Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D335F6478F11F0B7462BA3DAE4EC9C.roa
File: 82D335F6478F11F0B7462BA3DAE4EC9C.roa (raw, json)
Hash identifier: G9IgTRYtwIZ5N1PxJNX2pwOj0kD37mFNz+4GaTp460M=
Subject key identifier: 93:5B:DE:CB:43:5F:41:9C:74:EF:F8:B7:71:B8:22:3D:03:5C:D2:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D335F6478F11F0B7462BA3DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:16:55 +0000
ROA not before: Thu 12 Jun 2025 13:16:51 +0000
ROA not after: Mon 16 Jun 2025 13:16:51 +0000
asID: 54600
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88967 (0x15b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 13:16:51 2025 GMT
Not After : Jun 16 13:16:51 2025 GMT
Subject: CN=684ad347-c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:1c:72:64:d3:8e:c5:b8:37:26:58:9b:77:
e0:25:d7:4d:5b:c3:40:2f:3f:81:ba:41:83:79:d0:
1e:26:81:d0:6d:b4:5a:2c:d8:fa:b2:f2:a5:37:4a:
d7:4d:e6:e1:d4:23:28:47:cb:d0:a1:7c:bf:f7:3d:
62:4a:41:f9:6d:85:65:7e:57:99:b2:d7:14:d3:7a:
9a:e2:33:2d:aa:16:d9:c8:e3:2e:fa:6a:dc:b6:20:
09:9b:5d:78:69:be:24:3c:22:45:b9:71:b2:03:51:
8a:95:98:6a:9d:ef:e3:ca:4e:e4:5e:09:ca:be:29:
2f:12:61:e9:43:26:1d:50:35:0b:5d:59:0f:a2:1a:
38:74:32:2f:2d:e6:4c:f8:5c:ca:84:9c:13:c6:63:
a1:ca:9e:80:b5:9f:8f:d1:5c:50:b1:16:de:dc:96:
ea:80:58:48:33:08:35:c4:04:67:94:2e:ca:bf:31:
18:b8:4a:a8:24:67:00:12:c0:63:a7:e1:9b:3d:e6:
33:dd:63:46:59:fd:32:af:84:82:c2:f8:39:3e:89:
d6:6e:72:ac:e6:3f:b1:df:3e:4a:48:68:e3:2c:90:
2b:c4:cc:be:67:0d:91:31:a3:b4:06:fb:91:aa:f5:
7d:e6:f6:4c:ab:14:96:f3:29:10:73:e0:e7:ae:b7:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:DE:CB:43:5F:41:9C:74:EF:F8:B7:71:B8:22:3D:03:5C:D2:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D335F6478F11F0B7462BA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
48:81:4f:8f:d9:55:63:92:e7:9b:ba:f5:bf:bf:e5:9c:17:5b:
da:7a:ea:06:e1:fe:e7:7d:fd:e4:a0:47:f1:45:f8:58:1a:a9:
0d:6b:1f:e0:ab:25:84:8a:dc:8d:c7:ba:b5:5e:07:64:7b:28:
0c:76:ea:81:6d:e7:42:68:a6:27:9e:bd:83:ea:35:34:de:38:
80:a6:76:2c:17:3b:9d:54:05:c4:a8:be:ea:7b:30:97:5d:32:
b4:9a:78:a0:9c:c5:0c:8b:84:b6:cf:d9:bc:c4:54:97:9e:e9:
9d:5e:c8:18:aa:9f:3e:d3:4b:a5:8b:12:40:09:57:98:a1:f6:
1d:fd:4a:1b:74:06:3d:1f:15:65:72:b6:2f:28:bf:a2:cb:4d:
26:b3:4e:ff:2e:8f:32:26:57:0c:af:5a:a4:b7:1d:f2:c0:2f:
b1:6c:fa:52:92:61:f0:2a:e8:9e:10:b4:1a:3a:54:4c:f5:91:
5f:cd:70:b8:92:99:72:fb:35:06:ef:e3:a5:d9:8f:43:42:80:
fc:aa:9a:80:a0:e5:76:9c:76:70:39:59:59:0e:60:0d:06:f8:
a8:39:9d:c8:22:7b:62:fe:7f:96:20:7e:d3:7f:d1:b4:6a:fd:
cd:96:24:00:8f:d0:c2:13:1e:ec:98:f7:cb:d5:ac:50:df:ee:
30:9d:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:02:24 2025 by rpki-client