Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8352DAC46D1C11F0B50B1295DAE4EC9C.roa
File: 8352DAC46D1C11F0B50B1295DAE4EC9C.roa (raw, json)
Hash identifier: 9xSvtm7ldUuu2Lp6g7gYaeOHlaYfIciCt135N8Xy+d4=
Subject key identifier: 03:A4:85:ED:00:F4:FE:5F:FD:0A:43:7F:33:97:92:61:0D:80:66:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016830
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8352DAC46D1C11F0B50B1295DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 08:09:28 +0000
ROA not before: Wed 30 Jul 2025 08:09:23 +0000
ROA not after: Thu 07 Aug 2025 08:09:23 +0000
asID: 20326
IP address blocks: 45.202.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92208 (0x16830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 08:09:23 2025 GMT
Not After : Aug 7 08:09:23 2025 GMT
Subject: CN=6889d338-004f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:01:85:4f:37:88:24:ea:2d:d0:ca:f0:e6:
4e:a4:a8:aa:8a:ee:f3:f0:34:0e:d5:b5:4e:fa:95:
75:dc:dc:4c:b6:f7:16:6c:59:7e:41:a9:7c:cb:a6:
e8:f1:06:73:97:93:63:48:58:82:81:b4:4f:48:6b:
7a:20:18:38:be:e0:ab:01:26:31:78:b0:95:7f:79:
a6:d5:4f:6a:7d:26:f7:0e:96:4f:d3:7c:9c:f1:cd:
82:17:ff:e8:e8:f8:e6:49:9f:d7:74:e9:cf:14:b9:
2c:a9:5f:68:1a:50:44:39:0e:d1:3b:52:54:ca:8e:
44:d0:96:93:2c:08:7f:e3:99:ae:73:00:93:41:cb:
39:7f:c7:3f:71:fc:48:3a:62:4e:9f:5a:99:97:de:
59:6a:fd:3c:48:60:62:be:ec:35:fd:22:e7:af:b0:
9e:b1:8a:9c:62:6e:57:8f:5b:e6:c4:39:29:a1:43:
5b:29:e3:58:f1:65:9e:a2:96:c8:47:f1:c4:3d:a2:
3d:05:f3:e8:9e:05:d1:db:db:82:70:40:82:c2:6c:
de:db:0b:11:aa:b1:4d:9b:fd:ed:53:34:e7:a4:0d:
51:da:21:d5:08:b8:e3:81:3a:ee:20:a8:23:ee:bf:
de:77:e2:68:92:d0:ae:18:62:0f:b1:39:17:1a:3f:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:85:ED:00:F4:FE:5F:FD:0A:43:7F:33:97:92:61:0D:80:66:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8352DAC46D1C11F0B50B1295DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:71:4b:c8:45:2a:6d:bb:51:fd:cf:a3:8d:5d:0c:c7:9b:ba:
65:f4:86:f9:23:ce:63:ec:9b:dd:4e:4a:59:3d:e6:80:36:6c:
34:26:ff:61:ca:e2:45:6b:41:df:4d:41:e9:05:df:2d:3b:ee:
e4:b2:12:5c:78:86:18:59:10:d0:43:ea:c5:1d:b5:45:6b:20:
13:2a:28:a6:14:40:3c:29:8e:f2:2f:33:c8:7f:7e:bc:a3:54:
5a:4d:12:44:55:5e:bb:c8:95:c1:a1:33:be:3c:89:67:3e:dc:
6f:c5:a7:a8:40:02:74:b7:54:72:4b:dd:d3:78:e9:83:16:48:
b9:63:63:ed:2d:c9:94:79:97:44:63:14:59:61:eb:f7:b8:7c:
4c:d0:83:28:72:bb:7a:23:c7:22:a1:45:88:5f:68:41:4f:7e:
92:ad:6c:ee:89:53:e5:3a:77:ed:e5:e1:19:e6:d6:c2:ee:e0:
41:64:5a:a4:76:9d:59:42:a9:80:ac:0c:fd:d6:0c:73:1a:09:
b7:93:ce:77:63:db:fb:01:13:d6:85:13:23:c0:ee:8f:eb:0a:
25:18:16:1f:a2:6c:1c:a7:fe:2e:7f:04:4a:07:be:c3:e0:a9:
b5:31:d5:03:a5:19:76:a6:cf:30:6e:3b:e3:a2:16:2d:71:64:
51:1a:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:52 2025 by rpki-client