Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6C24F4A460211F0A03E908DDAE4EC9C.roa
File: E6C24F4A460211F0A03E908DDAE4EC9C.roa (raw, json)
Hash identifier: n1xi2I60+QThU0mOc3P8XVAT5UXnevA4Bc+q7bxYedM=
Subject key identifier: A3:9D:EC:49:6B:94:44:35:ED:B6:C9:A3:22:B2:23:CD:82:0A:1E:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6C24F4A460211F0A03E908DDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:57:53 +0000
ROA not before: Tue 10 Jun 2025 13:57:48 +0000
ROA not after: Mon 16 Jun 2025 13:57:48 +0000
asID: 54600
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88821 (0x15af5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 13:57:48 2025 GMT
Not After : Jun 16 13:57:48 2025 GMT
Subject: CN=684839e1-7031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:95:37:72:43:24:ef:f7:f4:75:86:09:20:
ca:a5:3b:e8:6c:99:65:85:07:b4:75:f9:03:00:50:
39:ee:26:41:43:ba:66:90:91:57:c8:00:30:01:9a:
af:a8:3c:28:53:ce:d8:fd:70:f1:fd:c7:85:17:87:
5e:c5:69:bf:7a:2c:d3:64:ff:57:71:08:47:a7:97:
4d:1d:32:d4:da:e6:28:2f:84:55:75:9b:18:d9:f6:
96:0e:5b:d0:6a:df:9d:f9:8c:0a:70:15:26:11:f4:
d5:a5:89:40:aa:dd:20:d1:b3:23:ea:cb:ae:a9:6d:
dd:38:66:ac:19:16:cb:f7:aa:63:ab:cc:24:ba:c4:
e9:08:e4:81:4c:dd:c7:5f:fd:ab:45:37:1c:2e:6c:
d7:a4:c5:e4:a0:12:65:da:a2:97:88:e4:f5:e6:fb:
e2:23:07:8e:8a:dd:63:f1:50:e4:14:7f:e6:70:3e:
38:4e:34:77:a8:1a:63:e9:f9:e1:d6:2e:d4:08:8f:
8f:99:9b:5b:68:00:2d:7c:cc:02:5d:d9:26:9b:90:
9b:e9:0e:29:bf:13:b5:ee:63:cd:84:05:47:93:a3:
9e:ea:f5:10:28:6e:a0:16:de:9c:e4:cf:34:93:45:
40:d4:c9:fa:eb:f8:3c:a3:54:07:6e:df:3b:0c:38:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:EC:49:6B:94:44:35:ED:B6:C9:A3:22:B2:23:CD:82:0A:1E:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6C24F4A460211F0A03E908DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:55:ec:89:18:bb:64:32:46:5a:cc:d0:68:ad:16:f6:f0:b1:
1f:64:b1:41:12:b4:c0:c5:9e:a9:3d:ab:17:ce:6b:3c:28:0f:
8e:1f:d3:fb:af:b6:43:d1:3b:d9:41:4b:69:5e:17:40:9d:bb:
9e:35:ea:09:48:97:6a:e6:bb:87:ff:99:33:cd:72:d3:9c:15:
7b:0d:be:4f:c9:c4:c9:e0:1b:c4:42:5e:11:3f:8a:01:2b:43:
e3:6b:64:de:d0:98:29:fe:ee:49:1e:2b:80:60:38:f0:a3:db:
ec:73:5a:bb:f6:4c:70:65:cd:a5:ca:2a:42:1c:85:92:95:67:
0a:fa:c6:6a:26:37:24:e5:15:97:4c:1f:e6:b3:ab:a2:41:23:
f7:21:e8:af:4c:1b:bf:4a:b1:08:d6:17:01:ba:7a:5e:51:64:
e0:3f:07:03:e2:b1:4c:8c:64:19:a3:03:4f:e8:c3:74:65:c9:
bb:90:0b:9e:4a:5f:72:16:83:47:e5:d3:e9:1b:96:e5:e7:6e:
e3:a0:0e:13:63:e0:52:ef:ae:58:15:a0:7b:32:43:c4:b7:12:
3f:44:30:87:75:91:61:f5:b2:a3:7f:bf:7c:c7:aa:0f:e6:c8:
da:7b:d6:26:08:9a:6d:5b:34:11:f9:a6:96:9f:80:5c:50:07:
dd:d0:04:ad
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVr1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEwMTM1NzQ4WhcNMjUwNjE2MTM1NzQ4WjAYMRYw
FAYDVQQDEw02ODQ4MzllMS03MDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqC2VN3JDJO/39HWGCSDKpTvobJllhQe0dfkDAFA57iZBQ7pmkJFXyAAw
AZqvqDwoU87Y/XDx/ceFF4dexWm/eizTZP9XcQhHp5dNHTLU2uYoL4RVdZsY2faW
DlvQat+d+YwKcBUmEfTVpYlAqt0g0bMj6suuqW3dOGasGRbL96pjq8wkusTpCOSB
TN3HX/2rRTccLmzXpMXkoBJl2qKXiOT15vviIweOit1j8VDkFH/mcD44TjR3qBpj
6fnh1i7UCI+PmZtbaAAtfMwCXdkmm5Cb6Q4pvxO17mPNhAVHk6Oe6vUQKG6gFt6c
5M80k0VA1Mn66/g8o1QHbt87DDh0qwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKOd
7ElrlEQ17bbJoyKyI82CCh5HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNkMyNEY0QTQ2MDIxMUYwQTAzRTkwOEREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQAqVeyJGLtkMkZazNBorRb28LEfZLFBErTAxZ6pPasXzms8KA+OH9P7r7ZD
0TvZQUtpXhdAnbueNeoJSJdq5ruH/5kzzXLTnBV7Db5PycTJ4BvEQl4RP4oBK0Pj
a2Te0Jgp/u5JHiuAYDjwo9vsc1q79kxwZc2lyipCHIWSlWcK+sZqJjck5RWXTB/m
s6uiQSP3IeivTBu/SrEI1hcBunpeUWTgPwcD4rFMjGQZowNP6MN0Zcm7kAueSl9y
FoNH5dPpG5bl527joA4TY+BS765YFaB7MkPEtxI/RDCHdZFh9bKjf798x6oP5sja
e9YmCJptWzQR+aaWn4BcUAfd0ASt
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:28:11 2025 by rpki-client