Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EEE4C2E0F9C11F0A4F09C93762E951A.roa
File: 9EEE4C2E0F9C11F0A4F09C93762E951A.roa (raw, json)
Hash identifier: smPOIU7L7HwkHvAf0/YnoCM1/5fzRWMrrtTzEVfIpPU=
Subject key identifier: 17:B1:6D:4F:16:7D:EA:0B:67:1A:72:59:03:0D:0E:F4:07:8F:FC:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014967
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EEE4C2E0F9C11F0A4F09C93762E951A.roa
Signing time: Wed 02 Apr 2025 08:29:41 +0000
ROA not before: Wed 02 Apr 2025 08:29:35 +0000
ROA not after: Fri 11 Apr 2025 08:29:35 +0000
asID: 200373
IP address blocks: 156.228.112.0/24 maxlen: 24
156.228.113.0/24 maxlen: 24
156.228.114.0/24 maxlen: 24
156.228.115.0/24 maxlen: 24
156.228.116.0/24 maxlen: 24
156.228.117.0/24 maxlen: 24
156.228.124.0/24 maxlen: 24
156.228.125.0/24 maxlen: 24
156.228.171.0/24 maxlen: 24
156.228.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84327 (0x14967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 08:29:35 2025 GMT
Not After : Apr 11 08:29:35 2025 GMT
Subject: CN=67ecf575-c8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:4d:8b:2b:f8:33:ee:29:ec:6d:c1:56:08:
93:88:d2:01:a9:f3:e6:68:62:bd:03:59:f2:f3:46:
d9:cd:ec:3e:38:8f:60:e2:0a:19:1f:3c:36:2e:d5:
f7:65:7d:84:64:35:86:a3:8b:ec:39:1f:23:f2:f7:
7a:b5:77:26:6a:6e:c5:09:9b:a5:17:8c:f6:10:00:
ba:d3:e2:9a:58:62:69:4d:a3:c6:a3:7c:80:f5:b7:
3a:87:da:dd:51:50:30:ee:84:8b:bd:a9:8e:95:23:
21:48:f6:9b:3d:f0:ef:1b:91:27:c2:c7:80:5c:5e:
3b:5a:d9:9c:7b:90:e2:a2:f3:e6:1d:87:94:25:3d:
81:43:2d:4c:98:0a:2c:e3:c8:b2:1f:c9:55:bd:0c:
c7:b6:81:92:89:04:3e:40:b8:3e:93:07:1d:eb:36:
20:a4:06:2a:e2:9e:d3:74:c0:5b:16:e4:4c:0e:2b:
30:5e:db:a2:c6:42:df:18:65:4c:d9:22:eb:0c:56:
f9:49:5b:4a:1f:b3:e1:07:56:9a:f4:12:cf:59:32:
77:97:88:d7:db:01:26:19:f0:a2:b3:71:cf:9e:ea:
6f:0e:c0:73:4c:1a:7a:ab:62:af:dd:69:15:f3:09:
62:af:b2:c3:df:67:8e:44:cf:f4:69:02:ce:4c:c9:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:6D:4F:16:7D:EA:0B:67:1A:72:59:03:0D:0E:F4:07:8F:FC:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EEE4C2E0F9C11F0A4F09C93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.112.0-156.228.117.255
156.228.124.0/23
156.228.171.0/24
156.228.175.0/24
Signature Algorithm: sha256WithRSAEncryption
78:90:60:df:6e:d3:05:80:33:af:05:bc:88:ce:eb:82:99:f8:
10:71:aa:98:38:f8:b8:ac:d5:cd:ab:3e:f9:1c:03:5d:90:55:
05:7f:e6:b5:f0:ca:10:57:b1:9c:45:01:c1:ba:92:ad:6b:1f:
df:e9:1a:72:ca:73:42:42:0b:71:71:52:e6:5a:1b:43:5d:3e:
59:8b:15:d5:28:e8:c8:f3:17:59:be:b4:1b:96:f5:1b:3e:56:
19:f0:e1:ba:d5:d9:17:12:12:ca:b0:c6:e2:ed:a9:b7:53:13:
b9:c9:11:08:b5:0a:48:f5:4d:3f:d4:fd:e5:77:ab:5e:02:6a:
7e:b3:e1:37:ef:e4:86:5b:34:52:6a:fd:00:6d:92:96:6c:14:
3c:f1:59:f4:cc:71:12:e0:1c:33:6c:1c:01:35:9f:7d:c5:31:
8c:36:54:7b:cf:9b:2d:d7:4b:98:93:5c:f2:41:50:e1:20:c9:
2c:df:f3:36:30:67:cb:75:50:47:48:94:f1:86:4b:d3:cf:de:
dc:58:1d:af:ab:cb:a6:c6:34:b2:91:58:57:03:11:4d:d7:9d:
20:f0:eb:1b:25:26:4b:a9:49:01:6f:ae:89:fc:c3:c8:00:2d:
fa:3f:82:31:25:95:12:ab:eb:9f:37:46:6e:71:0a:fa:3e:55:
2e:55:f6:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:47:19 2025 by rpki-client