Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAB318CCFA6F11EFAD097776762E951A.roa
File: CAB318CCFA6F11EFAD097776762E951A.roa (raw, json)
Hash identifier: PMVkOGxDTqstjVancv9RiZCahx7+tfYVbzJ3BOpHmL8=
Subject key identifier: 81:82:F1:27:33:DF:6A:92:AA:72:12:57:FF:B9:D0:2C:D3:B6:E8:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01438C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAB318CCFA6F11EFAD097776762E951A.roa
Signing time: Thu 06 Mar 2025 09:45:52 +0000
ROA not before: Thu 06 Mar 2025 09:45:48 +0000
ROA not after: Wed 19 Mar 2025 09:45:48 +0000
asID: 39600
IP address blocks: 156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82828 (0x1438c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 09:45:48 2025 GMT
Not After : Mar 19 09:45:48 2025 GMT
Subject: CN=67c96ed0-dd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:8d:99:dd:2e:13:23:d6:d4:96:08:71:91:
6b:e0:b0:41:7c:30:0d:c0:84:1b:f2:d3:5f:35:7d:
51:28:7e:82:ce:36:87:21:5b:9f:fa:97:93:15:12:
13:c2:b7:7d:93:0c:96:d3:6d:84:65:39:b6:b7:64:
44:48:4b:40:33:cb:6d:57:80:ab:ee:4c:6c:d9:12:
e7:41:ef:a2:f1:57:ed:05:5a:14:3d:c4:b9:22:73:
a6:6a:ac:b0:4f:ed:59:24:40:5a:21:ac:ef:fe:c4:
11:a1:3e:92:df:d7:29:78:69:b6:d8:d5:62:8d:81:
fd:18:e2:cd:f5:bd:dc:6c:76:5d:4f:ab:04:71:73:
c4:17:e4:7b:65:cd:c5:d6:98:8f:58:29:32:ec:91:
4a:b7:52:93:c3:85:5c:39:df:9e:74:54:ca:1e:b6:
6d:be:89:2e:cc:14:98:3b:26:dd:63:3e:b8:03:c8:
48:cc:69:94:ba:a8:89:af:53:06:87:13:66:b9:97:
c8:93:c2:b6:f2:4b:db:f0:f7:52:ed:15:55:62:27:
b6:f6:43:8f:2d:aa:7c:31:c2:58:fd:46:b3:6b:ce:
68:8c:24:8d:1e:74:88:20:c5:85:56:c3:66:ca:e5:
b0:38:b9:82:06:cf:3e:02:b7:59:cf:58:19:e3:ca:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:F1:27:33:DF:6A:92:AA:72:12:57:FF:B9:D0:2C:D3:B6:E8:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAB318CCFA6F11EFAD097776762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.108.0-156.237.110.255
156.237.113.0-156.237.119.255
Signature Algorithm: sha256WithRSAEncryption
4f:7c:ca:a9:bd:ac:32:68:31:2b:03:68:11:eb:f6:79:83:e1:
f9:59:0b:31:7e:12:d6:30:f6:bc:96:58:6e:69:37:50:6d:ac:
6d:ad:71:47:11:e0:c7:86:15:55:ab:c0:65:a5:fa:98:9a:12:
4a:f6:e6:9d:ac:f4:de:6a:af:44:44:6a:48:c5:6c:f3:42:ce:
65:1b:23:c5:66:43:2d:c9:dc:75:7c:99:30:8d:e6:d5:33:03:
9a:d6:dd:2d:f2:96:cd:2a:47:b9:47:b7:09:2c:ed:59:05:78:
31:87:2a:be:cf:71:1c:49:54:d0:fa:ab:f1:44:fb:9f:48:e4:
24:f0:4f:44:53:e7:8a:2d:26:d4:5d:8a:eb:0f:d3:24:45:8c:
c5:50:39:31:0e:2c:4c:be:01:5a:a4:cf:38:15:84:85:46:ca:
15:42:3b:3d:58:8e:0e:71:6e:5f:ea:bd:6e:80:5c:dc:9f:20:
ae:c4:23:a7:52:2f:f3:2e:a4:a3:c2:ab:45:f6:9d:80:2b:98:
78:a0:61:97:6d:5e:a9:ae:22:c4:e4:b0:5c:44:2c:12:6d:c3:
f6:c5:32:69:5e:99:58:e7:ef:d3:b8:08:49:fc:71:b2:57:85:
e2:e7:71:4a:56:0a:cc:86:e7:e6:14:55:1a:f8:cf:ba:7d:54:
12:0a:2b:48
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAUOMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA2MDk0NTQ4WhcNMjUwMzE5MDk0NTQ4WjAYMRYw
FAYDVQQDEw02N2M5NmVkMC1kZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx9+Nmd0uEyPW1JYIcZFr4LBBfDANwIQb8tNfNX1RKH6CzjaHIVuf+peT
FRITwrd9kwyW022EZTm2t2RESEtAM8ttV4Cr7kxs2RLnQe+i8VftBVoUPcS5InOm
aqywT+1ZJEBaIazv/sQRoT6S39cpeGm22NVijYH9GOLN9b3cbHZdT6sEcXPEF+R7
Zc3F1piPWCky7JFKt1KTw4VcOd+edFTKHrZtvokuzBSYOybdYz64A8hIzGmUuqiJ
r1MGhxNmuZfIk8K28kvb8PdS7RVVYie29kOPLap8McJY/Uaza85ojCSNHnSIIMWF
VsNmyuWwOLmCBs8+ArdZz1gZ48pKrwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFIGC
8Scz32qSqnISV/+50CzTtuj5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQUIzMThDQ0ZBNkYxMUVGQUQwOTc3NzY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAKc7WwDBACc7W4wDAMEAJzt
cQMEA5ztcDANBgkqhkiG9w0BAQsFAAOCAQEAT3zKqb2sMmgxKwNoEev2eYPh+VkL
MX4S1jD2vJZYbmk3UG2sba1xRxHgx4YVVavAZaX6mJoSSvbmnaz03mqvRERqSMVs
80LOZRsjxWZDLcncdXyZMI3m1TMDmtbdLfKWzSpHuUe3CSztWQV4MYcqvs9xHElU
0Pqr8UT7n0jkJPBPRFPnii0m1F2K6w/TJEWMxVA5MQ4sTL4BWqTPOBWEhUbKFUI7
PViODnFuX+q9boBc3J8grsQjp1Iv8y6ko8KrRfadgCuYeKBhl21eqa4ixOSwXEQs
Em3D9sUyaV6ZWOfv07gISfxxsleF4udxSlYKzIbn5hRVGvjPun1UEgorSA==
-----END CERTIFICATE-----
Generated at Sat May 10 05:05:00 2025 by rpki-client