Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EEB90CA45EE11F08186C089DAE4EC9C.roa
File: 7EEB90CA45EE11F08186C089DAE4EC9C.roa (raw, json)
Hash identifier: yOMU0cSzwzbn+YsQLHPnrgdEVpdgHATIxbtWEIzlQN4=
Subject key identifier: B7:9D:21:69:A7:36:62:CA:E4:A5:F7:BD:4B:D8:22:66:A5:62:96:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EEB90CA45EE11F08186C089DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 11:31:49 +0000
ROA not before: Tue 10 Jun 2025 11:31:44 +0000
ROA not after: Mon 16 Jun 2025 11:31:44 +0000
asID: 400619
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88756 (0x15ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 11:31:44 2025 GMT
Not After : Jun 16 11:31:44 2025 GMT
Subject: CN=684817a4-14de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:a6:a1:4e:da:ae:8c:5e:ff:5b:85:af:c6:
22:54:b2:b9:aa:87:2b:4b:76:fe:5a:9c:57:85:ee:
e4:3c:a9:24:a8:3d:17:b8:60:5c:ab:dc:34:b4:ea:
86:8c:a0:e6:14:4b:fb:ac:83:88:3b:01:6f:61:01:
d2:fa:45:80:40:14:b3:22:f4:c9:d0:9e:0a:77:39:
d8:2a:db:c4:73:f8:a3:7c:15:2d:d8:5a:b6:e7:d5:
e2:d7:ab:81:ac:f4:94:f3:3b:bf:f1:2a:ae:ca:1e:
a0:25:b5:d7:49:8c:5a:6d:61:17:cb:fc:d4:ae:41:
5c:fd:19:b4:f0:81:5f:de:c6:3d:17:f9:ee:79:5f:
16:63:ad:7b:55:5d:4b:90:fd:33:38:ce:a8:8f:52:
60:54:ac:17:6c:ab:10:8f:7d:9e:97:d2:ad:94:e9:
95:e9:58:9e:0b:47:bd:13:8b:1e:19:95:1b:2b:e2:
cc:e5:2d:75:8c:be:ed:b1:d1:e7:73:75:16:b9:4f:
ce:2e:d8:90:bb:ec:0d:d2:39:b9:0c:f3:f5:d0:54:
54:60:e6:94:ca:df:e3:70:4a:83:dc:ff:54:d7:8f:
6e:c0:c4:75:44:cf:3a:2b:5c:06:22:87:c4:4e:a5:
57:35:73:c0:75:e9:1a:b5:02:7f:80:f1:9a:5a:e6:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:21:69:A7:36:62:CA:E4:A5:F7:BD:4B:D8:22:66:A5:62:96:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EEB90CA45EE11F08186C089DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
84:f4:24:3b:cc:21:98:ee:60:0e:0c:c6:c7:7a:54:14:64:04:
a8:4b:a2:9f:6c:0e:29:8e:48:e9:7f:bf:52:04:4f:12:d7:f1:
a1:b9:a9:41:61:80:82:ab:6d:1c:64:18:92:59:7d:10:64:b1:
c3:46:98:a3:10:08:58:75:25:72:f3:c6:3a:8c:6f:92:77:5f:
5c:1e:1d:ef:54:39:62:c5:64:c0:24:87:d1:ec:65:88:92:65:
91:42:5c:0b:c7:11:b3:bf:30:bf:56:2a:c6:e0:b8:68:00:0b:
89:ec:70:f9:e5:8f:e3:a3:7a:47:a2:61:e3:95:09:27:2d:8f:
44:b4:f2:20:97:43:b9:b5:87:23:aa:39:15:0f:ce:b1:cb:8b:
31:82:3f:51:f3:91:8e:d6:84:9d:48:6a:a2:7a:d6:d4:c0:1f:
ee:ac:dc:23:30:ed:fc:52:2f:2c:1d:8a:76:64:5c:15:90:f3:
55:21:2c:eb:40:bb:e6:f8:6d:02:9b:c9:31:b0:6e:d6:bf:5e:
4d:35:56:8f:0c:0e:9c:86:12:4d:f4:72:98:c7:86:f7:46:53:
29:02:b7:0e:7e:5e:df:58:40:fe:f6:78:27:e7:48:0e:a8:65:
f9:b2:81:c8:a7:3e:ff:3b:d4:44:44:b8:e1:1a:d0:12:77:df:
35:7d:16:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVq0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEwMTEzMTQ0WhcNMjUwNjE2MTEzMTQ0WjAYMRYw
FAYDVQQDEw02ODQ4MTdhNC0xNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA786moU7aroxe/1uFr8YiVLK5qocrS3b+WpxXhe7kPKkkqD0XuGBcq9w0
tOqGjKDmFEv7rIOIOwFvYQHS+kWAQBSzIvTJ0J4KdznYKtvEc/ijfBUt2Fq259Xi
16uBrPSU8zu/8Squyh6gJbXXSYxabWEXy/zUrkFc/Rm08IFf3sY9F/nueV8WY617
VV1LkP0zOM6oj1JgVKwXbKsQj32el9KtlOmV6VieC0e9E4seGZUbK+LM5S11jL7t
sdHnc3UWuU/OLtiQu+wN0jm5DPP10FRUYOaUyt/jcEqD3P9U149uwMR1RM86K1wG
IofETqVXNXPAdekatQJ/gPGaWuae1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLed
IWmnNmLK5KX3vUvYImalYpbCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RUVCOTBDQTQ1RUUxMUYwODE4NkMwODlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQCE9CQ7zCGY7mAODMbHelQUZASoS6KfbA4pjkjpf79SBE8S1/GhualBYYCC
q20cZBiSWX0QZLHDRpijEAhYdSVy88Y6jG+Sd19cHh3vVDlixWTAJIfR7GWIkmWR
QlwLxxGzvzC/VirG4LhoAAuJ7HD55Y/jo3pHomHjlQknLY9EtPIgl0O5tYcjqjkV
D86xy4sxgj9R85GO1oSdSGqietbUwB/urNwjMO38Ui8sHYp2ZFwVkPNVISzrQLvm
+G0Cm8kxsG7Wv15NNVaPDA6chhJN9HKYx4b3RlMpArcOfl7fWED+9ngn50gOqGX5
soHIpz7/O9RERLjhGtASd981fRYN
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:39:36 2025 by rpki-client