Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA44B3846A611F0BF68ACBDDAE4EC9C.roa
File: EEA44B3846A611F0BF68ACBDDAE4EC9C.roa (raw, json)
Hash identifier: +3gLjUVg0UdBoh7ThhxNYUC0Bp/B/Wo2vRLUifGHiXE=
Subject key identifier: 64:5A:AF:22:FA:AB:3A:FD:EA:D5:9F:AC:09:6D:0E:28:0C:B2:94:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA44B3846A611F0BF68ACBDDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 09:32:03 +0000
ROA not before: Wed 11 Jun 2025 09:31:59 +0000
ROA not after: Mon 16 Jun 2025 09:31:59 +0000
asID: 152849
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88914 (0x15b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 09:31:59 2025 GMT
Not After : Jun 16 09:31:59 2025 GMT
Subject: CN=68494d13-6045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:22:ce:5c:5a:37:67:1b:52:c7:2f:2f:ee:
54:68:9b:74:6a:86:d2:72:b6:28:ce:52:71:8c:bd:
82:1e:ef:81:06:e9:71:5e:ba:03:34:ab:b7:d5:c1:
50:2d:6c:00:58:c8:d5:2d:2f:65:19:21:77:3f:c0:
7b:d6:f4:c9:1d:4f:79:6b:f9:dd:d3:4e:23:83:48:
2f:5c:cb:50:73:9b:60:1d:98:28:e7:0d:62:d0:7f:
c7:91:bb:6f:23:d9:6e:4f:0d:f1:fe:6c:37:41:61:
dd:4c:96:9a:ec:9b:e2:da:f9:9c:9e:7f:20:c8:06:
2c:58:cb:fb:d4:36:a9:84:3d:40:24:af:d5:68:76:
f1:2b:64:62:dd:d2:99:ca:31:bf:ba:44:a3:c4:01:
24:82:8a:aa:d7:19:7c:9b:99:94:d8:f3:9e:7d:b9:
f9:dc:88:4d:6f:a8:db:b6:c5:9e:eb:ff:25:c9:c7:
02:1c:85:12:06:ff:e6:f3:ef:ac:77:c4:6e:9a:14:
65:4f:dc:d4:71:50:ad:6f:05:c4:59:2e:93:54:72:
70:58:bc:80:6b:c2:a0:cc:25:65:25:f9:fe:6f:a9:
24:e8:73:9d:c9:a8:59:66:a1:8c:f4:eb:db:af:1c:
e8:23:15:68:ae:3e:59:66:34:d0:39:cd:51:82:1d:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5A:AF:22:FA:AB:3A:FD:EA:D5:9F:AC:09:6D:0E:28:0C:B2:94:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA44B3846A611F0BF68ACBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
64:dd:7e:69:b6:74:a9:dd:f4:01:45:48:cf:fd:53:13:7b:c1:
bf:ed:4f:04:08:29:bc:90:e0:e5:e2:f2:c3:8e:00:d2:b6:e8:
b4:93:f7:40:86:b9:fc:97:ac:78:36:d7:c5:96:70:72:fe:cc:
c2:d4:b9:cc:20:67:9a:55:b3:d5:c2:1b:8a:bb:4e:79:1c:cc:
ca:3c:9c:65:58:c5:34:d5:d8:10:d5:d3:3f:21:61:23:61:ab:
39:81:73:43:4d:ef:4e:21:f7:7b:67:9a:c9:6b:f3:25:36:79:
4c:6a:b0:01:39:65:82:3b:4c:73:71:34:ab:95:90:5b:18:d3:
01:7c:a1:71:15:50:ec:4e:9c:6d:b7:85:19:05:59:f1:a3:b9:
5a:f6:48:7a:88:ff:48:61:ac:0c:e4:36:df:c7:53:13:2f:e5:
28:cc:78:b4:17:10:27:68:50:2b:7c:87:75:bd:fe:52:30:e5:
5d:ac:c2:65:3f:f5:ce:0d:49:52:08:b5:dd:0d:41:fc:d3:cf:
c9:be:0f:7a:82:75:ca:a5:bd:96:41:74:d5:91:66:92:26:39:
47:3a:4d:06:91:dc:b7:73:21:00:d9:4e:1e:0b:b9:c5:77:ab:
0a:d0:a3:fd:ad:18:f1:3f:ef:8a:a0:93:b4:17:02:88:af:34:
1d:6f:c3:25
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVtSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjExMDkzMTU5WhcNMjUwNjE2MDkzMTU5WjAYMRYw
FAYDVQQDEw02ODQ5NGQxMy02MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsA8izlxaN2cbUscvL+5UaJt0aobScrYozlJxjL2CHu+BBulxXroDNKu3
1cFQLWwAWMjVLS9lGSF3P8B71vTJHU95a/nd004jg0gvXMtQc5tgHZgo5w1i0H/H
kbtvI9luTw3x/mw3QWHdTJaa7Jvi2vmcnn8gyAYsWMv71DaphD1AJK/VaHbxK2Ri
3dKZyjG/ukSjxAEkgoqq1xl8m5mU2POefbn53IhNb6jbtsWe6/8lyccCHIUSBv/m
8++sd8RumhRlT9zUcVCtbwXEWS6TVHJwWLyAa8KgzCVlJfn+b6kk6HOdyahZZqGM
9OvbrxzoIxVorj5ZZjTQOc1Rgh00wwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGRa
ryL6qzr96tWfrAltDigMspR/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRUE0NEIzODQ2QTYxMUYwQkY2OEFDQkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQBk3X5ptnSp3fQBRUjP/VMTe8G/7U8ECCm8kODl4vLDjgDStui0k/dAhrn8
l6x4NtfFlnBy/szC1LnMIGeaVbPVwhuKu055HMzKPJxlWMU01dgQ1dM/IWEjYas5
gXNDTe9OIfd7Z5rJa/MlNnlMarABOWWCO0xzcTSrlZBbGNMBfKFxFVDsTpxtt4UZ
BVnxo7la9kh6iP9IYawM5Dbfx1MTL+UozHi0FxAnaFArfId1vf5SMOVdrMJlP/XO
DUlSCLXdDUH808/Jvg96gnXKpb2WQXTVkWaSJjlHOk0Gkdy3cyEA2U4eC7nFd6sK
0KP9rRjxP++KoJO0FwKIrzQdb8Ml
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:15:01 2025 by rpki-client