Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/533BA016479011F0BB5197A7DAE4EC9C.roa
File: 533BA016479011F0BB5197A7DAE4EC9C.roa (raw, json)
Hash identifier: 7K7SSfKDLxmQSCGr4dn+o/eEEaDZ5RFGnex9NeIv3Ko=
Subject key identifier: 31:D6:14:AE:60:80:B8:78:D5:36:3C:EC:BC:20:6F:72:35:03:16:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/533BA016479011F0BB5197A7DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:22:45 +0000
ROA not before: Thu 12 Jun 2025 13:22:40 +0000
ROA not after: Mon 16 Jun 2025 13:22:40 +0000
asID: 55020
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88971 (0x15b8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 13:22:40 2025 GMT
Not After : Jun 16 13:22:40 2025 GMT
Subject: CN=684ad4a5-d2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:7f:3a:9a:1b:f4:93:41:e6:d7:1f:bc:8f:
28:c9:28:4e:d9:92:5e:29:aa:3a:2b:be:d4:b9:05:
e4:f7:d4:a0:01:1c:4e:09:41:90:af:a0:47:96:74:
90:e1:be:7c:09:4d:cd:4a:a6:94:35:d4:af:eb:55:
dd:87:d6:74:c9:9c:a8:91:db:28:e4:50:86:d8:e9:
94:76:90:f3:e4:61:18:52:d1:9b:a7:22:b3:28:b4:
f1:e0:76:89:1d:8d:11:38:9a:07:94:81:ab:b0:e6:
f4:0b:15:50:3c:58:be:57:bc:76:c7:0c:c5:1d:46:
3c:97:8b:c0:d0:19:e7:6a:de:c6:19:be:98:d0:71:
0d:51:10:29:02:03:4a:6d:9f:e5:a1:78:13:09:99:
40:ee:59:4a:f9:1d:a9:80:a2:d3:7f:1b:51:07:3f:
12:bb:0c:6a:26:e3:82:8a:f9:cf:82:9f:86:54:15:
38:b1:e8:9a:2b:29:5d:2b:d4:e0:4a:47:87:b0:5c:
6f:5a:13:d4:53:d1:f8:f5:2d:0d:6a:b3:07:1d:e5:
e9:74:e0:71:17:5a:f5:5b:08:29:c9:78:c3:16:b3:
14:9e:c0:c1:d7:bd:ba:b8:ea:a4:39:71:c1:da:83:
50:d5:8c:f8:a4:c3:03:3c:77:e7:25:31:24:17:04:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:14:AE:60:80:B8:78:D5:36:3C:EC:BC:20:6F:72:35:03:16:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/533BA016479011F0BB5197A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
16:54:07:c2:79:70:0b:0b:e1:4e:51:1a:0e:88:c8:4f:f7:65:
cc:c5:94:c3:54:7a:bb:f6:c7:ae:7d:c8:47:8d:84:76:60:b9:
0b:14:99:34:bb:72:71:b3:de:fc:d2:72:8a:6a:80:e0:fa:69:
ba:12:be:8a:18:06:5a:95:a1:f8:2f:3e:d7:6b:36:81:47:9c:
87:d0:9b:de:a2:a6:c7:56:13:f2:55:eb:39:09:1f:3c:26:59:
5f:29:08:21:6f:d3:5e:fe:95:14:56:08:4f:33:88:90:64:e5:
97:fe:12:d9:ea:cf:37:60:a1:05:74:c5:21:30:2a:e8:10:2e:
f4:3b:d7:09:88:04:b2:cc:d3:d5:75:9e:eb:33:f8:25:f1:0c:
8b:01:09:90:3f:44:e5:f2:3f:26:a7:fd:0a:3d:f1:31:50:e3:
49:57:bc:1e:1c:9c:dc:9c:07:0a:ef:6e:11:31:23:8f:e9:de:
ca:9d:d3:23:0d:7d:d4:b3:a9:aa:d2:96:f3:bc:26:15:37:38:
f7:5b:e8:38:9b:fa:31:fa:19:3a:e6:e0:32:6c:2b:37:36:e1:
54:15:9f:15:de:53:ee:1b:ba:7d:e2:3c:43:78:78:c2:f5:7e:
c3:86:54:65:ad:79:03:ab:09:7c:d1:60:3c:e8:c6:3c:76:2c:
ae:ea:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:45:12 2025 by rpki-client