Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3866BC836DE11EC818B026AD8A014CE.roa
File: D3866BC836DE11EC818B026AD8A014CE.roa (raw, json)
Hash identifier: TxCM7Skrd+7DF2aJoykd/cKVCrq7xBgdqZ5btGKsf8g=
Subject key identifier: 71:3A:1E:88:AA:5C:C4:28:ED:73:37:27:6E:E8:F7:51:FA:8F:69:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3866BC836DE11EC818B026AD8A014CE.roa
Signing time: Wed 27 Oct 2021 04:32:00 +0000
ROA not before: Wed 27 Oct 2021 04:31:57 +0000
ROA not after: Thu 27 Oct 2022 04:31:57 +0000
asID: 58895
IP address blocks: 45.206.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:31:57 2021 GMT
Not After : Oct 27 04:31:57 2022 GMT
Subject: CN=6178d640-2683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:d5:55:00:ae:de:1e:c4:56:d2:7e:f9:c3:
8c:0e:bc:03:54:df:0a:f3:b2:75:42:2f:01:c6:a1:
b0:06:41:6f:60:3b:08:24:09:0c:49:bf:85:d3:fa:
84:06:88:1a:e8:85:20:b6:69:92:32:fb:1b:2b:8e:
63:e2:b1:ab:03:56:af:69:9a:d4:ec:e8:30:a8:47:
e8:36:5f:6f:4b:29:19:6a:52:0c:1e:3e:1c:65:64:
94:43:09:b2:4f:33:c6:12:b4:30:59:30:e9:ae:b6:
8b:1e:53:2c:cf:9b:61:9b:15:df:9a:0c:fa:d2:7f:
91:fb:41:b2:19:44:28:82:b0:95:25:d1:e6:5c:fd:
80:35:01:79:ce:1e:dc:91:55:22:d9:2b:c4:c2:1f:
32:37:c4:47:d4:ad:2c:5a:c1:9b:08:14:ec:e6:db:
1e:2f:fa:54:3d:98:44:4a:af:c7:f4:d3:f2:95:54:
ba:ea:cb:02:2a:b7:12:cd:c7:52:76:5f:cc:9a:43:
76:6f:8c:fc:21:3c:a0:b3:90:83:70:11:fb:34:61:
95:3d:0a:0f:f8:fb:60:7c:8b:12:d9:8a:c3:d9:3b:
f5:8c:5c:6d:a6:02:c6:49:95:52:a4:32:cd:6a:3c:
88:24:6a:8c:98:d4:87:de:54:36:aa:91:9d:61:75:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3A:1E:88:AA:5C:C4:28:ED:73:37:27:6E:E8:F7:51:FA:8F:69:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3866BC836DE11EC818B026AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.186.0/24
Signature Algorithm: sha256WithRSAEncryption
84:06:90:eb:d5:f3:d4:3d:69:c2:43:8a:b0:f2:2f:6e:4c:d3:
ee:77:fb:03:a1:17:af:cd:d0:40:c2:d0:56:c1:1c:36:93:6a:
a6:49:5c:af:c9:c2:f5:cb:17:ed:94:84:a3:1d:a1:30:8b:e3:
0c:fa:61:bf:ba:03:bb:3f:26:35:bd:10:ee:18:eb:e5:98:09:
2a:a6:e7:a1:3d:a2:4d:1a:e5:f4:ba:08:94:93:c4:a8:e8:f1:
d5:01:3d:11:7d:bd:44:79:30:4d:b4:f9:10:07:f4:e9:c3:b9:
c6:62:25:9d:fe:71:68:b0:b6:f0:6d:59:61:17:e3:83:52:23:
2f:8b:fa:08:b0:a0:d7:3f:8e:0f:7d:fd:4f:c2:c2:bc:4c:b6:
00:f8:5a:b7:5c:14:01:ec:40:39:25:b3:c4:e8:26:d2:a7:e0:
40:3c:9f:4a:7c:dd:9a:88:2e:ed:47:ca:05:19:16:38:68:10:
17:a2:24:51:f2:6d:40:a5:0f:e5:1c:bc:aa:ef:bc:74:71:47:
d6:34:70:91:47:51:33:d3:4e:0c:d2:bc:44:5a:ba:ee:17:b6:
c1:d3:b4:d4:37:8a:2e:d4:4b:38:aa:4d:bf:54:cc:6b:e3:c1:
45:d6:c1:95:31:d8:21:66:e5:5e:61:bd:f6:03:f4:f4:ab:d9:
34:8e:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:42:32 2025 by rpki-client