Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7F36F7E408111F08A8A76C6DAE4EC9C.roa
File: E7F36F7E408111F08A8A76C6DAE4EC9C.roa (raw, json)
Hash identifier: Hd3/5PtvYnTzEwzUsHBSuZqN3Iu8s4hdgxVXpkv4jtc=
Subject key identifier: 3C:6D:74:9E:75:C7:27:39:FA:6F:EE:42:57:6A:33:AE:5E:11:48:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015990
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7F36F7E408111F08A8A76C6DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 13:51:54 +0000
ROA not before: Tue 03 Jun 2025 13:51:49 +0000
ROA not after: Fri 20 Jun 2025 13:51:49 +0000
asID: 27951
IP address blocks: 45.192.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88464 (0x15990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 13:51:49 2025 GMT
Not After : Jun 20 13:51:49 2025 GMT
Subject: CN=683efdfa-3242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:65:9b:32:ec:a0:32:51:da:74:85:5d:2d:
d8:2c:66:2c:48:57:7d:2e:82:ff:b2:a1:18:77:94:
bc:30:b1:e1:e2:78:53:bb:08:32:a6:27:0e:42:92:
ee:ea:b1:81:7c:27:b8:ca:b0:a4:e4:dc:6c:13:b7:
5f:ad:31:50:26:12:1c:65:20:46:af:2d:09:29:26:
f4:88:05:34:c1:7c:ad:f3:29:0a:c7:67:f5:26:b7:
9f:90:6b:cc:67:8c:41:c9:23:91:7d:5e:60:80:15:
7a:80:1a:f2:32:db:cd:65:ba:c8:a6:85:0d:c3:28:
60:4c:f0:50:72:98:83:7b:8f:2b:7b:c7:36:65:ad:
71:93:cf:5f:62:2f:01:61:4e:59:8f:c0:60:09:d3:
29:ec:2b:48:8b:5d:4c:48:18:97:8c:4e:b4:f6:46:
ce:df:95:83:4d:f1:20:27:c9:e6:ea:23:cb:97:29:
e1:98:b0:88:e2:3a:39:fb:27:0c:54:43:5a:0a:aa:
2b:a2:ea:f6:a2:a8:8a:96:e1:98:a7:9c:05:ec:50:
6a:24:0f:3c:65:cc:28:e1:94:3a:48:b7:2d:c2:5f:
c0:ab:a8:7b:9c:65:58:e6:17:b3:b2:d6:28:a8:4d:
42:7b:3a:37:19:e4:8d:6f:a7:29:b1:25:72:c0:99:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:74:9E:75:C7:27:39:FA:6F:EE:42:57:6A:33:AE:5E:11:48:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7F36F7E408111F08A8A76C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8d:16:0f:41:b6:ba:3c:82:18:ff:35:1f:21:6b:5c:a5:0a:
c4:16:82:8f:11:68:80:7f:ce:b5:0b:99:fb:76:37:7c:d3:d2:
81:90:3a:6c:91:70:36:ae:d5:de:78:00:6d:dd:69:ec:0f:3d:
e6:de:05:b7:16:ee:5a:81:7a:c1:d3:3d:2a:ff:ea:fe:a9:79:
93:a4:7d:41:0e:82:46:f7:66:17:66:b9:aa:ba:20:b1:cf:7e:
1a:27:81:9d:01:bc:18:e5:e0:33:dc:f7:e6:4a:2f:04:fb:7e:
1e:da:76:52:e7:b6:8d:a0:33:1a:fc:a2:4c:a8:d7:e7:c5:bc:
9c:60:0d:c2:46:f7:f3:bb:3b:67:ed:e8:da:2d:d7:cf:6c:8a:
9b:43:1a:22:5a:57:80:0a:d8:56:d6:7b:05:7c:fb:7c:ac:be:
39:71:95:7a:5c:43:63:18:21:37:85:0d:82:ec:ac:58:78:10:
60:d5:78:2b:ff:15:aa:7c:ba:cc:f6:86:48:dd:cd:c2:11:73:
ca:14:43:4b:5c:ac:d9:7d:88:5f:75:c1:07:a5:51:17:68:03:
67:e3:9b:e7:ac:62:41:1f:38:f4:c1:09:54:11:36:02:47:bf:
41:fc:3d:41:a6:bb:4d:45:da:00:3c:9a:f4:b8:ad:8f:c2:bf:
be:2e:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:18 2025 by rpki-client