Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE66433445F111F0A5E3969FDAE4EC9C.roa
File: EE66433445F111F0A5E3969FDAE4EC9C.roa (raw, json)
Hash identifier: q4s6bRioV5mSV9wGKRiCazC724LVaWkLZb91lfDXIuQ=
Subject key identifier: 69:7F:C3:7B:27:13:D2:53:49:F6:3E:68:4D:87:49:49:63:75:13:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE66433445F111F0A5E3969FDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 11:56:24 +0000
ROA not before: Tue 10 Jun 2025 11:56:18 +0000
ROA not after: Mon 16 Jun 2025 11:56:18 +0000
asID: 400619
IP address blocks: 156.224.16.0/23 maxlen: 24
156.224.18.0/23 maxlen: 24
156.224.20.0/22 maxlen: 24
156.224.24.0/22 maxlen: 24
156.224.28.0/23 maxlen: 24
156.224.30.0/23 maxlen: 24
156.224.63.0/24 maxlen: 24
156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88770 (0x15ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 11:56:18 2025 GMT
Not After : Jun 16 11:56:18 2025 GMT
Subject: CN=68481d68-857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:5d:47:d0:03:3e:7a:7d:9e:54:93:5e:e9:
eb:4a:74:31:48:dd:b5:d2:30:5c:62:d7:b3:e1:10:
03:ed:ce:24:af:b9:5b:19:7c:37:ba:d2:22:13:20:
fe:23:2a:96:b2:0b:db:7d:b5:a4:ee:78:6e:fa:26:
18:ca:74:31:ce:f0:f1:eb:49:09:a9:8f:2a:03:7c:
bd:1f:85:55:cd:f3:9a:d0:2c:f8:7a:bb:d0:c5:c8:
d5:0d:63:28:97:7f:82:2c:ef:eb:3c:92:17:33:b3:
5d:91:ce:96:b1:08:c1:f0:6f:b4:94:c3:81:09:e9:
e0:91:78:f2:f5:7e:f7:41:8c:33:8c:a5:e4:4c:84:
5c:7a:b1:4d:39:90:86:42:7d:1c:c1:c2:e9:37:59:
e6:83:a9:12:85:6c:c6:5b:56:90:e9:07:6c:bc:f3:
b6:03:0b:b9:48:9f:79:dc:ff:5d:87:38:56:d1:f0:
d1:72:9b:b1:e4:e6:56:08:f8:ae:03:03:df:30:d6:
0e:14:14:15:55:d3:88:ba:e8:a2:df:06:ae:99:46:
72:75:7e:31:38:3a:db:f1:7c:1c:58:88:cd:8d:04:
f7:1a:fd:2d:b8:9d:45:4b:16:53:9b:bd:f7:2a:e4:
37:a0:a3:3d:81:6d:4c:e9:af:32:5b:71:1d:7e:54:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7F:C3:7B:27:13:D2:53:49:F6:3E:68:4D:87:49:49:63:75:13:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE66433445F111F0A5E3969FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/20
156.224.63.0/24
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:96:37:be:69:db:69:dc:f4:0d:66:e9:9d:f1:ed:d9:a0:a9:
07:ce:30:5e:34:66:bc:d9:14:f7:94:43:af:67:86:d8:49:fb:
5d:db:34:db:a1:a8:80:14:df:fc:69:6c:20:03:3f:45:30:56:
68:2c:d9:55:bd:35:e2:7e:65:f9:a2:8c:20:83:7d:e1:4f:c4:
b9:23:c7:9e:4a:6a:60:6c:9d:5d:ac:85:31:d9:a0:0b:71:ec:
cb:76:1c:7d:27:86:ad:7b:b6:8e:58:d9:79:b5:ee:50:8e:59:
be:bf:ac:0e:8d:1e:60:db:6c:b4:1b:75:f0:23:b1:19:f6:af:
c5:47:f3:f6:08:c5:f4:d0:81:38:fa:9b:48:5f:01:44:5c:3e:
5d:11:53:62:d2:14:73:c2:f0:a9:dd:16:7a:fa:1e:77:ef:c2:
ed:1d:66:49:bd:dd:1a:2a:01:cd:6c:55:67:ad:8a:5d:de:0c:
eb:a0:c9:33:20:ae:8b:fd:e7:ba:59:37:26:ae:1e:d9:11:f8:
d6:44:5a:c5:21:63:35:1b:4a:0c:b7:26:8e:b9:05:1b:98:31:
0c:fa:53:a2:6d:9f:07:48:91:49:27:dd:ae:23:e9:04:29:a3:
9d:61:a3:bb:99:13:75:1b:78:7a:bf:ce:06:80:2c:fb:c0:55:
31:ce:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:30:45 2025 by rpki-client