Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3623D6A469011F093E48AADDAE4EC9C.roa
File: C3623D6A469011F093E48AADDAE4EC9C.roa (raw, json)
Hash identifier: k46n9f+CElUen2inLuj+LBLY+uQUz/nY4glbwAxmZAw=
Subject key identifier: 6F:7B:09:0A:88:40:92:0C:3F:D6:04:F5:B5:77:31:80:A9:CC:1F:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3623D6A469011F093E48AADDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 06:53:22 +0000
ROA not before: Wed 11 Jun 2025 06:53:17 +0000
ROA not after: Mon 16 Jun 2025 06:53:17 +0000
asID: 400619
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88844 (0x15b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 06:53:17 2025 GMT
Not After : Jun 16 06:53:17 2025 GMT
Subject: CN=684927e2-011f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:8a:35:ef:75:a4:cb:d9:2c:ec:eb:32:5e:
ff:20:b4:84:e4:b2:8f:92:d1:db:d9:88:74:53:ba:
e3:b9:0e:a8:41:52:3b:45:a9:d6:17:bf:f9:c9:7f:
05:0d:f4:f8:62:b9:e8:95:55:bd:35:a3:ef:1b:00:
c7:d9:50:63:df:74:dc:8e:17:8e:0b:0a:c0:d8:6b:
97:92:55:26:93:52:35:48:34:fa:b5:34:f5:63:f8:
94:7f:ac:ea:bf:31:5e:41:29:de:76:21:40:ea:01:
dd:81:06:3d:b1:18:69:1a:b5:80:ca:d8:0e:0e:e8:
91:8e:f1:a8:ed:1d:00:62:67:26:73:a6:57:4d:59:
ee:ac:e2:ce:31:0f:b5:77:94:23:c5:c5:91:ae:2b:
ae:aa:cc:bb:d7:6d:39:5f:b5:ad:80:9c:62:ee:d1:
a7:5d:57:8a:b8:28:ec:76:e1:bd:54:c0:21:75:10:
dd:4b:3f:ca:5c:b1:84:88:ab:e0:4d:6c:55:c3:89:
3b:b3:f9:3e:80:17:8e:6d:e1:00:c9:2c:43:dd:bd:
b1:ea:2a:95:d7:88:c8:d6:c9:43:2d:16:01:c9:43:
56:21:52:3e:e3:53:12:f2:ca:fb:33:8a:b6:b9:d3:
7f:f2:94:b6:cb:8e:53:c6:d6:95:7b:c4:6e:f9:75:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:09:0A:88:40:92:0C:3F:D6:04:F5:B5:77:31:80:A9:CC:1F:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3623D6A469011F093E48AADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
33:df:0f:b4:21:fb:ff:93:06:ed:64:5c:2c:c5:66:03:83:83:
a1:d2:9c:65:77:f6:d8:d9:11:01:ea:64:59:e3:27:17:ba:68:
9e:a0:5a:93:3d:6c:60:e3:81:17:ec:5c:57:aa:f8:ac:ef:32:
03:5b:32:d3:4c:b9:3d:de:c3:c5:d1:f8:a7:7a:71:f4:5d:b1:
77:4f:b7:d9:6d:a8:1e:70:ab:1b:ce:8c:de:f1:7e:8a:9f:e6:
69:06:96:79:13:60:a5:cc:dc:30:43:8f:8f:10:b1:6f:4a:00:
8c:d1:b5:db:b4:bf:f2:c4:a3:4f:c5:63:14:8f:fc:df:ff:95:
ba:d8:42:e5:9d:d7:56:44:6f:99:2d:40:b5:d7:f4:b1:4d:20:
22:49:47:be:e5:a3:f9:1f:87:4a:bc:b7:85:7a:fc:44:2a:1f:
46:81:7d:d1:16:41:df:ad:6e:42:44:09:d7:93:d9:58:26:8f:
58:6d:fc:2b:6f:61:c0:c9:0d:20:a2:59:2e:a2:be:7f:32:f1:
07:c5:98:d1:d9:52:23:3c:9b:26:58:4f:55:e9:6f:48:72:03:
3b:7c:01:57:ca:76:c8:b9:0e:fb:9a:b1:42:40:50:aa:a3:9a:
4c:37:5a:33:30:d7:57:c6:f3:17:1f:62:d6:b5:ba:66:fc:4c:
7f:71:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:15:49 2025 by rpki-client