Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AC763106B8F11F09FCDD7F6DAE4EC9C.roa
File: 5AC763106B8F11F09FCDD7F6DAE4EC9C.roa (raw, json)
Hash identifier: jmerC3dmsfL/z3AfSfDG2wbh3Jil7Neeu2aG4Oa2oXs=
Subject key identifier: 78:6E:4A:FF:6D:EA:D0:4A:E2:46:47:DC:A9:CE:16:D4:B3:21:74:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AC763106B8F11F09FCDD7F6DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:46:30 +0000
ROA not before: Mon 28 Jul 2025 08:46:25 +0000
ROA not after: Tue 05 Aug 2025 08:46:25 +0000
asID: 141735
IP address blocks: 45.195.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92128 (0x167e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 08:46:25 2025 GMT
Not After : Aug 5 08:46:25 2025 GMT
Subject: CN=688738e6-e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:71:b0:18:bf:e2:51:28:af:91:6f:00:e6:
4d:a8:81:1a:e2:a8:c3:93:7a:0b:9b:c9:a9:b2:1d:
42:46:0d:29:b4:75:2e:7f:14:34:2e:ae:a6:b2:7b:
af:f0:ca:66:7b:18:d0:67:6c:44:d7:f7:9c:68:e9:
ed:29:b6:73:bf:86:01:64:e8:13:7a:78:d8:c6:37:
de:73:d5:03:c2:e0:23:df:b7:d1:b3:a2:9b:24:30:
df:64:96:8f:cb:b2:ec:d2:9a:a7:96:6b:39:ad:85:
6e:dd:a4:f0:a9:91:dc:61:87:08:81:95:7b:a8:69:
0e:15:61:33:b9:ed:d0:13:9d:34:88:e7:42:e6:47:
c7:49:60:99:09:f8:c1:df:97:8d:ae:cc:ed:89:60:
2d:96:1e:4d:6b:0e:a6:df:d3:f4:94:39:83:30:84:
c2:e7:81:87:09:c7:19:37:01:17:d7:0e:e9:a2:c7:
49:91:2b:28:7a:d0:52:79:75:7f:ac:5a:c3:38:df:
9b:5b:72:d2:e2:73:b7:31:1c:88:74:41:3a:03:c4:
89:d3:93:72:19:73:e2:3b:a3:9e:33:84:28:17:f1:
e3:c5:bb:70:17:3c:51:3d:29:10:0b:fb:be:ba:7c:
76:c7:78:5c:41:e8:58:51:18:6a:ac:ac:61:67:3a:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:4A:FF:6D:EA:D0:4A:E2:46:47:DC:A9:CE:16:D4:B3:21:74:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AC763106B8F11F09FCDD7F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:09:15:a3:85:41:9d:fe:6e:20:c3:01:da:ff:8f:12:4a:db:
f9:fd:0c:e6:54:36:e6:fd:71:bb:c1:f0:c6:e9:98:05:81:2a:
ec:a3:33:f8:0d:5b:cc:f2:d3:6d:6c:96:ba:4e:ae:1f:e0:89:
08:ce:b2:b7:20:e8:3f:d0:0f:99:4a:6a:01:87:95:75:00:c8:
a6:a8:e3:7b:94:95:75:e9:99:80:6b:70:e7:e8:73:96:04:85:
cd:4c:8e:14:da:e3:52:d2:d5:da:b2:b6:9d:68:21:31:84:ad:
9c:6e:09:37:cb:8a:36:ba:39:e3:35:c8:d4:d3:3a:2e:35:5b:
08:4e:ec:08:a4:e1:5f:04:c0:18:bd:6d:87:3c:af:d9:fb:bc:
10:68:78:c0:18:42:d8:89:df:da:9c:b5:02:48:1f:d7:ce:e0:
7f:9a:33:fa:65:00:dc:b7:8c:fc:99:96:3a:84:1c:a1:ff:6c:
b6:e5:b0:62:a4:d3:9e:90:62:01:03:8f:e4:fe:07:12:c1:b6:
79:e6:86:52:f2:69:29:7b:44:39:05:a1:2c:de:5e:f6:3d:59:
3c:f9:18:2b:cd:fe:f7:28:c3:5a:78:63:f9:7b:3c:f5:98:0f:
eb:a0:3c:fc:7e:42:0d:dd:b4:50:f5:17:92:83:32:a8:a0:f8:
3e:32:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:13 2025 by rpki-client