Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A64B60438311F0B68E76D1DAE4EC9C.roa
File: 09A64B60438311F0B68E76D1DAE4EC9C.roa (raw, json)
Hash identifier: D05cbkb5ybmMn/UZ9LWRIWW6Pj/BSBUP3UVk4ASynL4=
Subject key identifier: 9E:C6:00:EE:61:69:28:31:EA:EB:04:C1:01:AD:18:6B:E6:A5:A1:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A64B60438311F0B68E76D1DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 09:37:33 +0000
ROA not before: Sat 07 Jun 2025 09:37:29 +0000
ROA not after: Wed 18 Jun 2025 09:37:29 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88620 (0x15a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 09:37:29 2025 GMT
Not After : Jun 18 09:37:29 2025 GMT
Subject: CN=6844085d-6751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:77:e4:12:a3:35:87:9c:8f:25:0e:bd:73:
1e:dd:9a:6a:b9:c3:31:56:34:04:22:75:16:10:66:
d7:54:66:36:62:c0:5e:14:85:97:3c:03:1d:d7:a5:
de:91:38:58:05:6d:4d:f8:91:9a:62:4a:a8:f1:6e:
5e:e3:4f:49:5f:e3:86:94:8a:2f:86:32:c1:ac:27:
7d:bf:46:ff:9f:f7:f4:5a:5c:8a:b7:74:08:f6:3f:
49:62:36:06:c5:17:c5:48:b3:87:0d:13:eb:49:1c:
16:af:bf:30:f8:e4:1e:aa:ef:be:99:31:85:ae:b8:
95:d2:22:27:36:9a:ee:59:ae:50:70:fe:a6:03:e0:
9f:c1:c0:65:ff:30:93:29:6a:16:a5:e8:4e:ad:29:
85:be:fe:03:1d:41:93:a9:24:44:d1:c5:0f:3b:3d:
38:1b:44:9a:cb:1a:99:e1:4c:2c:7b:bb:f3:49:81:
66:48:33:bb:c1:e4:28:3e:1a:81:a8:85:b6:b3:5c:
6f:87:75:2f:6e:97:55:22:3e:9d:ab:bb:33:c3:a6:
1b:0c:d3:c8:96:34:32:9b:be:bf:df:5b:23:72:c5:
2f:0e:16:da:2b:7f:a4:3d:b8:71:ec:c9:9d:06:b1:
f7:6a:0e:55:a6:9d:d9:d2:55:bc:0b:2e:ae:0b:5d:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C6:00:EE:61:69:28:31:EA:EB:04:C1:01:AD:18:6B:E6:A5:A1:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A64B60438311F0B68E76D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
78:49:c4:a0:55:d6:12:c7:50:d2:da:51:b1:7e:26:68:82:e0:
d0:ad:0b:2f:2e:d0:8d:ad:8b:01:be:8b:68:84:d8:b2:8f:cd:
ae:2a:cb:4e:cd:87:32:2e:9a:16:92:d6:51:47:73:68:5a:af:
f1:6b:20:40:33:3c:30:90:eb:19:08:d9:79:b9:82:3a:29:ed:
21:69:e6:c4:aa:29:5e:41:25:4d:32:74:45:5c:75:40:74:4a:
06:2a:d3:ec:e2:07:27:55:85:09:50:83:a3:7c:44:48:b6:47:
94:47:69:db:49:30:53:fa:d4:0c:78:e5:9b:0e:d5:93:c0:1e:
a2:49:2e:db:d7:d6:93:b9:97:6a:82:fe:15:d5:8e:7a:d5:ca:
74:3d:97:7b:d6:60:89:d6:58:a1:2c:bd:5c:c0:ef:9a:f7:57:
0a:1e:31:65:92:a1:4d:b7:15:e4:09:a6:56:4e:f4:eb:91:98:
82:07:f0:85:ee:cb:99:ac:9d:18:03:99:b8:a4:50:55:9f:7c:
d5:66:ee:08:96:b7:a8:aa:21:51:bd:08:c1:78:cb:b6:88:a6:
2b:d0:3f:bd:89:e6:a5:55:d9:b9:54:25:9e:4e:a1:bd:7a:cc:
4f:1e:2f:21:d7:6c:1f:3c:47:71:4a:e2:ff:6e:68:6a:16:28:
cf:e2:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:09:35 2025 by rpki-client