Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FB549DE469111F08713F7B2DAE4EC9C.roa
File: 8FB549DE469111F08713F7B2DAE4EC9C.roa (raw, json)
Hash identifier: kN59fSBRWGT6pjSV3hOoG79L95WkPQw5/7Nki8x7FcI=
Subject key identifier: 1F:C6:AE:CB:6B:07:4C:10:8D:0F:00:0F:A5:A2:23:5F:33:98:6D:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FB549DE469111F08713F7B2DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 06:59:05 +0000
ROA not before: Wed 11 Jun 2025 06:58:58 +0000
ROA not after: Mon 16 Jun 2025 06:58:58 +0000
asID: 18013
IP address blocks: 156.224.18.0/23 maxlen: 24
156.224.28.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88848 (0x15b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 06:58:58 2025 GMT
Not After : Jun 16 06:58:58 2025 GMT
Subject: CN=68492939-c458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:83:26:11:d8:f7:6b:97:60:d5:5d:6d:c8:
d0:a5:f9:99:f4:71:a2:63:6d:73:81:7e:ad:62:3b:
b6:11:d9:db:ad:89:d4:0a:bb:d3:7b:16:9b:83:7b:
37:10:70:b8:0a:fd:64:d8:65:af:ca:73:d6:59:44:
3f:a5:eb:03:65:6e:8c:44:a1:04:5b:c5:7a:e7:27:
cd:cb:fe:32:de:10:ca:45:fd:2f:7e:f4:fd:61:e3:
b4:de:3f:cb:1e:76:a9:f2:aa:57:6d:c9:9a:f1:27:
ba:d2:30:b9:b0:da:c0:8b:27:69:dc:f4:c6:54:7f:
38:2a:34:9a:34:88:4d:3b:d2:07:ff:04:24:d1:de:
02:ca:13:96:84:2a:34:50:4b:66:2c:17:9d:48:ed:
3d:c5:91:99:b2:6c:ab:f0:b8:c7:fb:a2:64:03:50:
67:fb:24:68:5d:4d:f6:8f:0f:a0:07:94:1a:33:45:
b0:dc:ef:93:80:75:90:0a:3e:0e:29:08:e3:0f:ee:
05:69:d9:ba:8b:75:80:6f:28:62:c3:ea:93:e4:04:
9d:3b:39:d6:20:ae:a8:77:a8:ef:78:92:fa:19:e8:
4d:20:eb:49:01:28:a3:52:b7:e0:82:38:2d:e0:91:
4a:43:50:eb:86:7f:91:fd:2f:ca:26:cf:01:3f:c3:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C6:AE:CB:6B:07:4C:10:8D:0F:00:0F:A5:A2:23:5F:33:98:6D:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FB549DE469111F08713F7B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
156.224.28.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:69:31:65:42:4a:cb:01:67:b5:98:d8:29:cd:89:9b:a0:fd:
1a:8d:71:bb:54:72:7e:4c:5a:40:e4:38:9f:9d:9d:eb:c0:4d:
17:88:ab:cf:8c:9a:eb:d1:d2:e9:a9:6c:c1:b7:67:31:c7:c3:
aa:67:bd:2c:f6:3d:7b:b2:59:4f:e5:59:41:3e:dc:a7:f5:55:
62:2e:85:28:90:8b:8a:39:99:f4:d8:b5:32:0f:63:88:01:f0:
ad:cf:04:7c:f1:9a:e1:a7:a8:2c:88:8f:8f:a4:af:f9:bb:a0:
f8:5d:80:85:1c:b9:3a:b6:11:c6:4b:4f:4c:c0:8c:09:c5:af:
66:9c:ef:20:bc:c4:5d:4c:9f:fd:6c:c1:70:3a:d5:7e:f8:7e:
08:19:3c:4e:56:a5:ea:ce:09:d9:d6:eb:0b:64:64:69:ba:f7:
98:e4:74:93:bf:9c:9a:e2:41:05:c6:ec:3b:3e:6c:7e:44:94:
f3:ac:37:63:d3:84:58:8c:e7:96:a6:78:43:bd:3d:d9:a0:d9:
ec:4e:3e:d2:f5:7d:58:db:fd:3f:bd:67:70:f1:f4:91:03:e6:
ae:38:72:fe:55:47:06:21:b6:88:59:33:0f:a6:74:de:d5:e7:
63:e2:66:50:2c:59:89:30:aa:42:71:98:81:66:22:4c:4d:d9:
34:55:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:00:38 2025 by rpki-client