Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B76A391245FB11F08E11F7DDDAE4EC9C.roa
File: B76A391245FB11F08E11F7DDDAE4EC9C.roa (raw, json)
Hash identifier: +UZSiKxvLPpLPuMS5Jf39KoF2OigUa5eOmAWPP50gII=
Subject key identifier: 72:BF:C8:56:7E:10:0B:26:08:37:11:C1:E7:95:DC:09:E5:74:89:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015ADF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B76A391245FB11F08E11F7DDDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:06:27 +0000
ROA not before: Tue 10 Jun 2025 13:06:22 +0000
ROA not after: Mon 16 Jun 2025 13:06:22 +0000
asID: 54600
IP address blocks: 156.235.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88799 (0x15adf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 13:06:22 2025 GMT
Not After : Jun 16 13:06:22 2025 GMT
Subject: CN=68482dd3-6df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:4f:2c:5d:14:cf:cc:a3:a7:d4:d3:9d:91:
bb:db:ce:24:60:39:68:cc:e3:1c:95:e8:c0:45:c0:
db:31:e5:aa:ea:86:69:ac:4e:ae:79:78:84:d0:8e:
08:29:c7:18:e1:05:89:95:02:23:e3:62:99:a3:2d:
e6:6f:84:bf:5c:fb:13:96:90:b3:18:90:ae:6a:a1:
a3:85:01:28:cd:fc:a1:33:6d:f6:a4:95:45:10:3c:
13:cc:2f:87:1d:38:e2:99:76:18:6b:0c:be:e1:2f:
82:be:c9:30:54:8a:df:b2:26:fe:0c:d5:11:32:a2:
26:1c:37:0e:8a:28:a1:ba:53:d1:89:44:e6:4e:0c:
db:98:2a:c5:69:ab:3e:5b:f4:01:37:3c:de:09:a0:
ef:2c:27:81:7a:2a:fe:be:12:11:63:e0:2f:40:28:
58:96:0e:ee:4a:8d:cc:a3:9e:e4:e4:09:13:89:30:
64:7f:65:96:a2:67:ee:33:49:13:11:40:16:ad:03:
1c:ed:83:98:2a:a4:5a:4b:32:e3:9b:99:27:2e:11:
3a:64:ac:4d:05:70:1d:71:97:4e:0d:74:5e:b5:94:
17:6b:42:fe:cf:61:38:52:27:c0:36:68:31:68:50:
2a:fa:21:bf:d2:8f:9c:71:12:8c:2c:b4:31:98:a7:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BF:C8:56:7E:10:0B:26:08:37:11:C1:E7:95:DC:09:E5:74:89:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B76A391245FB11F08E11F7DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.96.0/21
Signature Algorithm: sha256WithRSAEncryption
48:14:ae:83:b6:40:eb:f0:d7:07:33:05:4a:ab:ad:99:ce:e1:
12:24:2b:aa:af:8d:be:72:72:d3:db:3e:3f:55:d9:c5:d8:c8:
87:fe:d7:ff:0d:10:9b:e8:b6:36:1d:46:e3:2d:21:20:2a:9f:
4b:1d:e3:07:9e:1a:4f:d3:c9:30:52:2e:f1:b5:0a:10:3f:f8:
fd:7c:7c:79:1d:22:c0:55:3a:3d:71:24:d5:41:44:05:9c:3d:
5d:9f:29:da:71:9a:44:2f:60:66:6a:f2:bb:7a:17:34:ee:dc:
73:82:ba:39:a4:4f:00:61:b9:a1:8e:35:23:35:bd:83:4e:f4:
72:49:46:be:a2:c0:f6:1d:f8:e6:6d:d5:b9:b1:1d:11:03:e8:
0a:3d:14:ba:70:14:0c:47:2e:14:c2:6f:2c:1e:8f:53:9b:c9:
ae:db:42:29:dc:c4:6a:2e:a5:2b:32:e5:fe:c2:a5:c6:41:22:
dd:a0:49:21:aa:89:d2:57:b4:6d:70:b7:be:03:55:28:6e:cc:
b7:5c:cd:fd:f0:ea:17:43:5c:83:f9:42:a8:09:ac:82:fd:20:
3d:29:7c:7a:ff:9e:75:04:3e:c6:39:4d:bd:9c:48:5d:84:0e:
54:75:10:47:24:97:27:b1:7d:cc:c7:5f:75:06:54:e2:70:f5:
c9:ca:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:15:58 2025 by rpki-client