Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B89D6A460311F08E070E92DAE4EC9C.roa
File: B8B89D6A460311F08E070E92DAE4EC9C.roa (raw, json)
Hash identifier: bwP3m8MZnUpz0HlUBc+3XjWq01cpgs+aIE0vHTfltYo=
Subject key identifier: E5:F3:5E:7F:52:B8:72:49:00:91:1B:C2:2A:8C:14:90:DD:00:ED:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B89D6A460311F08E070E92DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 14:03:45 +0000
ROA not before: Tue 10 Jun 2025 14:03:40 +0000
ROA not after: Mon 16 Jun 2025 14:03:40 +0000
asID: 55020
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88827 (0x15afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 14:03:40 2025 GMT
Not After : Jun 16 14:03:40 2025 GMT
Subject: CN=68483b41-2f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:81:2f:02:a2:fc:20:e7:7c:95:71:0a:e2:
b2:26:b1:9c:7b:86:38:62:58:51:64:5e:d4:4f:da:
22:b5:8e:de:56:92:a1:f4:15:c8:0e:5c:df:66:8f:
6d:73:54:72:80:5b:a3:63:1a:67:a3:f3:1b:b5:e0:
c9:56:0f:4e:d3:af:82:71:58:fa:7c:a9:aa:2d:58:
f8:b7:8b:20:b0:43:50:54:57:92:ae:97:b8:a2:b0:
01:f9:58:23:08:df:dc:71:fa:fb:29:71:4e:13:27:
0f:00:90:79:47:ab:22:5b:9c:46:e3:06:4a:f5:46:
23:ed:25:71:0d:2d:d8:9e:8e:eb:3c:bc:76:63:c6:
4a:00:41:54:91:80:d3:0e:d8:18:0c:3b:18:b8:1b:
74:28:38:4a:ec:82:45:16:84:ea:4e:82:d0:d9:ab:
82:e6:8a:8e:01:8b:11:b2:ef:50:27:1e:b4:f0:07:
4c:b0:4a:d9:c6:ac:21:b5:51:c8:3e:00:b6:d4:85:
5a:31:b1:65:72:2f:dc:8e:ae:b2:42:0b:76:0d:1e:
da:35:30:fa:88:b2:74:14:11:85:86:73:57:ae:71:
9c:e2:37:53:f9:88:c4:a6:2f:ea:76:5c:64:fb:1a:
62:19:77:67:0f:e4:51:ab:8e:c1:ea:aa:68:2a:01:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:5E:7F:52:B8:72:49:00:91:1B:C2:2A:8C:14:90:DD:00:ED:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B89D6A460311F08E070E92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:5c:7c:e2:19:93:5f:93:e8:a4:b0:94:dc:b1:43:23:ad:99:
d7:6d:40:7f:c0:a1:c3:c2:51:c3:c7:88:7a:0f:e0:2f:64:5c:
f4:73:98:bc:84:59:10:25:87:d3:9a:d0:1e:28:1c:c8:00:c7:
02:cb:3a:15:8c:a6:f8:01:da:be:e8:b0:09:f4:96:8e:31:28:
44:dc:cb:36:e6:74:70:61:26:d3:37:7f:d9:0b:1c:24:58:29:
98:46:07:e3:d2:f0:7e:01:9d:23:51:f1:cc:c2:ef:fe:38:ff:
1d:50:5a:a6:6b:8e:60:e7:3b:9e:8b:cb:6a:c9:a9:56:f4:bf:
35:4c:11:2e:1d:ea:be:75:42:a1:38:70:e4:69:d4:c2:1b:da:
e2:a1:50:36:e3:86:eb:bd:da:05:92:5e:a7:5f:19:a4:ae:07:
ca:80:51:dc:c7:61:23:7f:aa:1e:15:af:1e:88:c0:49:0d:a1:
38:e7:ba:22:fd:90:e2:78:0f:da:72:0b:f4:1a:7e:77:ac:4a:
1b:e4:e9:8e:9e:1e:39:00:8f:17:a1:6b:76:73:4c:10:8f:1d:
cf:ca:31:5f:fe:6b:ff:c8:d4:14:73:38:12:f0:c1:0d:35:ed:
8f:78:a3:e5:a3:36:e2:df:d9:81:e6:06:7f:77:c4:21:7d:fa:
f5:f8:e3:a3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVr7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEwMTQwMzQwWhcNMjUwNjE2MTQwMzQwWjAYMRYw
FAYDVQQDEw02ODQ4M2I0MS0yZjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0uOBLwKi/CDnfJVxCuKyJrGce4Y4YlhRZF7UT9oitY7eVpKh9BXIDlzf
Zo9tc1RygFujYxpno/MbteDJVg9O06+CcVj6fKmqLVj4t4sgsENQVFeSrpe4orAB
+VgjCN/ccfr7KXFOEycPAJB5R6siW5xG4wZK9UYj7SVxDS3Yno7rPLx2Y8ZKAEFU
kYDTDtgYDDsYuBt0KDhK7IJFFoTqToLQ2auC5oqOAYsRsu9QJx608AdMsErZxqwh
tVHIPgC21IVaMbFlci/cjq6yQgt2DR7aNTD6iLJ0FBGFhnNXrnGc4jdT+YjEpi/q
dlxk+xpiGXdnD+RRq47B6qpoKgGOPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOXz
Xn9SuHJJAJEbwiqMFJDdAO3AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COEI4OUQ2QTQ2MDMxMUYwOEUwNzBFOTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQC5XHziGZNfk+iksJTcsUMjrZnXbUB/wKHDwlHDx4h6D+AvZFz0c5i8hFkQ
JYfTmtAeKBzIAMcCyzoVjKb4Adq+6LAJ9JaOMShE3Ms25nRwYSbTN3/ZCxwkWCmY
Rgfj0vB+AZ0jUfHMwu/+OP8dUFqma45g5zuei8tqyalW9L81TBEuHeq+dUKhOHDk
adTCG9rioVA244brvdoFkl6nXxmkrgfKgFHcx2Ejf6oeFa8eiMBJDaE457oi/ZDi
eA/acgv0Gn53rEob5OmOnh45AI8XoWt2c0wQjx3PyjFf/mv/yNQUczgS8MENNe2P
eKPlozbi39mB5gZ/d8Qhffr1+OOj
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:49:06 2025 by rpki-client