Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C65C3544FA6D11EF9A43CC68762E951A.roa
File: C65C3544FA6D11EF9A43CC68762E951A.roa (raw, json)
Hash identifier: /sy5wSklnBPXQXBXRPzIHdyZH/aUrn7EW0pKOLqKkgQ=
Subject key identifier: 8C:CF:A3:C9:DB:9C:47:36:D6:4A:CA:13:CF:1F:50:01:7F:1D:90:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014382
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C65C3544FA6D11EF9A43CC68762E951A.roa
Signing time: Thu 06 Mar 2025 09:31:26 +0000
ROA not before: Thu 06 Mar 2025 09:31:22 +0000
ROA not after: Tue 25 Mar 2025 09:31:22 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
156.235.80.0/21 maxlen: 24
156.238.136.0/21 maxlen: 24
156.252.8.0/24 maxlen: 24
156.252.9.0/24 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.12.0/24 maxlen: 24
156.252.13.0/24 maxlen: 24
156.255.80.0/24 maxlen: 24
156.255.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82818 (0x14382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 09:31:22 2025 GMT
Not After : Mar 25 09:31:22 2025 GMT
Subject: CN=67c96b6e-c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:42:42:07:69:9f:10:da:ba:b9:cb:9f:95:
99:b9:cb:ce:8a:85:5b:b0:b9:89:b0:71:8c:bb:f4:
13:6c:79:7f:fe:7b:a5:2c:67:44:c8:28:4f:3f:dd:
df:a4:47:cd:03:8d:9f:b4:70:47:ae:02:03:53:da:
4d:2d:75:99:88:0d:a5:5e:c3:f5:6d:19:67:de:c4:
bf:35:31:62:00:cd:c9:83:b9:51:91:28:93:16:de:
31:1b:1e:bb:a6:7a:e6:b6:96:af:5b:02:03:59:08:
14:7d:64:51:7f:8e:37:cf:ea:7e:ab:0b:4a:9d:6a:
ef:e0:04:fa:66:0f:b0:2c:29:12:36:19:55:79:13:
28:0b:88:9d:b8:dd:f1:78:f2:37:d8:b4:52:3e:3a:
b7:41:05:88:af:52:e5:d9:07:43:f6:1a:46:07:a6:
d5:5c:3c:20:8a:af:4c:5f:e6:21:a7:2d:60:3e:24:
81:87:85:a9:3a:ca:db:bc:e8:49:4a:74:22:1f:fe:
5e:71:97:9b:5e:f0:02:c4:24:b9:47:62:0b:b4:90:
12:49:a5:a4:dd:1c:a9:c5:f5:dd:76:71:94:10:ab:
7a:e1:90:f5:9e:ce:ee:47:ec:4d:0c:e6:a6:6f:01:
0d:00:d1:c4:e9:8d:b9:a8:59:ae:5c:ea:89:5e:f8:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:A3:C9:DB:9C:47:36:D6:4A:CA:13:CF:1F:50:01:7F:1D:90:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C65C3544FA6D11EF9A43CC68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
156.235.80.0/21
156.238.136.0/21
156.252.8.0-156.252.10.255
156.252.12.0/23
156.255.80.0/24
156.255.84.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f1:da:7a:02:c0:2c:52:4e:16:b7:13:7e:29:25:f8:1f:2e:
bf:a3:bb:5c:f4:ad:e6:fb:99:28:8e:26:3c:cd:4b:6d:eb:85:
ba:ba:70:54:6c:d4:5a:ad:4d:a2:f3:62:38:ce:0f:08:d1:3c:
9b:d6:f9:6f:38:bc:05:a1:79:39:de:25:b7:ee:22:4a:f9:82:
20:25:0e:7e:c3:ef:1c:30:16:f0:6c:71:49:ac:c0:36:85:c5:
a0:fd:9d:ed:7c:f4:3f:fa:03:2b:56:da:9a:67:ef:56:2e:6f:
6c:dc:7b:bc:5f:9b:44:a4:77:f5:48:22:a3:78:73:df:e1:1a:
4c:23:c4:c4:92:2b:64:42:16:9c:77:d7:b7:84:26:24:f0:86:
f9:d3:9e:1f:e7:4e:cd:87:2b:51:36:af:7f:89:09:f6:cd:50:
b9:1b:73:32:35:9d:ab:f3:ab:c5:7e:c4:e4:98:88:17:cc:76:
ca:1a:fd:2c:c0:41:a7:c4:86:41:bc:18:47:63:1d:f3:44:cf:
e1:f8:d2:ab:9c:3f:ec:a0:48:a5:77:a9:bb:f2:d4:26:81:67:
2b:f1:2b:75:c8:7b:70:24:c2:16:e8:70:80:55:cd:fd:35:22:
b2:15:1a:b3:c2:32:26:4f:6c:15:cf:10:75:06:07:f4:ee:b1:
d9:cc:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:49:34 2025 by rpki-client