Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81AA8DE36CD11EC8BF50D4DD8A014CE.roa
File: F81AA8DE36CD11EC8BF50D4DD8A014CE.roa (raw, json)
Hash identifier: vUz2odqoOQsb8XOhcjyzKimS1ryfX7MfMaLVP1XCXhA=
Subject key identifier: 66:76:27:C2:43:B7:6C:6E:64:FA:21:5E:34:65:72:1A:CB:19:A5:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81AA8DE36CD11EC8BF50D4DD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:31:20 +0000
ROA not before: Wed 27 Oct 2021 02:31:17 +0000
ROA not after: Thu 27 Oct 2022 02:31:17 +0000
asID: 58895
IP address blocks: 45.206.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:31:17 2021 GMT
Not After : Oct 27 02:31:17 2022 GMT
Subject: CN=6178b9f8-c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:49:d0:e3:bc:a4:bc:9b:21:71:f7:5f:52:
f6:cb:24:72:f9:50:6b:d3:81:71:8b:5e:6e:67:d8:
95:92:80:90:33:7e:80:e9:4e:d1:25:c9:f1:ef:0d:
6e:1d:56:14:7c:74:82:ec:e5:b4:58:21:89:9c:47:
97:06:90:9b:23:a7:19:f4:e7:38:af:95:3b:ef:6f:
98:e3:58:87:9e:22:90:d7:2c:7f:4f:4f:f6:b5:17:
83:2e:5e:fe:f5:bf:52:98:ae:52:37:8b:6c:9f:bf:
dc:35:46:08:f9:c7:5b:bc:17:2e:44:cc:ca:e2:81:
8a:57:d5:af:27:81:d5:d4:91:67:6e:f0:98:54:57:
30:49:94:01:5a:7c:0a:e6:ea:de:6a:72:70:5e:bc:
36:67:83:2f:64:7d:c1:75:bf:36:03:96:09:2c:9e:
a1:85:f2:b7:77:42:d9:c1:c1:e9:80:9b:76:9c:a2:
8e:72:f1:64:83:e5:64:05:c6:7a:f3:aa:c9:9c:7b:
66:88:06:1d:11:03:c8:80:45:c2:f2:76:65:c4:04:
ac:4f:d7:4e:59:c3:6e:e6:35:77:ec:3e:81:77:69:
23:cd:8b:b2:49:08:50:57:d4:43:ae:fb:15:20:7c:
95:8f:52:86:5f:7c:92:6e:5a:b8:b1:d8:85:f4:3f:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:27:C2:43:B7:6C:6E:64:FA:21:5E:34:65:72:1A:CB:19:A5:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81AA8DE36CD11EC8BF50D4DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.153.0/24
Signature Algorithm: sha256WithRSAEncryption
09:87:a3:69:eb:4b:42:f9:6e:ae:ed:a8:07:ce:fb:0b:15:ec:
d9:b0:59:9c:a9:65:2c:dc:c2:7d:51:6c:a3:16:02:e9:50:e1:
a6:1b:5f:da:f5:7a:f0:5f:2a:32:c3:ff:4a:21:78:d0:8b:55:
57:93:f4:68:2a:e4:bc:80:fe:da:ef:8e:8a:e6:25:a5:aa:3b:
b0:15:88:d0:d7:0a:fa:2a:7f:c5:c6:74:6a:90:1a:78:b5:9d:
50:d1:80:49:29:9c:bc:7f:cb:4c:46:27:76:6e:94:b9:32:eb:
12:45:c3:56:6c:4c:d7:8b:3a:6a:a2:75:ad:72:9f:ad:76:ee:
36:e4:b3:64:bf:cd:44:6e:6d:0a:4f:f4:82:47:80:8a:1e:4f:
00:af:2f:9a:5d:00:96:49:6e:cf:0f:09:aa:b6:2b:15:8a:99:
68:f0:88:f4:fb:bf:f5:4c:9f:24:a4:8b:85:17:26:63:51:76:
a5:25:61:16:0f:6d:7f:93:ab:cb:54:76:5f:e7:2b:fa:4c:53:
96:98:3f:40:0f:3c:9e:b2:9d:1d:52:42:c9:79:cc:64:be:2c:
6c:26:80:b6:97:01:91:52:9f:15:15:c6:54:08:ec:54:5a:60:
26:f3:55:6d:06:a4:0b:65:5d:82:7f:58:5f:6c:18:ab:3b:f1:
01:ec:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:55:37 2025 by rpki-client