Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A698526C03DA11F0ABD1C2B3762E951A.roa
File: A698526C03DA11F0ABD1C2B3762E951A.roa (raw, json)
Hash identifier: x6LLqcAY20KtYr19l7ijiC4AJ4U+FkahcHnvQ3gC80Q=
Subject key identifier: D2:B0:1E:A4:62:80:8C:22:9B:8E:A2:C1:F3:13:F0:2C:83:03:97:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014683
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A698526C03DA11F0ABD1C2B3762E951A.roa
Signing time: Tue 18 Mar 2025 09:23:28 +0000
ROA not before: Tue 18 Mar 2025 09:23:24 +0000
ROA not after: Wed 02 Apr 2025 09:23:24 +0000
asID: 39600
IP address blocks: 156.237.106.0/24 maxlen: 24
156.237.107.0/24 maxlen: 24
156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.112.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
156.237.122.0/24 maxlen: 24
156.237.123.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83587 (0x14683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 09:23:24 2025 GMT
Not After : Apr 2 09:23:24 2025 GMT
Subject: CN=67d93b90-b8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:fa:42:e4:c1:66:dc:43:34:de:52:c4:bd:
8e:4f:aa:fc:ed:2d:c5:23:98:73:1d:81:ac:7c:2a:
d8:79:a2:50:83:31:cb:2c:49:15:61:2d:02:fb:b8:
77:a9:f5:23:ad:b1:b7:a2:32:7b:38:02:e8:91:6a:
0e:8a:1c:a5:4f:ab:9a:d1:63:0a:0b:0d:30:a5:e3:
07:41:97:23:a3:15:27:42:ee:ba:bc:eb:2d:4b:8e:
2f:26:df:93:9c:03:ab:68:a4:00:cb:4e:6c:71:28:
2d:0e:9e:45:cc:8e:de:61:10:97:d2:40:44:a0:ff:
c1:9f:83:a5:f7:9d:09:18:9f:e6:ef:0a:03:23:28:
9a:2f:7c:ab:de:c5:7a:3a:fd:f0:35:f2:a7:3c:95:
d2:04:c7:fd:52:a5:52:32:0c:da:c3:75:7d:75:7a:
27:db:33:b3:cb:f6:27:bb:03:2a:fe:11:b1:6a:79:
fe:76:49:e0:4c:7a:3a:26:a1:db:b2:3d:9c:a1:62:
1f:29:a6:ce:5b:d3:19:70:cb:43:48:56:4c:8e:f4:
e9:6e:ea:a3:34:5b:31:f8:22:5b:42:60:17:9d:15:
5e:13:f6:2c:e2:7d:30:1e:59:16:ff:a0:69:0c:ff:
77:2a:0b:b5:e6:fc:97:6b:34:be:35:97:48:b5:da:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:1E:A4:62:80:8C:22:9B:8E:A2:C1:F3:13:F0:2C:83:03:97:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A698526C03DA11F0ABD1C2B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0-156.237.125.255
Signature Algorithm: sha256WithRSAEncryption
45:02:a7:d5:a1:31:2a:c7:4d:78:e7:97:ab:48:8e:ea:ff:ee:
31:ee:13:f3:00:1a:45:01:0b:b7:46:d3:3b:ce:c2:d6:ad:df:
6d:66:36:2d:0e:db:f9:13:1d:e8:bb:2c:d3:28:d7:6a:d9:7d:
36:f1:b1:72:a1:d3:d0:19:c9:17:aa:18:77:56:46:a0:84:81:
3e:05:0d:c6:eb:f0:e1:28:4c:d3:df:4b:93:16:b4:a1:f1:99:
dd:13:8f:cb:71:1a:1b:23:5f:23:1a:b6:7b:89:e1:7c:42:ae:
a7:ad:6e:52:eb:97:10:56:d3:f4:11:7e:c9:32:df:08:c7:4b:
4f:41:9b:d3:f5:a4:b2:6d:50:2c:1a:fc:ba:97:f6:df:48:38:
33:08:13:2d:88:8d:ab:e4:b9:93:a0:5c:ab:e0:68:3e:d9:7b:
ba:9d:e3:6e:e9:af:69:36:41:8d:ad:c4:30:37:37:24:c1:a3:
54:a3:ed:6d:78:90:39:f4:3c:a9:fc:a3:dd:09:5e:1e:be:52:
21:d0:23:c8:cc:7f:54:0e:1a:c8:1e:33:15:8b:35:a2:92:07:
71:7b:34:10:9e:83:6d:00:bf:0b:84:8f:29:85:60:bf:98:a3:
47:03:91:50:47:20:1e:dc:d8:66:8b:77:5f:2d:32:a9:b0:5f:
d1:79:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:29 2025 by rpki-client