Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1D263636EA11EC8D451E7DD8A014CE.roa
File: 9A1D263636EA11EC8D451E7DD8A014CE.roa (raw, json)
Hash identifier: 3gvZ3JI71aMD4QKjGDMH5uUT8JGQsR/H52Ma9m5Ybn8=
Subject key identifier: F9:D8:EC:C8:9F:F4:DA:52:12:2C:4F:54:2C:73:A5:7F:FB:31:69:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1D263636EA11EC8D451E7DD8A014CE.roa
Signing time: Wed 27 Oct 2021 05:56:18 +0000
ROA not before: Wed 27 Oct 2021 05:56:14 +0000
ROA not after: Thu 27 Oct 2022 05:56:14 +0000
asID: 58895
IP address blocks: 45.206.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3065 (0xbf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 05:56:14 2021 GMT
Not After : Oct 27 05:56:14 2022 GMT
Subject: CN=6178ea02-43a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:68:fb:2d:a2:57:2e:3f:3b:11:9d:73:18:
08:38:fb:12:1a:b6:0f:17:07:7c:33:76:fd:3c:86:
9c:21:87:bf:88:91:2e:53:2b:a9:cb:5f:16:56:48:
ac:9e:b4:46:4d:cb:d7:2f:e4:43:fc:13:0f:6a:f9:
02:2e:56:0e:99:88:24:93:b1:59:dd:d8:b6:d7:5c:
e3:c3:b1:26:2d:54:e0:d9:e5:c4:f8:ed:b6:40:ef:
78:c3:fd:79:a9:94:5b:ec:7a:f7:98:7c:41:d5:c1:
82:36:62:ce:8f:25:40:1d:74:c1:12:81:a6:09:ae:
bc:42:e4:1d:04:fe:64:cf:af:e6:59:44:e1:d1:ad:
05:7e:0a:ca:c8:13:81:10:db:4d:e5:cb:8a:8b:e7:
de:34:af:9d:16:ad:7f:0b:ac:9b:c2:84:51:43:3a:
e7:81:d6:db:fe:61:ed:38:b9:bb:fa:05:b7:60:7e:
16:66:2e:85:41:62:a4:34:d5:6d:71:53:99:7a:c7:
12:42:32:e9:62:03:f4:a2:2d:35:eb:2a:4a:fa:a0:
d6:5d:6c:4f:08:df:6b:66:df:d9:d5:87:28:51:f5:
c2:6a:2a:0e:e4:50:64:d7:e1:93:fc:8f:56:f9:81:
fb:bd:23:bb:fb:cf:02:77:06:4d:43:d6:94:5f:17:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:EC:C8:9F:F4:DA:52:12:2C:4F:54:2C:73:A5:7F:FB:31:69:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1D263636EA11EC8D451E7DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.232.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f7:db:8a:02:75:84:0a:4c:8f:b7:1a:1e:66:79:b6:63:7e:
ea:e5:60:01:d3:9f:5d:34:27:6c:ff:70:e2:55:9d:f4:13:a2:
ff:a6:a4:c0:c8:11:a3:e1:e2:be:c8:11:ee:0b:32:ad:fe:e3:
48:1d:39:89:97:70:5b:63:b6:04:df:3c:c1:d5:2a:eb:2f:3d:
38:b3:17:ed:e3:22:fc:72:cf:4e:f9:68:22:e4:a7:25:9a:22:
19:04:51:ad:39:ef:b1:2a:69:10:5a:4e:ef:98:c9:06:e0:06:
18:36:24:47:c6:cd:07:b8:2a:da:97:5c:3d:cf:0f:99:05:06:
34:6c:11:fd:60:1b:ea:7e:52:e1:c3:3a:0c:f1:a8:d5:d5:0e:
7c:39:47:e1:9e:76:fe:53:f7:16:b7:9e:8c:7c:1b:a0:ca:15:
be:36:43:3a:cd:65:c7:c4:b7:bb:b7:47:23:0b:81:e3:f3:45:
c1:6f:8e:57:ea:52:38:52:31:af:ba:3e:0e:9e:06:24:af:e9:
e9:ca:ef:f9:30:8e:26:18:f2:dd:12:6a:5b:11:4a:8d:4d:a7:
4d:e3:d7:7c:49:ca:0c:87:30:20:a2:f1:d2:53:89:14:db:56:
54:36:ec:69:cf:95:4f:89:e5:91:91:b4:e4:f0:39:37:9a:76:
ef:2a:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:42:10 2025 by rpki-client