Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFD5A2DC3AD811F0B20F427FDAE4EC9C.roa
File: FFD5A2DC3AD811F0B20F427FDAE4EC9C.roa (raw, json)
Hash identifier: meHipQJiMG/bSVKsUD9m+Wn3bHTSdcwKC6sX7dye/Eg=
Subject key identifier: DB:82:6A:0B:A3:B8:F7:1E:B0:3B:84:7C:F3:59:0A:48:C4:91:A2:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0157CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFD5A2DC3AD811F0B20F427FDAE4EC9C.roa
Signing time: Tue 27 May 2025 09:00:13 +0000
ROA not before: Tue 27 May 2025 09:00:08 +0000
ROA not after: Mon 02 Jun 2025 09:00:08 +0000
asID: 152849
IP address blocks: 156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88010 (0x157ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 09:00:08 2025 GMT
Not After : Jun 2 09:00:08 2025 GMT
Subject: CN=68357f1d-7c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:81:ac:9b:06:b2:5a:c3:cd:59:ea:10:45:
87:ba:e4:4e:b1:0c:69:8c:3d:4f:ab:a7:c4:e9:ea:
1e:83:f7:cc:7e:31:bd:a9:9d:4e:eb:ca:39:95:54:
a9:ba:d9:55:89:01:5d:12:ed:84:ea:27:66:f0:4a:
fb:6b:6e:cd:59:81:97:fa:dd:c8:5d:8e:cb:33:db:
25:ad:01:27:43:90:b5:6d:47:97:1e:c1:6d:3b:d5:
ea:11:16:0c:e0:7c:6b:68:f1:71:9c:24:96:35:ec:
5b:b1:05:4e:9e:89:bb:92:0e:dd:00:f4:78:b1:b6:
b8:a4:f5:b4:ba:9d:97:4e:a9:5b:ee:e8:d1:03:ed:
01:6e:1b:e5:44:8b:54:28:26:a3:ea:ca:08:36:75:
78:33:29:56:90:30:0d:82:ce:ec:10:5b:4f:16:a5:
35:42:ed:d7:c7:a4:c5:3b:fb:b1:a2:89:3c:39:36:
7a:2a:ee:03:05:74:0a:7a:52:50:7d:43:c2:35:71:
60:65:94:62:de:0e:6f:02:9a:34:f3:81:a1:f8:dd:
76:9d:40:30:e8:9f:3b:58:04:f1:aa:a4:6b:43:e6:
db:6e:de:42:44:77:93:76:13:d6:a4:88:d2:f7:c2:
39:37:a4:35:22:34:54:0f:7d:49:2e:b6:78:61:39:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:82:6A:0B:A3:B8:F7:1E:B0:3B:84:7C:F3:59:0A:48:C4:91:A2:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFD5A2DC3AD811F0B20F427FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:f4:a2:90:a5:9c:b6:05:a3:eb:82:c2:4f:06:ef:87:2c:c7:
a4:91:c4:31:a7:4d:20:86:77:2a:42:2c:88:77:83:55:51:73:
c0:dc:3c:85:c5:c7:2b:1f:0d:e1:9a:59:07:4b:d1:b2:93:d9:
d4:e1:84:dd:0b:53:ed:ed:52:6b:4e:ad:47:dc:d0:73:e0:c6:
d2:19:f5:d5:34:2f:b3:80:4e:84:54:34:ca:98:14:a9:1c:17:
51:dc:07:19:e7:6a:bb:5d:48:3b:a9:4f:b0:51:71:f4:8e:a3:
6e:9f:b8:57:37:72:f9:7c:9e:d8:34:bd:2c:82:66:36:af:a8:
1a:f6:ae:b9:a7:8b:60:a3:7f:5b:ab:39:4e:9e:af:e3:32:0c:
50:25:75:f4:be:12:6f:28:78:69:93:2f:e5:01:95:d2:a6:84:
83:1f:e0:b9:62:e0:37:d1:dc:f4:03:11:69:6a:35:ef:3c:2f:
0a:2e:b4:a5:f4:27:69:83:a3:e4:84:71:ca:82:66:00:ce:99:
17:8d:4d:9e:59:ce:55:a9:5c:3f:f9:d0:97:a8:bf:de:eb:e8:
ff:a6:f4:8d:44:65:a5:d7:a9:dc:fb:95:b6:e5:4d:12:6e:fa:
54:d3:d5:1b:92:41:1f:7a:ce:7f:cb:d7:c9:47:0a:61:92:40:
17:7d:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:15 2025 by rpki-client