Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B957F2A469311F0B1C13DBEDAE4EC9C.roa
File: 3B957F2A469311F0B1C13DBEDAE4EC9C.roa (raw, json)
Hash identifier: BnL7Mi7sQpowu/O6ESJ1zvSYiYkOft8GlJgDjpfLQ4I=
Subject key identifier: 5A:F8:E0:A9:A9:27:8C:3F:FD:32:86:B1:D1:DD:CE:40:EE:C3:03:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B957F2A469311F0B1C13DBEDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 07:11:03 +0000
ROA not before: Wed 11 Jun 2025 07:10:58 +0000
ROA not after: Mon 16 Jun 2025 07:10:58 +0000
asID: 137951
IP address blocks: 156.224.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88854 (0x15b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 07:10:58 2025 GMT
Not After : Jun 16 07:10:58 2025 GMT
Subject: CN=68492c06-9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:18:0a:c3:a7:ea:72:44:9c:a8:9d:05:2b:
a8:ab:84:53:be:0e:67:ec:6e:3c:4a:81:c5:9c:a3:
24:51:19:f5:d9:4c:3b:b0:5e:51:33:25:ec:e5:a9:
f7:9c:64:5e:3b:8d:5b:f5:53:aa:01:a1:98:b6:7f:
c1:3e:06:ac:c7:f7:c4:4e:6b:27:ba:38:d1:98:18:
be:35:67:71:01:9f:36:34:61:82:83:f8:72:7c:4e:
30:5a:c2:13:49:90:b0:52:5f:56:80:e5:ff:30:26:
4e:c5:1e:11:2c:86:76:17:43:20:a6:7b:ce:f0:81:
b7:2a:e8:89:cc:c9:e2:ab:8b:57:4e:15:04:f5:cc:
ce:f9:2f:24:af:b7:d4:62:44:91:fa:a5:68:85:6b:
34:c3:a0:10:95:c1:9e:de:03:2e:4f:84:73:4d:14:
ee:cd:57:8d:aa:c6:13:1e:c6:6d:39:d4:ce:75:9e:
08:4a:06:42:fb:9a:2c:6a:62:23:aa:bf:85:dd:1b:
ca:d1:df:2b:9f:4e:c4:49:83:9e:1a:eb:1e:88:ed:
ef:b2:91:bd:49:cd:75:ea:25:58:4f:e1:54:95:b0:
60:b4:82:01:37:90:36:56:f0:3d:91:a9:b8:23:65:
9f:3b:f1:b5:15:09:f8:49:d8:b1:8a:25:bd:b3:4f:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:E0:A9:A9:27:8C:3F:FD:32:86:B1:D1:DD:CE:40:EE:C3:03:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B957F2A469311F0B1C13DBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.32.0/19
Signature Algorithm: sha256WithRSAEncryption
23:40:f0:ca:a3:fb:ad:d1:b9:b8:0f:0a:f4:79:02:c9:19:39:
92:73:1f:e5:c0:50:9d:5b:a1:38:ec:c4:ca:96:a6:4e:01:92:
42:78:b1:5c:c0:b6:d2:47:eb:b8:ee:90:58:cd:f6:e0:91:de:
6d:0a:fc:1e:17:d7:07:4a:4b:b1:35:2a:ed:a1:e1:85:2b:1b:
2d:d8:72:6e:50:47:67:08:c5:17:b0:7a:e3:c6:c9:a6:9b:35:
c7:e7:a0:e2:6d:da:92:ff:d6:f2:44:3f:55:f8:19:18:43:ac:
2a:9b:fa:b6:1a:fd:2f:c0:fc:0e:94:60:14:4d:b4:4d:25:71:
64:f9:7c:33:e0:48:4a:63:51:7c:44:1e:bf:fd:40:23:f5:f4:
13:81:d8:3d:23:58:fe:ef:05:21:30:28:4e:d2:48:84:87:c8:
aa:e1:2a:13:71:d9:48:f7:ff:98:55:2a:4a:88:f1:84:c0:ac:
62:db:2d:9b:88:a2:92:c5:2a:1b:69:4a:47:71:7e:c9:96:ff:
1d:04:1f:f5:b0:4a:d6:7d:e2:a8:be:44:b9:2d:fc:a0:a8:a0:
43:80:e8:2b:bb:93:31:83:43:bf:65:86:6f:bf:03:1a:4b:50:
d7:99:1c:49:64:c3:39:02:22:97:e6:9b:16:63:2b:38:08:52:
ea:3b:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:33:20 2025 by rpki-client