Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/111EC248477D11F091297CABDAE4EC9C.roa
File: 111EC248477D11F091297CABDAE4EC9C.roa (raw, json)
Hash identifier: y5GPw5C0i4o3WtU/7MyQjOL6KxRuz5h772UHaThCNWU=
Subject key identifier: B6:38:CC:FA:51:62:97:B7:C5:4F:17:66:50:32:B7:4B:F3:AD:3D:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/111EC248477D11F091297CABDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 11:04:54 +0000
ROA not before: Thu 12 Jun 2025 11:04:49 +0000
ROA not after: Mon 16 Jun 2025 11:04:49 +0000
asID: 55020
IP address blocks: 156.224.16.0/23 maxlen: 24
156.224.18.0/23 maxlen: 24
156.224.20.0/22 maxlen: 24
156.224.24.0/22 maxlen: 24
156.224.28.0/23 maxlen: 24
156.224.30.0/23 maxlen: 24
156.224.63.0/24 maxlen: 24
156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88937 (0x15b69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 11:04:49 2025 GMT
Not After : Jun 16 11:04:49 2025 GMT
Subject: CN=684ab455-b762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:92:cc:96:c0:de:db:30:25:c5:96:88:75:
21:04:81:36:81:9a:f2:90:8e:63:24:25:4c:11:3a:
aa:87:67:b1:ca:46:3b:43:89:8f:84:2e:b8:2a:7c:
8a:13:fd:a1:99:18:e9:41:e6:41:39:8a:d2:cb:80:
a3:c7:ab:05:c5:29:f6:b3:8f:ec:2d:19:ff:30:a0:
5b:3b:b8:38:90:56:1e:46:83:12:8a:a0:a7:00:3f:
87:bc:bf:a3:9d:08:46:ea:91:22:72:5d:7d:87:b0:
9c:80:4b:d5:bd:8a:47:2a:51:33:ca:96:77:ca:e2:
20:04:a1:ba:4f:c9:98:4e:2b:c2:77:28:42:89:9e:
e7:5b:61:58:92:f5:28:5d:44:e4:ac:ac:11:72:4f:
63:bc:e6:82:73:e2:2b:36:61:7f:2e:24:4a:17:8e:
ff:17:7c:23:c8:a5:b8:1e:97:a0:40:36:4f:87:29:
1e:b5:02:a8:c0:f1:e6:27:28:2e:ac:1a:d2:63:7f:
48:ca:9c:8f:d3:9c:20:4f:a5:8d:0e:d1:63:99:ef:
26:8d:13:83:8b:60:a5:8c:74:3c:80:8e:75:4a:76:
f3:df:25:c6:11:cf:67:ce:3e:6a:e1:f4:30:18:e5:
07:8c:30:34:f4:1d:8d:b2:0f:27:c1:67:00:42:29:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:CC:FA:51:62:97:B7:C5:4F:17:66:50:32:B7:4B:F3:AD:3D:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/111EC248477D11F091297CABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/20
156.224.63.0/24
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
79:ce:a4:1a:93:d5:d0:54:21:47:b7:6e:16:5e:b4:7e:bd:f2:
d3:8a:b1:33:cf:7b:40:34:c5:55:57:ea:c3:b1:71:27:f4:c2:
eb:08:47:77:63:9b:a9:6f:9c:70:e6:88:65:26:8a:7c:53:ce:
fc:38:27:e1:40:58:6e:e3:77:38:32:73:d7:52:9a:36:2d:86:
d6:bb:40:1c:ae:77:9c:6b:09:0a:3a:3e:4f:a8:05:cd:ce:24:
6d:28:b8:3a:06:48:e1:90:bc:e3:8b:14:94:08:cf:c4:0f:ed:
31:1b:47:a9:68:a6:b4:e4:d5:7b:79:d7:66:b1:3d:e7:cf:c6:
ac:31:fd:0d:41:42:c1:a1:56:da:c7:9d:b5:41:60:00:84:53:
26:8b:03:4f:a8:28:97:ba:7f:d2:60:f6:1e:1e:5c:3c:22:70:
70:df:1c:b7:5c:10:06:47:06:ff:db:98:1a:54:63:0d:02:b5:
c5:ad:73:fc:b2:1f:68:8c:ea:27:f1:9c:4b:2e:44:4c:40:6c:
30:f0:eb:f0:e7:d0:f0:d3:5f:71:60:44:be:b9:81:b4:8f:4f:
3a:f5:f3:4f:19:84:01:86:cc:ab:fa:1c:ee:f5:5f:9e:36:c5:
44:b2:c6:27:9c:3c:6e:e2:1d:3e:e8:b9:d1:b7:4e:6c:44:1a:
9f:a2:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:17:23 2025 by rpki-client