Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A42B9606F8D611EF8FC5E1AA762E951A.roa
File: A42B9606F8D611EF8FC5E1AA762E951A.roa (raw, json)
Hash identifier: TixvSWZVRiQss3ActucvRp0WMfWWo/mhe2g7b8MiKO4=
Subject key identifier: E0:5A:5D:B1:BB:23:B4:94:49:97:A3:98:CA:27:BA:2B:45:FC:00:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A42B9606F8D611EF8FC5E1AA762E951A.roa
Signing time: Tue 04 Mar 2025 08:57:03 +0000
ROA not before: Tue 04 Mar 2025 08:56:59 +0000
ROA not after: Fri 04 Apr 2025 08:56:59 +0000
asID: 200373
IP address blocks: 156.228.112.0/24 maxlen: 24
156.228.113.0/24 maxlen: 24
156.228.114.0/24 maxlen: 24
156.228.115.0/24 maxlen: 24
156.228.116.0/24 maxlen: 24
156.228.117.0/24 maxlen: 24
156.228.124.0/24 maxlen: 24
156.228.125.0/24 maxlen: 24
156.228.171.0/24 maxlen: 24
156.228.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82651 (0x142db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 08:56:59 2025 GMT
Not After : Apr 4 08:56:59 2025 GMT
Subject: CN=67c6c05f-61bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:60:40:e2:45:d1:98:6e:5a:86:d7:e4:c4:
1b:1b:46:e8:02:44:5a:02:6d:67:5f:e5:d5:65:75:
22:09:4b:ad:98:1b:65:6c:db:c9:f4:8a:56:0e:ee:
56:30:8e:46:a1:72:1f:4f:b7:6b:3e:5c:15:5a:9f:
3b:3f:8c:0d:70:b5:ca:bc:a5:f8:03:9c:e9:72:bf:
cd:fa:04:84:1e:9a:0b:5c:37:35:b9:39:1f:63:ee:
ff:73:71:ac:7b:8c:a6:07:ec:86:53:e1:7c:00:67:
5f:af:8a:7f:2e:a1:5c:23:26:6a:e8:96:42:5b:4c:
1e:f8:a5:c4:00:2a:18:93:2c:7a:5d:3a:b3:4f:b4:
f5:64:6b:6c:42:3f:11:8f:48:9b:2f:a9:f2:66:aa:
74:58:ef:4e:22:6b:71:4b:07:d7:4b:b9:17:bf:2b:
0f:92:b3:4f:07:38:bf:a6:7e:42:48:77:02:2c:c4:
f6:5c:7c:8f:b0:30:de:03:31:a8:a2:8e:6c:dc:4f:
23:45:eb:b5:95:fc:82:88:b8:e5:33:b2:65:e1:7a:
d2:ea:d6:f1:eb:62:74:9d:94:c3:64:f5:64:f0:b3:
7a:e3:e3:cd:ce:3f:e1:13:69:70:60:92:eb:ac:d0:
38:9f:69:74:30:96:b7:61:c5:a2:e0:05:ea:4f:9d:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:5D:B1:BB:23:B4:94:49:97:A3:98:CA:27:BA:2B:45:FC:00:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A42B9606F8D611EF8FC5E1AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.112.0-156.228.117.255
156.228.124.0/23
156.228.171.0/24
156.228.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:04:f4:4e:bd:4d:2b:83:75:1f:f3:7a:16:18:52:e3:27:8c:
4c:25:20:e4:af:6f:64:71:d0:12:a9:38:3f:5b:b8:09:4a:e6:
f0:bb:ff:c7:24:51:d9:fb:bf:45:88:41:3e:f5:0b:bd:0a:d0:
f5:2d:ef:93:b2:c9:d6:3d:32:63:9f:7f:56:2e:8b:7d:c3:69:
d7:c2:04:72:d0:35:64:ac:3e:db:b6:c0:e2:b2:bb:d6:7d:b5:
f1:dc:6f:86:2b:d0:08:69:ed:eb:bf:d6:f7:97:6f:6f:b4:d4:
39:d9:95:83:7e:4e:91:e7:10:21:2d:c4:04:ea:e2:60:1c:8e:
c2:ea:fe:6b:ef:e8:5d:74:d5:a5:0e:4d:5e:71:56:ae:41:e3:
5e:68:81:ee:f5:db:75:9c:9f:74:0e:3b:95:6a:2b:41:c0:d3:
62:43:97:c2:e4:40:03:69:6b:d6:e5:ff:9a:25:6a:df:cb:0a:
a0:96:93:b0:a7:d7:68:c0:05:3b:6e:88:94:9e:d1:ca:c0:80:
ee:eb:ce:38:a8:01:ba:db:65:6d:d1:01:06:7e:e4:00:9c:b5:
1c:51:eb:8d:4c:35:79:4c:7c:91:0d:90:77:82:8b:53:0b:b5:
2a:f5:38:c1:a1:d9:7a:ca:bf:27:56:f0:11:ad:ba:ab:e0:a8:
f6:0b:c4:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:57 2025 by rpki-client