:1d:bc:93:83:8a:52:a9:19:
a1:62:50:aa:c7:d9:07:2c:1e:25:bf:18:b9:9e:68:d8:89:9c:
2a:fa:5b:c4:43:af:ed:02:ad:54:6f:8b:f1:50:42:bd:99:b1:
7f:e8:a2:b6:b8:a5:2a:59:e5:98:2d:5f:43:83:cc:a7:96:a5:
6e:bd:de:58:3c:84:c3:ae:39:14:ac:92:5c:7f:ba:51:13:49:
2e:c2:2f:51
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAULrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA0MDkxNzI0WhcNMjUwNDA0MDkxNzI0WjAYMRYw
FAYDVQQDEw02N2M2YzUyOC0yYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1HzsgAjKugmYXxP6N/DwVxxxK1aQU7cKKDulaEx9BT7y2FoU/OjHb28j
UM49soFjm0l3Vu/58xeF6ZRGei0tMMdiWsQnpZdRiyLZ8FPPKGxTxVmwtzPaPe1H
vg8Xe5PHqPtP+BnDw3NctAOvXX9VXTwCg7SCY3i0piayAVPAuwEZpQSal+sQK3SX
oQ05uJxe8P3kio2dsLC4NmUkRX4TVe2kEPVlKJK0o0E3caFJI9GvaEetRI/qZFXv
cJbwdbRlsxOAD19ilaMbWE6KTIALEvFLsqbfXYl9s6aqCc0rT9SedNSPK+qyBfdW
xTQsxU6IL0D1GVy/pJETrd5wOTM3JwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJ6R
FVDLSS3/IQSm0YRAG2ECxjunMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RThBMzJEOEY4RDkxMUVGQTk5MTU2QkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnORgMAwDBACc5GUDBAGc5GgD
BACc5HcwDQYJKoZIhvcNAQELBQADggEBAGLj3KMX0+j6B5NPjRbqmyitRgreFFPS
q+DO2O+RK9aBXTSEuiPXGZTIyK2nWN7U0Jc4qi9VXogqCTg9dlgL5y01hQuN8rMR
8pTWzoyi3tWjco3Ix4kd4cGpkejx06va+UN1yS0T5o1VzyRbQCpD8aft1awaPztK
pWvF4zzCcv9Hjc/XFpmF+xeDhSXQo2jUgbJv6/C5/AN+tdWN1bHhqqylyzdljYp5
o6kn0ZsdvJODilKpGaFiUKrH2QcsHiW/GLmeaNiJnCr6W8RDr+0CrVRvi/FQQr2Z
sX/oora4pSpZ5ZgtX0ODzKeWpW693lg8hMOuORSsklx/ulETSS7CL1E=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:23 2025 by rpki-client