Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6F18EE6469F11F09CFDB08EDAE4EC9C.roa
File: B6F18EE6469F11F09CFDB08EDAE4EC9C.roa (raw, json)
Hash identifier: yRVuz5H1L6oWw8mEOIJ95WgdJ+gWiPp8mneptZR+iOA=
Subject key identifier: 6B:16:CD:82:BF:2A:22:E6:98:DB:4D:25:2D:2E:5E:7B:03:76:55:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6F18EE6469F11F09CFDB08EDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:40:24 +0000
ROA not before: Wed 11 Jun 2025 08:40:19 +0000
ROA not after: Mon 16 Jun 2025 08:40:19 +0000
asID: 152849
IP address blocks: 156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88896 (0x15b40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:40:19 2025 GMT
Not After : Jun 16 08:40:19 2025 GMT
Subject: CN=684940f7-2576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:b3:3c:d1:8c:29:c1:90:8e:91:c1:ac:14:
a8:ab:4b:18:44:36:4e:7e:1b:37:a5:21:4b:0f:9c:
0c:1a:e5:91:54:2a:1b:34:0d:65:2e:3a:f5:d0:96:
40:b5:09:0d:89:e9:bb:c1:c1:fb:d0:ef:c5:b0:2c:
3c:9c:75:cb:0a:47:6c:8d:b1:6d:5f:41:c3:e7:4e:
f5:1e:76:66:f0:d6:1c:aa:da:13:f8:26:ed:bb:55:
62:92:f3:a5:21:88:f2:6a:34:89:2b:d1:c6:b9:2f:
3d:5e:28:2a:40:0f:40:e9:2f:af:59:bc:26:84:30:
c7:84:fe:ba:56:f7:a9:f9:ea:d9:2f:35:30:16:b2:
62:c2:87:99:b9:eb:97:9c:c0:8d:4b:8d:68:5e:49:
e4:8b:6e:fa:29:ec:66:65:f6:55:42:84:96:dc:3e:
20:37:0a:f9:28:20:6f:2c:36:43:56:80:c4:b1:91:
62:5b:f4:8d:3e:08:c8:58:b0:00:57:fa:62:30:fa:
95:eb:52:19:04:1e:b8:62:74:2e:62:fb:4b:c4:ce:
92:28:f8:f5:f2:d1:cb:b1:f4:dd:ad:63:8f:71:36:
da:da:e3:e0:c7:c8:8f:8e:3b:bd:6c:8c:53:72:07:
76:06:14:f5:3a:8f:c3:51:83:56:b0:26:99:a1:e5:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:16:CD:82:BF:2A:22:E6:98:DB:4D:25:2D:2E:5E:7B:03:76:55:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6F18EE6469F11F09CFDB08EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:fc:19:41:85:4a:6e:7e:c5:7a:6b:cc:25:76:ad:db:20:ef:
dd:e0:db:1b:af:c7:13:56:6e:52:1c:9b:e4:97:c4:33:4f:07:
e3:28:75:93:de:a6:35:dc:f7:ba:4d:43:c8:98:91:23:2b:80:
e1:ff:f6:78:36:2a:93:91:34:cf:04:98:18:bd:88:5e:99:6c:
bc:6c:4f:d0:ee:05:ef:86:c1:8e:10:4c:ff:0a:ab:a0:7a:43:
aa:fc:67:48:ec:df:d9:5c:2d:a3:66:36:37:18:df:41:d1:41:
a8:b9:10:64:7f:8c:3b:cf:0a:27:4c:26:40:37:b5:4f:f1:fe:
5e:bb:2d:b1:c3:33:0a:d4:77:e9:d2:36:be:b1:be:97:0a:b7:
7e:4d:d3:ad:22:3c:a0:66:cc:af:78:a2:fd:0a:bb:31:58:6b:
d9:70:01:f6:65:02:0c:41:c9:a4:d0:d8:c9:e3:f7:31:b2:fb:
d6:2b:d3:b8:90:9a:56:61:02:67:30:54:8b:4e:f3:b8:6e:ba:
a0:c4:14:45:b6:ee:79:ad:9b:93:28:d6:09:7f:48:25:81:6e:
74:aa:c9:1c:b7:0d:81:3d:d2:18:26:89:97:8c:ed:26:3d:2f:
24:a6:e7:1d:37:e5:85:3e:e0:40:7f:46:b0:cb:ec:7c:03:87:
48:c9:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:50 2025 by rpki-client