Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB2A5614694811F094CA34A5DAE4EC9C.roa
File: DB2A5614694811F094CA34A5DAE4EC9C.roa (raw, json)
Hash identifier: aWwbn5RTKsL/cZc41jc16EM4lUCdZiXFX/OWyY5sRpY=
Subject key identifier: 03:C4:B5:78:70:DD:99:52:87:B7:3C:48:40:7A:B7:F9:4C:A5:BD:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB2A5614694811F094CA34A5DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 11:16:49 +0000
ROA not before: Fri 25 Jul 2025 11:16:44 +0000
ROA not after: Fri 08 Aug 2025 11:16:44 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92092 (0x167bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 11:16:44 2025 GMT
Not After : Aug 8 11:16:44 2025 GMT
Subject: CN=688367a1-cce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:af:04:93:f9:92:ce:81:3d:67:f1:a0:80:
89:44:c4:23:e9:f0:ee:41:be:86:21:69:b1:ca:3c:
3c:63:69:74:96:78:28:27:63:78:27:72:9f:2c:d9:
d6:7e:c1:de:ba:8a:c5:df:4f:91:98:c9:ad:6e:15:
23:c4:43:36:c2:32:e9:49:06:6b:a0:39:d4:08:1c:
67:c6:bf:27:8f:bd:4d:c2:05:7d:3c:c0:61:5a:a9:
a8:9b:2f:4d:08:99:7d:f5:c7:f0:d3:19:0b:27:b2:
e0:4d:ce:98:8b:6f:4e:7b:cd:8f:ab:73:33:83:c6:
df:ba:a3:3b:42:72:45:16:a9:98:0b:9a:b1:65:f5:
fd:b2:bd:d5:8c:f7:73:99:02:9f:3d:f9:6c:51:2c:
0b:08:00:c4:ee:40:97:64:0f:24:07:dc:f0:2e:23:
11:8c:c3:bb:fa:0e:81:b8:6c:b4:7c:00:16:e9:b4:
1a:d5:47:45:b9:77:49:d1:fe:b3:0e:53:4b:0c:d7:
50:95:4e:de:e1:28:b2:0b:0d:d0:5a:1e:b1:04:22:
a3:1f:b8:c4:16:a7:38:36:bb:b0:7c:a8:25:4a:46:
60:42:54:0e:ba:0f:36:37:ac:38:9b:b4:05:0d:29:
18:cb:29:36:57:cf:4d:ad:d1:7b:e7:99:5f:77:5e:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:B5:78:70:DD:99:52:87:B7:3C:48:40:7A:B7:F9:4C:A5:BD:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB2A5614694811F094CA34A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ce:33:cb:dd:ca:4a:5a:c2:e7:e1:3c:a3:fc:81:72:e1:e0:
8c:92:5c:90:b1:1b:76:3b:eb:c0:ab:11:79:82:d0:be:a0:9f:
67:26:c1:d3:a0:ba:77:2d:26:cb:1a:80:f6:5b:11:73:02:b5:
a7:76:76:15:3e:9d:7d:77:fb:ae:b4:7d:6c:1b:73:b3:be:97:
7c:d3:3a:40:7c:fb:2e:61:0e:cd:37:6f:dd:1a:2a:12:ca:0b:
e7:9a:84:18:2b:60:a1:c5:ce:75:9e:2e:cc:18:22:96:52:8e:
30:8b:9d:f8:0c:8c:5a:a5:cd:90:23:48:c2:70:78:6c:17:81:
c3:09:f1:bb:77:60:71:f7:d5:7c:8d:fe:18:73:d7:35:60:26:
1e:81:ca:e6:3a:d4:c9:29:dd:90:b7:ef:9f:cb:12:83:1e:5d:
fb:19:ec:da:fa:b8:03:92:b9:b5:1d:82:9b:48:ed:50:75:82:
92:ad:e2:03:0a:d1:8c:4c:0a:6f:6c:82:ce:d9:fc:be:5e:bc:
42:ce:76:46:f4:c1:a8:1b:80:ff:ad:86:7d:75:aa:d2:92:12:
db:fc:d2:fd:69:09:e8:88:92:54:63:ab:c1:c8:62:c6:fe:90:
08:27:7e:f2:02:0a:26:1e:2a:46:51:19:72:a5:c4:46:78:06:
1f:16:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:01 2025 by rpki-client