Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE548D2A469A11F0AA1E6CEEDAE4EC9C.roa
File: EE548D2A469A11F0AA1E6CEEDAE4EC9C.roa (raw, json)
Hash identifier: 0AHScg0m2eP/LMcWJV9ZRUWBwT3v/a/Lq3kdyHcpjDE=
Subject key identifier: BB:23:61:DB:8A:E3:1F:D6:37:FA:FE:D9:CD:0D:AA:FD:D8:DE:C9:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE548D2A469A11F0AA1E6CEEDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:06:09 +0000
ROA not before: Wed 11 Jun 2025 08:06:04 +0000
ROA not after: Mon 16 Jun 2025 08:06:04 +0000
asID: 40065
IP address blocks: 156.224.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88881 (0x15b31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:06:04 2025 GMT
Not After : Jun 16 08:06:04 2025 GMT
Subject: CN=684938f1-24dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:de:a4:fa:04:04:45:4e:bd:a9:ac:30:3e:
0d:f7:58:04:40:f9:54:1e:a5:36:b1:6e:b4:e3:e1:
62:c7:f5:89:48:4f:37:d1:d1:04:c9:33:10:bb:f4:
ab:4c:5f:ed:11:68:b2:76:f4:0f:30:c3:dd:be:5e:
28:5e:0d:87:93:39:67:e2:2e:f4:b7:33:da:11:6d:
8c:37:15:cd:72:18:fb:54:e8:cb:05:b0:45:6a:3f:
cc:c0:d1:52:f4:8c:9e:aa:fe:e8:0a:fd:94:ca:26:
bf:d2:1e:e6:b2:94:88:80:05:ec:e4:a3:8c:a2:3e:
dc:1b:b5:12:04:54:5d:74:c9:7a:ab:7a:56:57:fe:
af:52:e7:4b:46:43:30:26:aa:2b:91:28:83:93:4d:
ff:c9:74:bb:87:0f:50:a1:14:5f:89:34:5a:43:a5:
87:c6:ec:d3:e6:b5:cd:f4:2e:30:fb:e4:63:f7:c4:
41:b2:a1:68:fb:03:3f:88:c8:36:3f:3a:01:a7:f8:
92:ce:7e:cc:2e:9f:5d:21:5c:be:e8:51:e7:c4:4d:
96:b7:a5:fe:b4:38:a6:90:93:d5:6b:05:14:d9:68:
d9:b8:0d:c4:38:c3:e4:a8:8c:6c:80:23:13:24:06:
5e:1f:bd:49:bd:e6:af:8d:b9:b2:ad:7f:35:cb:94:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:61:DB:8A:E3:1F:D6:37:FA:FE:D9:CD:0D:AA:FD:D8:DE:C9:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE548D2A469A11F0AA1E6CEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/23
Signature Algorithm: sha256WithRSAEncryption
31:91:a4:d4:a0:20:65:e7:33:88:dd:0c:fc:06:87:6e:0d:36:
6f:9e:8c:62:e7:4d:12:20:5a:8e:ed:54:6f:1d:97:8a:44:92:
53:e3:9d:67:28:f6:e9:7c:88:e9:e8:93:82:fc:7f:b4:98:9a:
9a:5e:ac:8f:04:88:4c:cf:72:bc:9a:a4:70:de:3d:df:0b:11:
b6:e6:94:c1:55:e4:4f:6a:e2:2c:e4:25:c6:b0:89:e2:a2:fb:
5e:ae:3e:c1:9d:e8:16:e2:b7:f7:35:56:3f:5f:8a:3f:8c:09:
58:9b:63:52:8d:7f:6a:87:d7:be:d9:99:1d:6f:29:32:1b:72:
4a:84:6a:48:c9:43:0e:20:74:24:9d:b6:ce:c0:a8:4b:8d:86:
ee:39:e7:79:b3:9c:85:ed:cb:89:71:38:6e:de:17:23:eb:52:
62:b9:27:23:68:41:b6:e4:7a:07:86:45:f9:8d:0e:3c:ad:90:
2a:54:90:34:4b:db:c5:2b:84:7f:ec:f4:45:fa:b9:ad:43:43:
f6:be:03:a9:3b:b5:02:54:62:a2:15:6d:61:ed:fe:1b:6c:70:
33:8e:5f:1f:b1:16:77:ad:7d:5c:ce:de:98:4e:3a:4c:b2:c9:
58:1a:26:91:71:3a:c2:b0:85:73:a1:27:af:89:72:bc:c5:a5:
be:19:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:20:13 2025 by rpki-client